last executing test programs: 2.224622339s ago: executing program 3 (id=642): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000340)="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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r7, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x13, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x0, @void}, 0xffffff19) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa23ba2f8aaaaaaaaaaa0c08004500001c00002000001190780000000000ec09d4c5ef63b71edfd1cb0800000000004e200008907820e73134b41e7c7582d0be607859cf1ebf"], 0x0) 2.172224471s ago: executing program 0 (id=645): r0 = socket(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x9}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x400}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendfile(r0, r1, 0x0, 0x2) 2.099397263s ago: executing program 3 (id=646): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r4 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) (fail_nth: 1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a04f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rename(0x0, &(0x7f00000001c0)='./bus/file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) 1.681312866s ago: executing program 0 (id=651): creat(&(0x7f0000000840)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x20000000, 0x0) 1.653522037s ago: executing program 3 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0xe8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000500)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) symlink(0x0, &(0x7f00000002c0)='.\x02\x00') 1.651970527s ago: executing program 4 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xd0, 0x80000000, 0x10, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x0, 0x80000000}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000680)="9577f0c45c7cd0a63493e9ab91136f5eb5ddc22dd00f9a5781aa079ee283eb56105e933ab2e3c45fdc6863850cb8b0a09729c8967866f33ae92f3264bed9aec79f5ee4e60db4452f25f79a7eecd8", 0x4e, 0x44080, &(0x7f00000007c0)={0x11, 0x10, r1, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9ee}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb3, &(0x7f0000000340)=""/179, 0x41100, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xc, 0x101, 0xb}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x3, 0xb, 0x3}, {0x5, 0x1, 0x4, 0x1}, {0x1, 0x4, 0x9, 0x2}, {0x4, 0x1, 0xd, 0x3}, {0x0, 0x4, 0xf, 0xa}, {0x3, 0x2, 0x10, 0x9}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0x7ff}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r0}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.650592848s ago: executing program 0 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000001c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000004000000000000000076"], 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2, 0x30a, &(0x7f0000001040)="$eJzs3c1rE00cwPFf0iZp+vK0p4eHB4WhggjSpSl482CRFsSA0jaCFYSt3WrINinZUIiI7UHw6tlDDx5FEMGbFxGvvfgX+HbrpTcLFkc2+9I0Wbax0trW7+fQTHd+v9nZndk2nSabjYtPFksLjvFdd0sLvSKS8cvv1z6dnn7X732j1OT4TG5MqaSI3HrwYvhtre/G63/eZGR96PbG5tjX9VMzIj9m7klSFR1V1lprNVep1BJu8nzRKRlKXbct07FUsexY1ZoyG/XmnG2pBbuytFRXZnl+oHepajmOMst1VbLqqlZRtWpdmXfNYlkZhqEGelv7/HcaCkvJtrpEXGLh+ZbWsukOUGZVtNYR0atBIeU/Zn6vszhKWsY/NrZtcnQdZM9wGLZ0dzj+6T3GHyePd/1/ftrJ9Y+TZ/rm7NXxfH5iSqkekcXHy4Xlgvfo1X/sk6LYYsna1PnZbXHniE8S7tfJK/mJUdUwJGcXV/z8leWC98thfMHPz8mg+zylKV+C/JyXr3bnp6S3KT940hGVPxbkS7IpPy3nzjTt35BB+XBHKmLLfKOdnfyHOaUuX8u37D/biAMAAAAAAAAA4DgyVGhn/T4R/qs3axiZxis+wvqsu9mN8wLC9fVRGZTt6PX50cj1/W75v+0lJwAAAAAA4CA49fsl07at6q8XpIOYrmfZmF2kRMQtiDwadjsT2+C/fo9bqtw2IrLSItLeTlcnffYL2Qve/l5O+R2T/Z6oAywkRaR5i/dmDffg7Vd+TH/k+XGS8ROgUZcIz+FIuv3Mm7bdc6iHnGkaU9FaRwZLz/4mdibyADspJLaDLf9FxuiEndqrHW0GMcGFudfeL0VfDvGFcCa4o++NYOuJGvnitWvH/ND4Fi7xAQAAADhGmv5wAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf8i+7sQW3Ld/d5X4HxHffku21s+J577/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6gnwEAAP//aQCoKQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r2, &(0x7f0000000000)="875b", 0x2, 0x8080c61) 1.513172401s ago: executing program 0 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/83, 0x53}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x7, 0x0, &(0x7f0000000580), &(0x7f0000000280)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r5}}, 0xc) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r2) close(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2e841, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 1.468486873s ago: executing program 3 (id=659): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = dup(0xffffffffffffffff) file_setattr(r1, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) fgetxattr(r0, &(0x7f0000000ac0)=@random={'btrfs.', '&\x00'}, &(0x7f0000000b00)=""/253, 0xfd) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000500)=""/195, 0xc3, 0x0, &(0x7f00000006c0)=""/205, 0xcd}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) open_tree(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x1100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/cpu_byteorder', 0x88001, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0xd, 0x1, 0x8, 0xfffffffffffffff8, 0xffffffffffffffe5}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8f3ee1d97b5e2a73}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xfffff653, 0x4, &(0x7f0000000400)=""/4, 0x41000, 0x41, '\x00', 0x0, @fallback=0x25, r2, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0x2, 0x9}, 0x10, r3, r4, 0x1, 0x0, &(0x7f0000000980)=[{0x1, 0x2, 0xd, 0x5}], 0x10, 0xfffffffe}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) fsopen(0x0, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$eJzs3M9uG0UYAPBvN/9I0tZB4oAKh0ggCAKSOhCgCInCGU7AA0RJWircpmqMREsOBXHixAFx49BX4AGqCiEh8Qq8AKpUoTQXbkZr7zpOHCd2Y8dJ+/tJI8/sjj3zeZ3VzGZ3AnhqzUbEpYgYiYjFiCjl29M8xZ1Gyuo92tpc2d7aXEmiVvvs3ySSfFvxWUn+Op0X5tKI9IeIF+60t7tx6/ZXy5XK2s28vFC9dmNh49btN69eW76ydmXtevndi+Xy0uJ75bf7FusvL792ceTjS+d//bt0f2l8fDLr75l8X2scPZnuvGs2ZpvfyV5Lj9XYyTU+7A4AANCVNB/7j9bH/6UYqecaSrGwOdTOAQAAAH1R+zB/BQAAAJ5gibk/AAAAPOGK+wAebW2uFGmItyMcu4cfRcTMzrPN2834R+OZvM7YAJ9vnY2IG68kpSzFUZ5DBgDo0v1s/HNhv/FfGs+31JuIqI+HJvvc/uyecvv4J33Q5yZ3ycZ/H0TEdtv4Ly2qzIzkpbP1oeJYcvlqZe1CRJyLiLkYm8jK5Q6fX+u0AEwui/+P5Oy5ImXtZ687NdIHoxO737O6XF1+/Ih3e/hdxPnR/eJPmuPfLISpI7Qx8u3d9zvtOzz+wardjXh13+O/c+CSg9cnWqj/HhaKX0W7/77/7dNO7Q87/uz4Tx0c/0zSul7TRu9t3Pvyrxc77Wud//Ty+x9PPq/ni3nZN8vV6s1yxHjySfv2xZ33FuWifhb/3Ev7//0X578kX+bpTH4O6NWPP/3+RjfxZylrv5gLHocs/tWejn/vmXfu/flFp/YPjz87/o01wObyLd2c/7rt4FG+OwAAADgt0vp1jSSdb+bTdH6+cb3juZhKK+sb1dcvr399fbVx/WMmxtLiSlep5XpoufFv9GZ5cU/5rYh4NiJ+Lk3Wy/Mr65XVYQcPAAAAT4npDvP/zD/HdhcCAAAAMHAzB+9Oj6sfAAAAwOAcMv8HAAAATrejrOvXlkn69DkDzoydjG7IyJzgzLDPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfb/wEAAP//TtW0Wg==") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x28) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000004c0)={{0x6c, @multicast2, 0x4e24, 0x3, 'wlc\x00', 0x12, 0x2, 0xd}, {@multicast1, 0x4e23, 0x2, 0x4, 0x7, 0x978}}, 0x44) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beea5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x8000000000000005}, 0x60) sendfile(r6, r6, 0x0, 0xe3aa6ea) 1.467479183s ago: executing program 4 (id=661): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x22, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@generic={0x8, 0x7, 0x2, 0x3, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x22}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x4, 0x1, 0x8, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x7fffffff, 0xb0, &(0x7f0000000280)=""/176, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xb, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x1, 0x2, 0x0, 0x7}, {0x0, 0x2, 0x8, 0x6}, {0x0, 0x1, 0xa, 0x2}, {0x5, 0x4, 0x0, 0x8}, {0x0, 0x4, 0xd, 0x2}, {0x5, 0x3, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0xc, 0x0, 0x4, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6b5bec", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@ifindex=r5, r3, 0x2e, 0x8, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x184, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x12, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x18, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)={0x350, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7d, 0x3, "675a88406493b9fb7bfff611fc3cb7bbe4c99c95c88524ef362ebae9b7615a927db7d478025dae8073e7c8533113680799717ae29c5989fe0199d31e0103fea49a42798d73536f8a4962ff0ea7b401e0dd9e9c84152b1ce30cbcd62dc105db8521c32f0fcc9d718cea1134278d8a086b8b4c98dbd1dda5aea9"}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16f3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "3d2307911f9b7a73eb70c2bde3d6150c2a66a000fdcd343057d585dbc01e0edf1e834d764b205024039afe7ce0c06e5201037d497dab6dd2d872d77bdb4585ffecd31cba9b464f85043f3335b37efb0b3ffe563e3f98a60026492ea0f256f411b3da0e50126bc0fd7f6ab121480c70ba7aa9c0273aa32a7994f23d3ed938287ab3fd8d042028d69afbd2a89ba2e50a8b3a9dd086a79fa89f0ef626ed12028172ef4595ea215db0aa94a820c3d10f8a53"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6ed8}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "0d38a4fdd7cc6cac86757496b2514605f7e1e50532ecf440471c991d22"}}, @TIPC_NLA_NODE_ID={0x29, 0x3, "1725e1baa70a60375c518f1bb9621126d0258a311dcb2b9834783f9b1e246bfaca2b17bf15"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "421269783d86a49ffca4459e0fae003bb81c35c512adfaa3b0b41a390f27af5f1189820c72bb332944fa89efcc11389850e87f1bd2296cf41a58164585bb8f9576d29ead9f22c1461f676d1c6f25cc8e4424e1d6ca63dc056dfc6a6323bb5e2b0790e8160323f25a0342f1c3e5931731091968f5edc1cfcc49984754a09383c5ba256894f053e28453f23e805cf6baf6d3419e3e0183956f106811db5e845dc19875e14e958f4f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x728}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd1de}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x80, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) (async) write(r7, 0x0, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0x1) 1.369259757s ago: executing program 4 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001009d00000000000000000000000a68000000030a01020000000000000000020000060900010073797a300000000048000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc497834540766140000001100010000000000000000000000000a"], 0x90}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1ff, 0x73}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0xffff, @loopback, 0x2abc}}}, 0x84) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x8000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000ff1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r8], 0x38}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r6) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r13, @ANYBLOB="137845894dc14d516916cee48823d5b42d", @ANYRES32=r13, @ANYBLOB="000003002001000000000000000000000000000108000000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r11, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x2000c844) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 1.166263223s ago: executing program 2 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8990, &(0x7f0000001580)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\b\x00\x00\x00\x00\x00\x00\x00\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y\xffE8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x54}}, 0x4000010) sendmmsg$inet6(r4, &(0x7f00000038c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dstopts={{0x18, 0x29, 0x37, {0x26}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}], 0x30}}], 0x1, 0x4008010) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xfd4f, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.039370617s ago: executing program 2 (id=666): creat(&(0x7f0000000840)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (fail_nth: 20) 1.008722138s ago: executing program 4 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000001c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2, 0x30a, &(0x7f0000001040)="$eJzs3c1rE00cwPFf0iZp+vK0p4eHB4WhggjSpSl482CRFsSA0jaCFYSt3WrINinZUIiI7UHw6tlDDx5FEMGbFxGvvfgX+HbrpTcLFkc2+9I0Wbax0trW7+fQTHd+v9nZndk2nSabjYtPFksLjvFdd0sLvSKS8cvv1z6dnn7X732j1OT4TG5MqaSI3HrwYvhtre/G63/eZGR96PbG5tjX9VMzIj9m7klSFR1V1lprNVep1BJu8nzRKRlKXbct07FUsexY1ZoyG/XmnG2pBbuytFRXZnl+oHepajmOMst1VbLqqlZRtWpdmXfNYlkZhqEGelv7/HcaCkvJtrpEXGLh+ZbWsukOUGZVtNYR0atBIeU/Zn6vszhKWsY/NrZtcnQdZM9wGLZ0dzj+6T3GHyePd/1/ftrJ9Y+TZ/rm7NXxfH5iSqkekcXHy4Xlgvfo1X/sk6LYYsna1PnZbXHniE8S7tfJK/mJUdUwJGcXV/z8leWC98thfMHPz8mg+zylKV+C/JyXr3bnp6S3KT940hGVPxbkS7IpPy3nzjTt35BB+XBHKmLLfKOdnfyHOaUuX8u37D/biAMAAAAAAAAA4DgyVGhn/T4R/qs3axiZxis+wvqsu9mN8wLC9fVRGZTt6PX50cj1/W75v+0lJwAAAAAA4CA49fsl07at6q8XpIOYrmfZmF2kRMQtiDwadjsT2+C/fo9bqtw2IrLSItLeTlcnffYL2Qve/l5O+R2T/Z6oAywkRaR5i/dmDffg7Vd+TH/k+XGS8ROgUZcIz+FIuv3Mm7bdc6iHnGkaU9FaRwZLz/4mdibyADspJLaDLf9FxuiEndqrHW0GMcGFudfeL0VfDvGFcCa4o++NYOuJGvnitWvH/ND4Fi7xAQAAADhGmv5wAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf8i+7sQW3Ld/d5X4HxHffku21s+J577/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6gnwEAAP//aQCoKQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r2, &(0x7f0000000000)="875b", 0x2, 0x8080c61) 908.741661ms ago: executing program 2 (id=669): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pwrite64(r1, &(0x7f0000000080)="20c0f017f846cab987a9316b2590c58f9fac0e4b6d5ab1f1570a554bf573b3ae0658befffe1190f68ae20c5abf94cf87c44cc4aa832f1232cdfc58351d509758d26f6da6edb14b67eda387c4f71d60b52ac0d390813c7fda5e8713a4abeb4123", 0x60, 0x400) fallocate(r0, 0x0, 0x0, 0x400001) r2 = dup(r0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}) 887.467442ms ago: executing program 2 (id=670): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') (async) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0xa, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0xa, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) 833.798213ms ago: executing program 1 (id=671): io_uring_setup(0x664b, &(0x7f0000000500)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "ddffffff00"}) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x40) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x0, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xdd, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x79, 0x268f, 0x40, @remote, @empty, 0x0, 0x80, 0x4, 0x1}}) 676.603539ms ago: executing program 4 (id=672): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f0000000680)='rpc_pipefs\x00', 0x1) fsmount(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x1b3, 0x8098, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10081, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='cpu&\t0\x00+7') r2 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000006", @ANYRES32=r5, @ANYBLOB="680000008008000008000300", @ANYRES32], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 460.783485ms ago: executing program 1 (id=673): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0xffffffffffff0000}, 0x9721, 0x0, 0x0, 0x9, 0xb803, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r0, 0x0) r1 = open(0x0, 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) listen(r4, 0x7ff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=@newlink={0x58, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2040000) syz_clone3(&(0x7f0000000240)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 438.511736ms ago: executing program 0 (id=674): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000001f40)=""/4089, 0x4a, 0xff9, 0xa}, 0x28) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c00078008000640"], 0x68}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000004a00010200000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040800) r2 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x1, 0x9cf, &(0x7f0000000e00)="$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") ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000480)={{0x6, 0x4, 0x100, 0xa, 0x7}, &(0x7f0000000180)}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x185c45f, 0x0, 0x40, 0x0, &(0x7f00000001c0)) 436.064856ms ago: executing program 2 (id=675): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000040)={[{@lazytime}, {@errors_remount}, {@resuid}, {@nobarrier}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KAruzubpummbtJsVrO/H0zyvjOz87zvzD7v7gwzbAB962j9TxrxVERcTCKG1y0biGzh0eZ6qytLxfsrS8UkarVLvySRRMS9laVia/0k+38oIpYj4v8R8U0+4ni6tsl9rUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2Mnx9Y3935tfS2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC1b34+d1Nwn+Ti3Yf7pbgTroaTXDWBbclme11PpfzEcuSzr26mtHxwGd6V5QBfVBiNqQJ9K5D/0qdb3gPr5b2vaze8fd843T0DqcVdXlorvRCv+QPPaROxvnJsc/DV56Mykfr55eDcbyp60fD0iRgcGHn3/J9n7b/tGd6KBdNXX55sH6tHjn66NP9Fm/BlqXTt9Qq3xbzUb/1bbxM81xrpHx7+LHcb4/fWfPto0/vXBeLpt/GQtftKm/2lEvNlh/FuvfXl2s2W1jyOORfv4Lcnjrw+PXL5SLo02/7aN8dWxIy9v3v+Ig5vEb16z3d/4mFnf/31Zm9IO+//Ft58/s/yY+M8/+/jj327/H4iI9zqM/597n7y62bI715O79W8BWz3+SeTjdofxXzh39Ies6KohAAAAAAAAAADsoLRxL1uSFtbKaVooNJ/h/W8cTMuV6tzxy5X5mYnmPW+HI5+27rQabtaTen0sux+3VT+5oX4qlwXMHWjUC8VKeaLHfQcAAAAAAAAAAAAAAAAAAIC/i0Mbnv//Ldd4/n/jz1UDe9XmP/kN7HXyH/rXw/mf9KwdwO7z+Q99qyb/oX/Jf+hf8h/6l/yH/iX/oX/Jf+hf8h8AAAAAAAAAAAAAAAAAAAAAAAAAALri4oUL9al2f2WpWK9PDCzMT1XeOjFRqk4VpueLhWJl9mphslKZLJcKxcr0X20vqVSujsbM/LWRuVJ1bqS6sPjGdGV+pvWboqV813sEAAAAAAAAAAAAAAAAAAAA/zxDjSlJCxH5Zj1NC4WIf0XE4SSSy1fKpdGI+HdEfJ/LD9brY71uNAAAAAAAAAAAAAAAAAAAAOwx1YXFqfFyuTTbvcJAFmpHNhjxZO0Z2MrKEbG8s3ujvsUtvyqf7cDuHqY+KeR25n249ws9HJQAAAAAAAAAAAAAAAAAAKBPPXjot9NX/NHdBgEAAAAAAAAAAAAAAAAAAEBfSn9OIqI+HRt+bmjj0n3Jaq7xPyLevnXpg2vjc3OzY/X5d9fmz32YzT+57oX7d7MPQCdaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAeqC4tT4+VyaXabhcEO1ul1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2488AAAD//6lQzaI=") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'geneve1\x00', &(0x7f0000000740)=@ethtool_ts_info}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='&-\x00', &(0x7f0000000280)="054e0c98614954701731358fbf1e41b51953bf0d515915e676e3f8f121ae8105e3cb2e4a5510e7c79a567c8c24873263712b3d100e4c0a274eff35969aa7e890f18e64bdc8d8bf1113287614bcca720f924848ff1436c4451cd322c8b5", 0x5d) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000e00000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d200900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x8}, 0x106200, 0x804, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x80003, 0x20) 293.429621ms ago: executing program 3 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 271.965032ms ago: executing program 1 (id=677): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r2, 0x10e, 0x2, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x80000b, &(0x7f0000000540)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x463, &(0x7f0000000ec0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, &(0x7f00000001c0), 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) flock(r7, 0x1) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010001000000fedbdf250a100000fd04ff000000000008001e00010000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r9 = syz_open_procfs(0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0xb, r9}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="2f000000100000000400000083d8f6238c1e32b497e32ea2336d4764ffc369", @ANYRES32, @ANYBLOB="b2dbe6469fb0bc1c55090c5d6e856319d11a6a7faa3987e0031da87e44f26ba314e1047088f15229f1f335036e5dccffd46b65cba7b06da602b339549d6aba744bf40abf7a9bfbb56083ef29aebd4be73b42dca6eadd8042d3d40bce0acf3ca805d7a4744cc192a8fe50e2e0da19ccbb29e92abaed0fbfc481235c131dcc28cdda844e4be3ca5a28381792f5adc7859862853d1b89b65d1085ac4f1bdc847bfafba282173f28bebf78d72e0b0b79436de5", @ANYRES64=0x0], 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17fb", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r12, @ANYBLOB="04010000"], 0x18, 0x80}, 0x40000) mlockall(0x1) 132.767826ms ago: executing program 1 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 131.608436ms ago: executing program 1 (id=679): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x5, &(0x7f0000000240)={[{@grpjquota}, {@resuid}, {@jqfmt_vfsv0}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0xffe0}], 0x1}}], 0x1, 0x20002845) 90.703197ms ago: executing program 4 (id=680): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0xe}}}, 0x32) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="181200009188b89d2f32efddec43d1662b035c9c4194e93fb2e38cc16908603cfcae56537a62c68bdf70549e06ba65d2dcd5d6c8d3dc3dd8cbfa667bb7bb1153e83b89df3a9be4f1f7ab9df7b6a8bff9e33ecad060d0c8da58a8e3bb5fe1dd9309ebb41a688537ae16f216bd2580e1b129e34559a4d3e6dea96c2b923e63f574d742e20783257ca17b1617643681aab4e3d208c4054a92e04c9bab225eabb85f053abd92c6e58fbb9e3670ab81a490b0448c1c362478eedd5db682fae65306be455f9cd5d6687dfe96bff0cacf72a3c1d8cfade7fb9e2523f8799181d0e31752a5fa9066d09771735a27b4a1f85cb4ccebd1ca57cb5f7a", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001980000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}}, 0x10}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="250347c600e60000000008"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x29, 0x61, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x2000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 90.304447ms ago: executing program 1 (id=681): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) io_uring_setup(0x2740, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) preadv(r1, 0x0, 0x0, 0xc002a0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_route(r2, 0x0, 0x8ae257a062cc3564) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 74.192767ms ago: executing program 0 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000001c0)="$eJzs3M9rK1UUwPGTn03yeJ0sRFGQXnSjm6GNrsUg74EY8NHXiK0gTNuJhoxJyYRKith25VbcuxJclC67K6j/QDfudOPGXTeiC7uojsxkJplMMm1aU1ub7wcec3PuPZP5cfM4M3Tm9P0vP2nUbL1mdCSZU5IQETkTKUpSAgl/mRQ5dxxHwvbk1Qd//PTi09W1d8qVyqNlpR6XV14rKaXmF7779LO8P+x4Tk6KH57+Vvr15NmT50//Xvm4bqu6rZqtjjLUeuuXjrFumWqzbjd0pZ5YpmGbqt60zXavv9Xrr1mtra2uMpqbDwtbbdO2ldHsqobZVZ2W6rS7yvjIqDeVruvqYUFwmerB8rJRvmbyxpQ3BlMwNybWbpeNlIjkR3qqB//JRgEAgDslWv8n3ZI+vv6XhGTD6Unp1/8y79X/7uBB/X/40g+dB+8dzfv1/3F2XP3/+s+9lQ3V/zkRuU79/7Vcof4frYhmy7+q/3E3LGRHQomhT279X/B/v579Dw4XvQb1PwAAAAAAAAAAAAAAAAAAAAAA/wdnjqM5jqMFy+Df4BEC/zPupbjzPyciOffsO5z/++zp6prkvAf3HE3S1hfb1e2qiLt0e/9yesSURdHk3JsPQUwcJ3jySLmK8r216+fvbldTXk+5JnWxxJQl0aQYzXecx29XHi2pHj+//5hSIZxfEk2eGZ9fGs73vz8rr7wcytdFkx83pCWWbHrzepD/+ZJSb71bieTnvXEAAAAAANwHuuobe/2u63H9vbeMlGvebaKY+wO96+vFsdfnae2F9G3vPQAAAAAAs8Hu7jQMyzLbXuP3oGGFG3mJRqbZSE82OBuJZC4anArt4aTbk/VuZIjEjUlFjlgmZs3fjBzVCRrBH1IMdeX84PUOb7D/Uztfe+FIUibISkc3fsENqCt++76/I/1IcNsoG3Oc5cnoepIXzITM1Obzc199++f0fiBvHAUz4PLB+6FI3Mwc28hFZ53XyNzk/zkAAAAAbseg6A8ib4a7E7eyUQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzBi7u5O4uXf7Db9ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJh1/wQAAP//LbL8/w==") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd72fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d0de25c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa12308449afc6ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0x2, 0x30a, &(0x7f0000001040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r2, &(0x7f0000000000)="875b", 0x2, 0x8080c61) 771.08µs ago: executing program 3 (id=683): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x545, &(0x7f0000001300)="$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") symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 5) 0s ago: executing program 2 (id=684): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") (async) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0xe0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)=ANY=[]) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000c80)={&(0x7f0000000c00)=[{0x4, 0x7fffffff, 0x800, 0x0, 0xc}, {0x5, 0x10001, 0x6, 0x8001, 0x46}], 0x2, 0x28, 0x10, 0x7}) (async, rerun: 32) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (rerun: 32) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000180)={0x957ec1c, &(0x7f0000000100)="846979dc40da0bab4c2d87b06838c2ba7f699569e10e317a84"}) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x258, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x1}, {0x4, 0x6, 0x2}, {0x2, 0x2, 0x3}, 0x1, 0x7f}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x408) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): RSI: 0000200000000140 RDI: 00000000000000c8 [ 84.309773][ T4572] RBP: 00007ff141727090 R08: 0000000000000000 R09: 0000000000000000 [ 84.309795][ T4572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.309807][ T4572] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffdc3960328 [ 84.309824][ T4572] [ 84.854618][ T4569] loop3: detected capacity change from 0 to 2048 [ 84.887644][ T4531] truncated [ 84.904828][ T4531] loop1: p147 start 67109111 is beyond EOD, truncated [ 84.912870][ T4531] loop1: p149 start 67109111 is beyond EOD, truncated [ 84.920807][ T4531] loop1: p151 start 67109111 is beyond EOD, truncated [ 84.928670][ T4531] loop1: p153 start 67109111 is beyond EOD, truncated [ 84.936641][ T4531] loop1: p155 start 67109111 is beyond EOD, truncated [ 84.944391][ T4531] loop1: p157 start 67109111 is beyond EOD, truncated [ 84.952336][ T4531] loop1: p159 start 67109111 is beyond EOD, truncated [ 84.960191][ T4531] loop1: p161 start 67109111 is beyond EOD, truncated [ 84.972244][ T4531] loop1: p163 start 67109111 is beyond EOD, truncated [ 84.980966][ T4531] loop1: p165 start 67109111 is beyond EOD, truncated [ 84.989034][ T4531] loop1: p167 start 67109111 is beyond EOD, truncated [ 84.997375][ T4531] loop1: p169 start 67109111 is beyond EOD, truncated [ 85.004653][ T4531] loop1: p171 start 67109111 is beyond EOD, truncated [ 85.012034][ T4531] loop1: p173 start 67109111 is beyond EOD, truncated [ 85.035442][ T4531] loop1: p175 start 67109111 is beyond EOD, truncated [ 85.061688][ T4531] loop1: p177 start 67109111 is beyond EOD, truncated [ 85.087270][ T4531] loop1: p179 start 67109111 is beyond EOD, truncated [ 85.111514][ T4531] loop1: p181 start 67109111 is beyond EOD, truncated [ 85.130315][ T4531] loop1: p183 start 67109111 is beyond EOD, truncated [ 85.155476][ T4531] loop1: p185 start 67109111 is beyond EOD, truncated [ 85.180444][ T4531] loop1: p187 start 67109111 is beyond EOD, truncated [ 85.209116][ T4531] loop1: p189 start 67109111 is beyond EOD, truncated [ 85.221546][ T4531] loop1: p191 start 67109111 is beyond EOD, truncated [ 85.229061][ T4531] loop1: p193 start 67109111 is beyond EOD, truncated [ 85.254799][ T4531] loop1: p195 start 67109111 is beyond EOD, truncated [ 85.279691][ T4531] loop1: p197 start 67109111 is beyond EOD, truncated [ 85.304663][ T4531] loop1: p199 start 67109111 is beyond EOD, truncated [ 85.347468][ T4531] loop1: p201 start 67109111 is beyond EOD, truncated [ 85.357941][ T4531] loop1: p203 start 67109111 is beyond EOD, truncated [ 85.365481][ T4531] loop1: p205 start 67109111 is beyond EOD, truncated [ 85.372910][ T4531] loop1: p207 start 67109111 is beyond EOD, truncated [ 85.380342][ T4531] loop1: p209 start 67109111 is beyond EOD, truncated [ 85.387490][ T4531] loop1: p211 start 67109111 is beyond EOD, truncated [ 85.395017][ T4531] loop1: p213 start 67109111 is beyond EOD, truncated [ 85.402538][ T4531] loop1: p215 start 67109111 is beyond EOD, truncated [ 85.421527][ T4531] loop1: p217 start 67109111 is beyond EOD, truncated [ 85.440454][ T4531] loop1: p219 start 67109111 is beyond EOD, truncated [ 85.452698][ T4531] loop1: p221 start 67109111 is beyond EOD, truncated [ 85.471220][ T4531] loop1: p223 start 67109111 is beyond EOD, truncated [ 85.482462][ T4531] loop1: p225 start 67109111 is beyond EOD, truncated [ 85.501458][ T4531] loop1: p227 start 67109111 is beyond EOD, truncated [ 85.513694][ T4531] loop1: p229 start 67109111 is beyond EOD, truncated [ 85.532543][ T4531] loop1: p231 start 67109111 is beyond EOD, truncated [ 85.540115][ T4531] loop1: p233 start 67109111 is beyond EOD, truncated [ 85.558356][ T4531] loop1: p235 start 67109111 is beyond EOD, truncated [ 85.574104][ T4531] loop1: p237 start 67109111 is beyond EOD, truncated [ 85.592383][ T4531] loop1: p239 start 67109111 is beyond EOD, truncated [ 85.603823][ T4531] loop1: p241 start 67109111 is beyond EOD, truncated [ 85.622343][ T4531] loop1: p243 start 67109111 is beyond EOD, truncated [ 85.641257][ T4531] loop1: p245 start 67109111 is beyond EOD, truncated [ 85.650061][ T4531] loop1: p247 start 67109111 is beyond EOD, truncated [ 85.665322][ T4531] loop1: p249 start 67109111 is beyond EOD, truncated [ 85.685834][ T4531] loop1: p251 start 67109111 is beyond EOD, truncated [ 85.696083][ T4531] loop1: p253 start 67109111 is beyond EOD, truncated [ 85.713740][ T4531] loop1: p255 start 67109111 is beyond EOD, truncated [ 85.826904][ T4589] geneve1: entered promiscuous mode [ 86.018012][ T4595] tmpfs: Bad value for 'mpol' [ 86.076975][ T28] audit: type=1400 audit(1780324508.834:530): avc: denied { write } for pid=4597 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.099128][ T28] audit: type=1400 audit(1780324508.834:531): avc: denied { read } for pid=4599 comm="syz.2.349" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.462151][ T4603] loop1: detected capacity change from 0 to 1764 [ 86.509073][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 86.572644][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 86.591729][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 86.606587][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 86.628292][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 86.654904][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 86.681562][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 86.705432][ T4605] udevd[4605]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 86.721998][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 86.736299][ T4606] udevd[4606]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 87.092336][ T28] audit: type=1400 audit(1780324509.164:532): avc: denied { ioctl } for pid=4599 comm="syz.2.349" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.770646][ T4625] loop0: detected capacity change from 0 to 512 [ 87.914291][ T28] audit: type=1400 audit(1780324509.224:533): avc: denied { kexec_image_load } for pid=4597 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 87.956713][ T4625] EXT4-fs: Ignoring removed nobh option [ 88.013387][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 88.038299][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.050834][ T4625] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.241099][ T4641] loop1: detected capacity change from 0 to 2048 [ 88.280356][ T4587] loop4: detected capacity change from 0 to 512 [ 88.307515][ T4587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.324609][ T4587] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.338014][ T28] audit: type=1400 audit(1780324511.104:534): avc: denied { ioctl } for pid=4643 comm="syz.3.360" path="socket:[9493]" dev="sockfs" ino=9493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.338417][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.402355][ T4649] netlink: 388 bytes leftover after parsing attributes in process `syz.0.359'. [ 88.506435][ T28] audit: type=1400 audit(1780324511.224:535): avc: denied { bind } for pid=4643 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.551487][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.598148][ T4655] loop4: detected capacity change from 0 to 512 [ 88.611185][ T4655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 88.619159][ T4655] System zones: 1-12 [ 88.623427][ T4655] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.361: corrupted in-inode xattr: e_value size too large [ 88.637343][ T4655] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.637535][ T4655] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.361: couldn't read orphan inode 15 (err -117) [ 88.658420][ T4655] loop4: lost filesystem error report for type 5 error -117 [ 88.659873][ T4655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.699562][ T28] audit: type=1400 audit(1780324511.464:536): avc: denied { write } for pid=4653 comm="syz.4.361" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.726965][ T4655] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 88.756742][ T4660] loop0: detected capacity change from 0 to 1764 [ 88.770510][ T28] audit: type=1400 audit(1780324511.464:537): avc: denied { write } for pid=4653 comm="syz.4.361" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.793181][ T28] audit: type=1400 audit(1780324511.464:538): avc: denied { write } for pid=4653 comm="syz.4.361" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.915723][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.947582][ T4660] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 88.960323][ T4660] bond0 (unregistering): Released all slaves [ 89.103406][ T4669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 89.113006][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 89.683072][ T4677] FAULT_INJECTION: forcing a failure. [ 89.683072][ T4677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.700480][ T4677] CPU: 1 UID: 0 PID: 4677 Comm: syz.4.365 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 89.700508][ T4677] Tainted: [W]=WARN [ 89.700516][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.700540][ T4677] Call Trace: [ 89.700548][ T4677] [ 89.700556][ T4677] __dump_stack+0x1d/0x30 [ 89.700615][ T4677] dump_stack_lvl+0x95/0xd0 [ 89.700642][ T4677] dump_stack+0x15/0x1b [ 89.700657][ T4677] should_fail_ex+0x263/0x280 [ 89.700674][ T4677] should_fail+0xb/0x20 [ 89.700688][ T4677] should_fail_usercopy+0x1a/0x20 [ 89.700706][ T4677] _copy_from_user+0x1c/0xb0 [ 89.700730][ T4677] __sys_bpf+0x183/0x7e0 [ 89.700822][ T4677] __x64_sys_bpf+0x41/0x50 [ 89.700896][ T4677] x64_sys_call+0x10cb/0x3020 [ 89.700929][ T4677] do_syscall_64+0x12c/0x3b0 [ 89.700957][ T4677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.700977][ T4677] RIP: 0033:0x7fe0e9d9ce59 [ 89.701055][ T4677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.701073][ T4677] RSP: 002b:00007fe0e87f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.701095][ T4677] RAX: ffffffffffffffda RBX: 00007fe0ea015fa0 RCX: 00007fe0e9d9ce59 [ 89.701110][ T4677] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002 [ 89.701124][ T4677] RBP: 00007fe0e87f7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.701135][ T4677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.701193][ T4677] R13: 00007fe0ea016038 R14: 00007fe0ea015fa0 R15: 00007fffe812f4b8 [ 89.701240][ T4677] [ 89.957383][ T4681] loop2: detected capacity change from 0 to 512 [ 89.985565][ T4681] EXT4-fs: Ignoring removed nobh option [ 90.086953][ T4681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.099697][ T4681] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.433574][ T4689] FAULT_INJECTION: forcing a failure. [ 90.433574][ T4689] name failslab, interval 1, probability 0, space 0, times 0 [ 90.447445][ T4689] CPU: 1 UID: 0 PID: 4689 Comm: syz.1.372 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 90.447553][ T4689] Tainted: [W]=WARN [ 90.447560][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.447572][ T4689] Call Trace: [ 90.447579][ T4689] [ 90.447588][ T4689] __dump_stack+0x1d/0x30 [ 90.447621][ T4689] dump_stack_lvl+0x95/0xd0 [ 90.447675][ T4689] dump_stack+0x15/0x1b [ 90.447690][ T4689] should_fail_ex+0x263/0x280 [ 90.447710][ T4689] should_failslab+0x8c/0xb0 [ 90.447739][ T4689] kmem_cache_alloc_noprof+0x66/0x3f0 [ 90.447807][ T4689] ? do_getname+0x2e/0x1c0 [ 90.447827][ T4689] do_getname+0x2e/0x1c0 [ 90.447846][ T4689] getname_flags+0x1d/0x30 [ 90.447912][ T4689] do_sys_openat2+0x60/0x130 [ 90.447936][ T4689] __x64_sys_openat+0xf2/0x120 [ 90.447963][ T4689] x64_sys_call+0x1e39/0x3020 [ 90.447986][ T4689] do_syscall_64+0x12c/0x3b0 [ 90.448011][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.448105][ T4689] RIP: 0033:0x7f7694d4d68e [ 90.448119][ T4689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.448133][ T4689] RSP: 002b:00007f76937deb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.448152][ T4689] RAX: ffffffffffffffda RBX: 00007f76937df6c0 RCX: 00007f7694d4d68e [ 90.448214][ T4689] RDX: ffffffffa19c0f87 RSI: 00007f76937dec00 RDI: ffffffffffffff9c [ 90.448227][ T4689] RBP: 00007f76937dec00 R08: 0000000000000000 R09: 0000000000000000 [ 90.448239][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 90.448314][ T4689] R13: 00007f7695006038 R14: 00007f7695005fa0 R15: 00007ffcbcb771c8 [ 90.448330][ T4689] [ 90.713430][ T4689] loop1: detected capacity change from 0 to 4096 [ 90.750408][ T4689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.764787][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 90.764800][ T28] audit: type=1400 audit(1780324513.534:541): avc: denied { write } for pid=4688 comm="syz.1.372" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.829048][ T28] audit: type=1400 audit(1780324513.534:542): avc: denied { write } for pid=4688 comm="syz.1.372" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.850829][ T28] audit: type=1400 audit(1780324513.534:543): avc: denied { rename } for pid=4688 comm="syz.1.372" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.873166][ T28] audit: type=1400 audit(1780324513.534:544): avc: denied { rename } for pid=4688 comm="syz.1.372" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.895792][ T28] audit: type=1400 audit(1780324513.534:545): avc: denied { rmdir } for pid=4688 comm="syz.1.372" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.917887][ T28] audit: type=1400 audit(1780324513.544:546): avc: denied { write } for pid=4688 comm="syz.1.372" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.208000][ T4687] loop4: detected capacity change from 0 to 512 [ 91.227589][ T4687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.240424][ T4687] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.812024][ T4636] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 93.827295][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.827600][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.880677][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.904102][ T4707] loop2: detected capacity change from 0 to 4096 [ 94.013790][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.024050][ T4713] tmpfs: Bad value for 'mpol' [ 94.029579][ T28] audit: type=1400 audit(1780324516.754:547): avc: denied { write } for pid=4706 comm="syz.2.377" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.052609][ T28] audit: type=1400 audit(1780324516.754:548): avc: denied { write } for pid=4706 comm="syz.2.377" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.087609][ T4711] loop1: detected capacity change from 0 to 256 [ 94.106828][ T4711] FAT-fs (loop1): Directory bread(block 64) failed [ 94.113732][ T4711] FAT-fs (loop1): Directory bread(block 65) failed [ 94.120305][ T4711] FAT-fs (loop1): Directory bread(block 66) failed [ 94.126820][ T4711] FAT-fs (loop1): Directory bread(block 67) failed [ 94.133466][ T4711] FAT-fs (loop1): Directory bread(block 68) failed [ 94.139980][ T4711] FAT-fs (loop1): Directory bread(block 69) failed [ 94.146606][ T4711] FAT-fs (loop1): Directory bread(block 70) failed [ 94.153631][ T4711] FAT-fs (loop1): Directory bread(block 71) failed [ 94.168045][ T4711] FAT-fs (loop1): Directory bread(block 72) failed [ 94.174710][ T28] audit: type=1400 audit(1780324516.924:549): avc: denied { write } for pid=4706 comm="syz.2.377" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.200719][ T4722] loop0: detected capacity change from 0 to 128 [ 94.213398][ T4711] FAT-fs (loop1): Directory bread(block 73) failed [ 94.227117][ T4722] EXT4-fs: Ignoring removed nobh option [ 94.242638][ T4722] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.255189][ T4722] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.268880][ T28] audit: type=1400 audit(1780324517.044:550): avc: denied { write } for pid=4721 comm="syz.0.383" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.385771][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.404187][ T4725] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 94.453219][ T4728] loop2: detected capacity change from 0 to 512 [ 94.537172][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.605597][ T4732] loop0: detected capacity change from 0 to 2048 [ 94.661007][ T4728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.691234][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 94.718378][ T4736] loop4: detected capacity change from 0 to 1024 [ 94.728792][ T4736] EXT4-fs: Ignoring removed bh option [ 94.775314][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.815605][ T4732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.821899][ T4736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.862644][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 94.888628][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 94.897772][ T3440] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 94.916002][ T3440] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.929785][ T3440] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.929785][ T3440] [ 94.939686][ T3440] EXT4-fs (loop0): Total free blocks count 0 [ 94.940390][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.945966][ T3440] EXT4-fs (loop0): Free/Dirty block details [ 94.960609][ T3440] EXT4-fs (loop0): free_blocks=2415919504 [ 94.966316][ T3440] EXT4-fs (loop0): dirty_blocks=16 [ 94.971413][ T3440] EXT4-fs (loop0): Block reservation details [ 94.977367][ T3440] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 94.984392][ T3306] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 94.996034][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.106841][ T4750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 95.161833][ T4757] netlink: 'syz.4.394': attribute type 5 has an invalid length. [ 95.190913][ T4761] loop3: detected capacity change from 0 to 512 [ 95.213073][ T4761] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.396: inode has both inline data and extents flags [ 95.226353][ T4761] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.226735][ T4761] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.396: couldn't read orphan inode 15 (err -117) [ 95.247832][ T4761] loop3: lost filesystem error report for type 5 error -117 [ 95.248413][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.274348][ T4761] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 95.297234][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.412581][ T4773] loop2: detected capacity change from 0 to 2048 [ 95.413497][ T30] bio_check_eod: 55 callbacks suppressed [ 95.413510][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.413510][ T30] loop1: rw=1, sector=1768, nr_sectors = 8488 limit=256 [ 95.458529][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.458529][ T30] loop1: rw=1, sector=10256, nr_sectors = 14488 limit=256 [ 95.510304][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.510304][ T30] loop1: rw=1, sector=24776, nr_sectors = 32 limit=256 [ 95.529725][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.529725][ T30] loop1: rw=1, sector=24840, nr_sectors = 32 limit=256 [ 95.543976][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.543976][ T30] loop1: rw=1, sector=24904, nr_sectors = 32 limit=256 [ 95.557833][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.557833][ T30] loop1: rw=1, sector=24968, nr_sectors = 32 limit=256 [ 95.572015][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.572015][ T30] loop1: rw=1, sector=25032, nr_sectors = 32 limit=256 [ 95.588460][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.588460][ T30] loop1: rw=1, sector=25096, nr_sectors = 32 limit=256 [ 95.602384][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.602384][ T30] loop1: rw=1, sector=25160, nr_sectors = 32 limit=256 [ 95.616084][ T30] kworker/u8:1: attempt to access beyond end of device [ 95.616084][ T30] loop1: rw=1, sector=25224, nr_sectors = 32 limit=256 [ 95.991602][ T4790] loop1: detected capacity change from 0 to 512 [ 96.074300][ T4790] EXT4-fs (loop1): 1 orphan inode deleted [ 96.086881][ T4790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.133637][ T4790] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 96.154197][ T4790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.043617][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 97.620653][ T4801] Failed to initialize the IGMP autojoin socket (err -2) [ 97.631614][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 97.703525][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.712678][ T4803] loop3: detected capacity change from 0 to 512 [ 97.713705][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 97.737542][ T4803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.749763][ T4815] loop0: detected capacity change from 0 to 512 [ 97.756354][ T4815] EXT4-fs: Ignoring removed nobh option [ 97.776805][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 97.776820][ T28] audit: type=1400 audit(1780324520.524:564): avc: denied { write } for pid=4800 comm="syz.3.407" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.788617][ T4818] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 97.823887][ T4815] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.412: corrupted inode contents [ 97.835660][ T4815] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.835830][ T4815] EXT4-fs (loop0): Remounting filesystem read-only [ 97.851636][ T4815] Quota error (device loop0): write_blk: dquota write failed [ 97.859031][ T4815] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota [ 97.869046][ T4815] EXT4-fs (loop0): 1 truncate cleaned up [ 97.875086][ T4815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.887853][ T4815] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.169182][ T4833] loop2: detected capacity change from 0 to 512 [ 98.177745][ T4833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 98.189130][ T4833] System zones: 1-12 [ 98.193609][ T4833] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.417: corrupted in-inode xattr: e_value size too large [ 98.208015][ T4833] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.208282][ T4833] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.417: couldn't read orphan inode 15 (err -117) [ 98.229482][ T4833] loop2: lost filesystem error report for type 5 error -117 [ 98.230263][ T4833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.255013][ T28] audit: type=1400 audit(1780324521.024:565): avc: denied { write } for pid=4832 comm="syz.2.417" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.283496][ T4835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.416'. [ 98.291272][ T28] audit: type=1400 audit(1780324521.024:566): avc: denied { write } for pid=4832 comm="syz.2.417" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.299716][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 98.323211][ T4833] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.337677][ T28] audit: type=1400 audit(1780324521.024:567): avc: denied { write } for pid=4832 comm="syz.2.417" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.343716][ T4835] netlink: 108 bytes leftover after parsing attributes in process `syz.1.416'. [ 98.359350][ T28] audit: type=1400 audit(1780324521.094:568): avc: denied { write } for pid=4832 comm="syz.2.417" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.408467][ T4841] loop4: detected capacity change from 0 to 2048 [ 98.461750][ T4830] wireguard: wg2: Could not create IPv4 socket [ 98.490935][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.508181][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.535343][ T4830] loop1: detected capacity change from 0 to 4096 [ 98.564125][ T4830] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 98.985322][ T4852] loop2: detected capacity change from 0 to 512 [ 99.029340][ T4852] EXT4-fs: Ignoring removed nobh option [ 99.134140][ T4852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.240572][ T4852] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.897571][ T4828] syz.0.412 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 99.912987][ T4828] CPU: 1 UID: 0 PID: 4828 Comm: syz.0.412 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 99.913022][ T4828] Tainted: [W]=WARN [ 99.913030][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.913043][ T4828] Call Trace: [ 99.913050][ T4828] [ 99.913058][ T4828] __dump_stack+0x1d/0x30 [ 99.913143][ T4828] dump_stack_lvl+0x95/0xd0 [ 99.913163][ T4828] dump_stack+0x15/0x1b [ 99.913184][ T4828] dump_header+0x80/0x240 [ 99.913257][ T4828] oom_kill_process+0x295/0x350 [ 99.913346][ T4828] out_of_memory+0x97d/0xb80 [ 99.913376][ T4828] ? mutex_lock_killable+0x62/0xa0 [ 99.913402][ T4828] try_charge_memcg+0x62f/0xa10 [ 99.913449][ T4828] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 99.913476][ T4828] __alloc_frozen_pages_noprof+0x18a/0x350 [ 99.913506][ T4828] alloc_pages_mpol+0xb3/0x260 [ 99.913535][ T4828] alloc_pages_noprof+0x8f/0x140 [ 99.913562][ T4828] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 99.913591][ T4828] __kvmalloc_node_noprof+0x3d4/0x640 [ 99.913610][ T4828] ? futex_hash_allocate+0x190/0x9a0 [ 99.913641][ T4828] ? futex_hash_allocate+0x190/0x9a0 [ 99.913710][ T4828] futex_hash_allocate+0x190/0x9a0 [ 99.913743][ T4828] ? __schedule+0x951/0xd40 [ 99.913761][ T4828] ? cap_task_prctl+0x13f/0x6b0 [ 99.913847][ T4828] futex_hash_prctl+0xd8/0xf0 [ 99.913931][ T4828] __se_sys_prctl+0x4f4/0x1400 [ 99.913956][ T4828] __x64_sys_prctl+0x67/0x80 [ 99.913980][ T4828] x64_sys_call+0x2533/0x3020 [ 99.914009][ T4828] do_syscall_64+0x12c/0x3b0 [ 99.914115][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.914135][ T4828] RIP: 0033:0x7fc3bbf0ce59 [ 99.914150][ T4828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.914238][ T4828] RSP: 002b:00007fc3ba93e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 99.914257][ T4828] RAX: ffffffffffffffda RBX: 00007fc3bc186090 RCX: 00007fc3bbf0ce59 [ 99.914270][ T4828] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 99.914284][ T4828] RBP: 00007fc3bbfa2d6f R08: 0000000000000000 R09: 0000000000000000 [ 99.914299][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.914313][ T4828] R13: 00007fc3bc186128 R14: 00007fc3bc186090 R15: 00007ffd517af8b8 [ 99.914359][ T4828] [ 99.914385][ T4828] memory: usage 307200kB, limit 307200kB, failcnt 730 [ 100.159429][ T4828] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 100.167780][ T4828] kmem: usage 306944kB, limit 9007199254740988kB, failcnt 0 [ 100.175588][ T4828] Memory cgroup stats for /syz0: [ 100.176188][ T4828] cache 12288 [ 100.185126][ T4828] rss 0 [ 100.187921][ T4828] shmem 0 [ 100.190981][ T4828] mapped_file 0 [ 100.194971][ T4828] dirty 0 [ 100.198070][ T4828] writeback 0 [ 100.201364][ T4828] workingset_refault_anon 58 [ 100.206604][ T4828] workingset_refault_file 337 [ 100.211465][ T4828] swap 475136 [ 100.215093][ T4828] swapcached 712704 [ 100.219085][ T4828] pgpgin 81221 [ 100.222791][ T4828] pgpgout 81218 [ 100.226264][ T4828] pgfault 75814 [ 100.229898][ T4828] pgmajfault 53 [ 100.233600][ T4828] inactive_anon 0 [ 100.237283][ T4828] active_anon 0 [ 100.240899][ T4828] inactive_file 0 [ 100.247269][ T4828] active_file 12288 [ 100.251180][ T4828] unevictable 0 [ 100.255202][ T4828] hierarchical_memory_limit 314572800 [ 100.260810][ T4828] hierarchical_memsw_limit 9223372036854771712 [ 100.267512][ T4828] total_cache 12288 [ 100.271611][ T4828] total_rss 0 [ 100.275087][ T4828] total_shmem 0 [ 100.278569][ T4828] total_mapped_file 0 [ 100.283223][ T4828] total_dirty 0 [ 100.286783][ T4828] total_writeback 0 [ 100.290667][ T4828] total_workingset_refault_anon 58 [ 100.296887][ T4828] total_workingset_refault_file 337 [ 100.302391][ T4828] total_swap 475136 [ 100.306330][ T4828] total_swapcached 712704 [ 100.310745][ T4828] total_pgpgin 81221 [ 100.315147][ T4828] total_pgpgout 81218 [ 100.319396][ T4828] total_pgfault 75814 [ 100.323883][ T4828] total_pgmajfault 53 [ 100.327874][ T4828] total_inactive_anon 0 [ 100.332479][ T4828] total_active_anon 0 [ 100.336472][ T4828] total_inactive_file 0 [ 100.340658][ T4828] total_active_file 12288 [ 100.345345][ T4828] total_unevictable 0 [ 100.349351][ T4828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.412,pid=4814,uid=0 [ 100.366544][ T4828] Memory cgroup out of memory: Killed process 4814 (syz.0.412) total-vm:100584kB, anon-rss:1240kB, file-rss:26632kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 100.849562][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.869524][ T4857] loop3: detected capacity change from 0 to 512 [ 100.885445][ T4857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.911412][ T4857] EXT4-fs (loop3): 1 truncate cleaned up [ 100.918472][ T4859] geneve1: entered promiscuous mode [ 100.919466][ T4857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.964737][ T28] audit: type=1400 audit(1780324523.734:569): avc: denied { write } for pid=4856 comm="syz.3.423" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.057362][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.137664][ T4869] loop2: detected capacity change from 0 to 512 [ 101.194162][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.221438][ T4869] EXT4-fs (loop2): 1 orphan inode deleted [ 101.238373][ T4869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.268094][ T4869] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 101.278621][ T4869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.912722][ T4895] __nla_validate_parse: 1 callbacks suppressed [ 102.912792][ T4895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.434'. [ 102.976650][ T4895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 102.986318][ T4895] netlink: 108 bytes leftover after parsing attributes in process `syz.1.434'. [ 103.118634][ T4895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 103.132625][ T4900] wireguard: wg2: Could not create IPv4 socket [ 103.157576][ T4900] loop1: detected capacity change from 0 to 4096 [ 103.475954][ T4904] netlink: 27 bytes leftover after parsing attributes in process `syz.3.438'. [ 103.485898][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.506132][ T4906] loop2: detected capacity change from 0 to 1024 [ 103.512774][ T4906] EXT4-fs: Ignoring removed nobh option [ 103.518355][ T4906] EXT4-fs: Ignoring removed i_version option [ 103.538676][ T4900] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 103.546960][ T28] audit: type=1400 audit(1780324526.274:570): avc: denied { create } for pid=4907 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.710064][ T4906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.760136][ T28] audit: type=1400 audit(1780324526.514:571): avc: denied { write } for pid=4905 comm="syz.2.437" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.955703][ T28] audit: type=1400 audit(1780324526.514:572): avc: denied { write } for pid=4905 comm="syz.2.437" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.979005][ T4882] loop4: detected capacity change from 0 to 512 [ 104.179097][ T28] audit: type=1400 audit(1780324526.904:573): avc: denied { bind } for pid=4910 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.212192][ T4932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=764 sclass=netlink_xfrm_socket pid=4932 comm=syz.4.447 [ 104.218340][ T30] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 104.249779][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 104.262457][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.262457][ T30] [ 104.272201][ T30] EXT4-fs (loop2): Total free blocks count 0 [ 104.278276][ T30] EXT4-fs (loop2): Free/Dirty block details [ 104.284160][ T30] EXT4-fs (loop2): free_blocks=20480 [ 104.289562][ T30] EXT4-fs (loop2): dirty_blocks=11040 [ 104.295052][ T30] EXT4-fs (loop2): Block reservation details [ 104.301046][ T30] EXT4-fs (loop2): i_reserved_data_blocks=690 [ 104.318006][ T4934] loop1: detected capacity change from 0 to 2048 [ 104.432173][ T4934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.435039][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 2052 with max blocks 2048 with error 28 [ 104.460801][ T28] audit: type=1400 audit(1780324527.184:574): avc: denied { write } for pid=4933 comm="syz.1.448" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.494076][ T28] audit: type=1326 audit(1780324527.244:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.3.450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 104.522406][ T4942] FAULT_INJECTION: forcing a failure. [ 104.522406][ T4942] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.538077][ T227] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.544926][ T28] audit: type=1326 audit(1780324527.244:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.3.450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 104.552122][ T227] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.640439][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.3.451 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 104.640484][ T4942] Tainted: [W]=WARN [ 104.640490][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.640507][ T4942] Call Trace: [ 104.640514][ T4942] [ 104.640523][ T4942] __dump_stack+0x1d/0x30 [ 104.640548][ T4942] dump_stack_lvl+0x95/0xd0 [ 104.640565][ T4942] dump_stack+0x15/0x1b [ 104.640624][ T4942] should_fail_ex+0x263/0x280 [ 104.640645][ T4942] should_fail+0xb/0x20 [ 104.640659][ T4942] get_futex_key+0x12f/0xb50 [ 104.640735][ T4942] futex_wake_op+0xa3/0xa70 [ 104.640828][ T4942] ? kstrtouint_from_user+0xa8/0xf0 [ 104.640859][ T4942] ? 0xffffffff81000000 [ 104.640873][ T4942] do_futex+0x348/0x380 [ 104.640970][ T4942] __se_sys_futex+0x2f6/0x370 [ 104.641031][ T4942] ? mutex_unlock+0x4e/0x90 [ 104.641059][ T4942] __x64_sys_futex+0x78/0x90 [ 104.641084][ T4942] x64_sys_call+0x24ab/0x3020 [ 104.641105][ T4942] do_syscall_64+0x12c/0x3b0 [ 104.641198][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.641217][ T4942] RIP: 0033:0x7f0b016cce59 [ 104.641229][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.641274][ T4942] RSP: 002b:00007f0b0011f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.641293][ T4942] RAX: ffffffffffffffda RBX: 00007f0b01945fa0 RCX: 00007f0b016cce59 [ 104.641308][ T4942] RDX: 0000000000000000 RSI: 0000000000000085 RDI: 0000000000000000 [ 104.641321][ T4942] RBP: 00007f0b0011f090 R08: 0000000000000000 R09: 00000000c5fffffd [ 104.641335][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.641345][ T4942] R13: 00007f0b01946038 R14: 00007f0b01945fa0 R15: 00007ffc6e472df8 [ 104.641452][ T4942] [ 104.908621][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 105.034369][ T28] audit: type=1326 audit(1780324527.244:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.3.450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 105.059592][ T28] audit: type=1326 audit(1780324527.244:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.3.450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 105.084732][ T28] audit: type=1326 audit(1780324527.244:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.3.450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 105.139490][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.210354][ T4961] netlink: 256 bytes leftover after parsing attributes in process `syz.2.456'. [ 105.219536][ T4961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.456'. [ 105.219582][ T4960] loop1: detected capacity change from 0 to 1024 [ 105.308220][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 105.317819][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 105.327513][ T4970] geneve1: entered promiscuous mode [ 105.363601][ T4960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.377095][ T4960] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.455: path /71/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 105.406135][ T4960] EXT4-fs (loop1): Remounting filesystem read-only [ 105.437219][ T4981] loop2: detected capacity change from 0 to 1024 [ 105.437980][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.444018][ T4981] EXT4-fs: Ignoring removed orlov option [ 105.458633][ T4981] EXT4-fs: dax option not supported [ 105.471454][ T4979] loop0: detected capacity change from 0 to 512 [ 105.572056][ T4979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 105.580221][ T4979] System zones: 0-2, 18-18, 34-34 [ 105.616327][ T4979] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 105.632342][ T4979] EXT4-fs (loop0): Remounting filesystem read-only [ 105.639561][ T4979] EXT4-fs (loop0): 1 truncate cleaned up [ 105.647143][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.660478][ T4979] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.702905][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.938625][ T311] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.951615][ T311] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.963146][ T311] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 106.443048][ T5006] loop0: detected capacity change from 0 to 512 [ 106.583137][ T5014] loop4: detected capacity change from 0 to 512 [ 106.594413][ T5014] EXT4-fs: Ignoring removed nobh option [ 106.605112][ T5014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.617081][ T5014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 106.625539][ T5014] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.633707][ T5014] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.476: attempt to clear invalid blocks 1024 len 1 [ 106.647623][ T5014] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.648041][ T5014] EXT4-fs (loop4): Remounting filesystem read-only [ 106.665510][ T5014] EXT4-fs (loop4): 1 truncate cleaned up [ 106.672022][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 106.698438][ T5020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 106.766289][ T5020] loop2: detected capacity change from 0 to 512 [ 106.833647][ T5021] loop3: detected capacity change from 0 to 512 [ 106.852472][ T5021] EXT4-fs: Ignoring removed nobh option [ 106.960098][ T5020] EXT4-fs (loop2): 1 orphan inode deleted [ 106.973065][ T5020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.066285][ T5020] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 107.082695][ T5020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.106571][ T5006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.121340][ T5021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.138814][ T5021] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.260987][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 107.263229][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.292435][ T5030] loop0: detected capacity change from 0 to 512 [ 107.300974][ T5030] EXT4-fs: Ignoring removed nobh option [ 107.341605][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.354150][ T5030] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.365434][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.396372][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.580213][ T5050] FAULT_INJECTION: forcing a failure. [ 107.580213][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 107.595234][ T5050] CPU: 1 UID: 0 PID: 5050 Comm: syz.3.484 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.595299][ T5050] Tainted: [W]=WARN [ 107.595306][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.595318][ T5050] Call Trace: [ 107.595325][ T5050] [ 107.595335][ T5050] __dump_stack+0x1d/0x30 [ 107.595360][ T5050] dump_stack_lvl+0x95/0xd0 [ 107.595388][ T5050] dump_stack+0x15/0x1b [ 107.595450][ T5050] should_fail_ex+0x263/0x280 [ 107.595466][ T5050] should_failslab+0x8c/0xb0 [ 107.595496][ T5050] __kmalloc_noprof+0xb8/0x4d0 [ 107.595593][ T5050] ? nf_tables_newrule+0xd77/0x16e0 [ 107.595714][ T5050] nf_tables_newrule+0xd77/0x16e0 [ 107.595744][ T5050] nfnetlink_rcv+0xc15/0x1720 [ 107.595809][ T5050] netlink_unicast+0x5a8/0x680 [ 107.595891][ T5050] netlink_sendmsg+0x5c8/0x6f0 [ 107.595922][ T5050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.596047][ T5050] ____sys_sendmsg+0x563/0x5b0 [ 107.596075][ T5050] ___sys_sendmsg+0x195/0x1e0 [ 107.596111][ T5050] __x64_sys_sendmsg+0xd4/0x160 [ 107.596139][ T5050] x64_sys_call+0x194c/0x3020 [ 107.596239][ T5050] do_syscall_64+0x12c/0x3b0 [ 107.596271][ T5050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.596289][ T5050] RIP: 0033:0x7f0b016cce59 [ 107.596302][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.596337][ T5050] RSP: 002b:00007f0b0011f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.596354][ T5050] RAX: ffffffffffffffda RBX: 00007f0b01945fa0 RCX: 00007f0b016cce59 [ 107.596366][ T5050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.596377][ T5050] RBP: 00007f0b0011f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.596387][ T5050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.596397][ T5050] R13: 00007f0b01946038 R14: 00007f0b01945fa0 R15: 00007ffc6e472df8 [ 107.596439][ T5050] [ 108.176052][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.200062][ T5062] __nla_validate_parse: 5 callbacks suppressed [ 108.200079][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 108.244456][ T5068] loop2: detected capacity change from 0 to 512 [ 108.254504][ T5062] wireguard: wireguard0: Could not create IPv4 socket [ 108.324097][ T5068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.358213][ T5074] loop0: detected capacity change from 0 to 512 [ 108.366437][ T5074] EXT4-fs: Ignoring removed nobh option [ 108.384714][ T5074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.397405][ T5074] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.409270][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.431988][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.522367][ T5088] Failed to initialize the IGMP autojoin socket (err -2) [ 108.723241][ T5093] loop2: detected capacity change from 0 to 512 [ 108.747884][ T5093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.780245][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 108.780258][ T28] audit: type=1400 audit(1780324531.544:691): avc: denied { write } for pid=5087 comm="syz.2.496" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.789836][ T5095] loop3: detected capacity change from 0 to 512 [ 108.816568][ T5095] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.830434][ T5095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.836983][ T5095] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 108.845842][ T5095] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.498: attempt to clear invalid blocks 2 len 1 [ 108.858772][ T5095] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 108.858991][ T5095] EXT4-fs (loop3): Remounting filesystem read-only [ 108.875461][ T5095] EXT4-fs (loop3): 1 truncate cleaned up [ 108.881661][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.924564][ T5095] syzkaller0: entered promiscuous mode [ 108.930098][ T5095] syzkaller0: entered allmulticast mode [ 108.941871][ T28] audit: type=1400 audit(1780324531.654:692): avc: denied { relabelfrom } for pid=5092 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.965280][ T5095] netlink: 27 bytes leftover after parsing attributes in process `syz.3.498'. [ 108.974834][ T28] audit: type=1400 audit(1780324531.654:693): avc: denied { relabelto } for pid=5092 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.087192][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.115252][ T5104] loop2: detected capacity change from 0 to 512 [ 109.163400][ T5104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.180404][ T28] audit: type=1400 audit(1780324531.934:694): avc: denied { write } for pid=5103 comm="syz.2.501" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.225447][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.360524][ T5112] EXT4-fs: Ignoring removed nobh option [ 109.514606][ T5111] syz.1.503 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 109.528705][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.1.503 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 109.528734][ T5111] Tainted: [W]=WARN [ 109.528741][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.528753][ T5111] Call Trace: [ 109.528760][ T5111] [ 109.528772][ T5111] __dump_stack+0x1d/0x30 [ 109.528795][ T5111] dump_stack_lvl+0x95/0xd0 [ 109.528814][ T5111] dump_stack+0x15/0x1b [ 109.528833][ T5111] dump_header+0x80/0x240 [ 109.528856][ T5111] oom_kill_process+0x295/0x350 [ 109.528929][ T5111] out_of_memory+0x97d/0xb80 [ 109.528962][ T5111] try_charge_memcg+0x62f/0xa10 [ 109.529047][ T5111] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 109.529150][ T5111] __alloc_frozen_pages_noprof+0x18a/0x350 [ 109.529203][ T5111] alloc_pages_mpol+0xb3/0x260 [ 109.529227][ T5111] alloc_pages_noprof+0x8f/0x140 [ 109.529301][ T5111] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 109.529355][ T5111] __kvmalloc_node_noprof+0x3d4/0x640 [ 109.529375][ T5111] ? futex_hash_allocate+0x190/0x9a0 [ 109.529408][ T5111] ? futex_hash_allocate+0x190/0x9a0 [ 109.529475][ T5111] futex_hash_allocate+0x190/0x9a0 [ 109.529528][ T5111] ? cap_task_prctl+0x13f/0x6b0 [ 109.529648][ T5111] futex_hash_prctl+0xd8/0xf0 [ 109.529677][ T5111] __se_sys_prctl+0x4f4/0x1400 [ 109.529715][ T5111] __x64_sys_prctl+0x67/0x80 [ 109.529738][ T5111] x64_sys_call+0x2533/0x3020 [ 109.529765][ T5111] do_syscall_64+0x12c/0x3b0 [ 109.529800][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.529837][ T5111] RIP: 0033:0x7f7694d8ce59 [ 109.529851][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.529906][ T5111] RSP: 002b:00007f76937be028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 109.529928][ T5111] RAX: ffffffffffffffda RBX: 00007f7695006090 RCX: 00007f7694d8ce59 [ 109.529943][ T5111] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 109.529958][ T5111] RBP: 00007f7694e22d6f R08: 0000000000000000 R09: 0000000000000000 [ 109.530017][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.530029][ T5111] R13: 00007f7695006128 R14: 00007f7695006090 R15: 00007ffcbcb771c8 [ 109.530047][ T5111] [ 109.530053][ T5111] memory: usage 307200kB, limit 307200kB, failcnt 197 [ 109.683030][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.806636][ T5112] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.822291][ T5111] memory+swap: usage 156080kB, limit 9007199254740988kB, failcnt 0 [ 109.830262][ T5111] kmem: usage 143488kB, limit 9007199254740988kB, failcnt 0 [ 109.837786][ T5111] Memory cgroup stats for /syz1: [ 109.838063][ T5111] cache 24576 [ 109.846495][ T5111] rss 0 [ 109.849286][ T5111] shmem 24576 [ 109.852800][ T5111] mapped_file 0 [ 109.856274][ T5111] dirty 0 [ 109.859344][ T5111] writeback 0 [ 109.863088][ T5111] workingset_refault_anon 40 [ 109.867696][ T5111] workingset_refault_file 32 [ 109.872460][ T5111] swap 204800 [ 109.875830][ T5111] swapcached 372736 [ 109.879723][ T5111] pgpgin 141333 [ 109.883471][ T5111] pgpgout 141326 [ 109.887084][ T5111] pgfault 158366 [ 109.890888][ T5111] pgmajfault 29 [ 109.894661][ T5111] inactive_anon 4096 [ 109.904700][ T5111] active_anon 0 [ 109.908212][ T5111] inactive_file 0 [ 109.912050][ T5111] active_file 0 [ 109.915552][ T5111] unevictable 24576 [ 109.919344][ T5111] hierarchical_memory_limit 314572800 [ 109.924979][ T5111] hierarchical_memsw_limit 9223372036854771712 [ 109.931313][ T5111] total_cache 24576 [ 109.935441][ T5111] total_rss 0 [ 109.938792][ T5111] total_shmem 24576 [ 109.943163][ T5111] total_mapped_file 0 [ 109.947164][ T5111] total_dirty 0 [ 109.950628][ T5111] total_writeback 0 [ 109.952504][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.955315][ T5111] total_workingset_refault_anon 40 [ 110.000245][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.015615][ T5111] total_workingset_refault_file 32 [ 110.027087][ T5111] total_swap 204800 [ 110.039480][ T5131] Failed to initialize the IGMP autojoin socket (err -2) [ 110.039667][ T5111] total_swapcached 372736 [ 110.051192][ T5111] total_pgpgin 141333 [ 110.059674][ T5111] total_pgpgout 141326 [ 110.066434][ T5111] total_pgfault 158366 [ 110.070663][ T5111] total_pgmajfault 29 [ 110.074681][ T5111] total_inactive_anon 4096 [ 110.080781][ T5135] process 'syz.4.510' launched '/dev/fd/6' with NULL argv: empty string added [ 110.089332][ T5111] total_active_anon 0 [ 110.089781][ T28] audit: type=1400 audit(1780324532.824:695): avc: denied { execute } for pid=5127 comm="syz.4.510" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.093662][ T5111] total_inactive_file 0 [ 110.093672][ T5111] total_active_file 0 [ 110.093680][ T5111] total_unevictable 24576 [ 110.093691][ T5111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 110.117041][ T28] audit: type=1400 audit(1780324532.884:696): avc: denied { execute_no_trans } for pid=5127 comm="syz.4.510" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.117069][ T28] audit: type=1400 audit(1780324532.884:697): avc: denied { execute } for pid=5127 comm="syz.4.510" name="file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.196174][ T5111] ,cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.503,pid=5107,uid=0 [ 110.198251][ T5132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.206156][ T5111] Memory cgroup out of memory: Killed process 5107 (syz.1.503) total-vm:94300kB, anon-rss:1256kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 110.312861][ T28] audit: type=1400 audit(1780324533.054:698): avc: denied { write } for pid=5130 comm="syz.0.512" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.415667][ T5140] EXT4-fs (loop2): 1 orphan inode deleted [ 110.427582][ T5140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.473102][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.501042][ T5140] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 110.510637][ T5140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.601645][ T5145] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 110.643840][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 110.664971][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.718237][ T5145] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 110.751874][ T28] audit: type=1400 audit(1780324533.504:699): avc: denied { write } for pid=5129 comm="syz.3.511" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.790100][ T5145] wireguard: wg2: Could not create IPv4 socket [ 110.985747][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.115469][ T5163] EXT4-fs: Ignoring removed nobh option [ 111.227308][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.239819][ T5163] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.308898][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.353447][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.387444][ T5174] vfat: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615' [ 111.411416][ T5179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 111.426780][ T5179] System zones: 1-12 [ 111.432185][ T5179] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.522: corrupted in-inode xattr: e_value size too large [ 111.458068][ T5179] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.459156][ T5176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.480815][ T5176] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.483220][ T5179] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.522: couldn't read orphan inode 15 (err -117) [ 111.517695][ T5179] loop3: lost filesystem error report for type 5 error -117 [ 111.518408][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.532279][ T5176] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 111.556448][ T28] audit: type=1400 audit(1780324534.294:700): avc: denied { write } for pid=5178 comm="syz.3.522" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.582023][ T5179] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.629691][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.650918][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.690326][ T5192] Failed to initialize the IGMP autojoin socket (err -2) [ 111.841275][ T5194] set_capacity_and_notify: 9 callbacks suppressed [ 111.841292][ T5194] loop3: detected capacity change from 0 to 512 [ 111.936615][ T5194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.277662][ T5203] loop1: detected capacity change from 0 to 512 [ 112.346117][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.392561][ T5203] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.400610][ T5203] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.407448][ T5203] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 112.421952][ T5203] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 112.428932][ T5203] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.530: bg 0: block 64: padding at end of block bitmap is not set [ 112.443055][ T5203] loop1: lost filesystem error report for type 5 error -117 [ 112.443329][ T5203] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.459425][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 112.459441][ C1] EXT4-fs (loop1): initial error at time 1780324535: ext4_validate_block_bitmap:441 [ 112.459484][ C1] EXT4-fs (loop1): last error at time 1780324535: ext4_validate_block_bitmap:441 [ 112.484576][ T5203] loop1: lost filesystem error report for type 5 error -117 [ 112.485017][ T5203] EXT4-fs (loop1): 1 truncate cleaned up [ 112.498263][ T5203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.615655][ T5216] loop0: detected capacity change from 0 to 512 [ 112.625352][ T5216] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.686092][ T5215] loop4: detected capacity change from 0 to 8192 [ 112.691727][ T5222] loop3: detected capacity change from 0 to 512 [ 112.716180][ T5222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 112.725482][ T5222] System zones: 1-12 [ 112.729629][ T5222] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.538: corrupted in-inode xattr: e_value size too large [ 112.743944][ T5222] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.744109][ T5222] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.538: couldn't read orphan inode 15 (err -117) [ 112.765060][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 112.765090][ C1] EXT4-fs (loop3): initial error at time 1780324535: ext4_iget_extra_inode:5128: inode 15 [ 112.765120][ C1] EXT4-fs (loop3): last error at time 1780324535: ext4_iget_extra_inode:5128: inode 15 [ 112.804518][ T5222] loop3: lost filesystem error report for type 5 error -117 [ 112.804990][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.805881][ T5215] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.814793][ T5222] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 112.907599][ T5228] loop0: detected capacity change from 0 to 512 [ 112.932402][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.943084][ T5228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.976825][ T5231] Failed to initialize the IGMP autojoin socket (err -2) [ 113.043002][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.054260][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.072067][ T5228] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.093797][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.120581][ T5228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'. [ 113.142135][ T5228] FAULT_INJECTION: forcing a failure. [ 113.142135][ T5228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.158186][ T5228] CPU: 1 UID: 0 PID: 5228 Comm: syz.0.541 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.158289][ T5228] Tainted: [W]=WARN [ 113.158310][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.158322][ T5228] Call Trace: [ 113.158330][ T5228] [ 113.158338][ T5228] __dump_stack+0x1d/0x30 [ 113.158363][ T5228] dump_stack_lvl+0x95/0xd0 [ 113.158382][ T5228] dump_stack+0x15/0x1b [ 113.158397][ T5228] should_fail_ex+0x263/0x280 [ 113.158436][ T5228] should_fail+0xb/0x20 [ 113.158454][ T5228] should_fail_usercopy+0x1a/0x20 [ 113.158475][ T5228] _copy_from_iter+0xcf/0xea0 [ 113.158498][ T5228] ? __pfx_kcov_common_handle+0x10/0x10 [ 113.158580][ T5228] ? __alloc_skb+0x4f6/0x690 [ 113.158602][ T5228] ? __alloc_skb+0x200/0x690 [ 113.158684][ T5228] netlink_sendmsg+0x4ae/0x6f0 [ 113.158721][ T5228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.158750][ T5228] ____sys_sendmsg+0x563/0x5b0 [ 113.158779][ T5228] ___sys_sendmsg+0x195/0x1e0 [ 113.158870][ T5228] __x64_sys_sendmsg+0xd4/0x160 [ 113.158895][ T5228] x64_sys_call+0x194c/0x3020 [ 113.158960][ T5228] do_syscall_64+0x12c/0x3b0 [ 113.159040][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.159098][ T5228] RIP: 0033:0x7fc3bbf0ce59 [ 113.159115][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.159133][ T5228] RSP: 002b:00007fc3ba95f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.159153][ T5228] RAX: ffffffffffffffda RBX: 00007fc3bc185fa0 RCX: 00007fc3bbf0ce59 [ 113.159197][ T5228] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 113.159209][ T5228] RBP: 00007fc3ba95f090 R08: 0000000000000000 R09: 0000000000000000 [ 113.159220][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.159230][ T5228] R13: 00007fc3bc186038 R14: 00007fc3bc185fa0 R15: 00007ffd517af8b8 [ 113.159299][ T5228] [ 113.358613][ T5231] loop4: detected capacity change from 0 to 512 [ 113.365144][ T5245] loop3: detected capacity change from 0 to 2048 [ 113.426714][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.451123][ T5254] geneve1: entered promiscuous mode [ 113.511973][ T5260] loop0: detected capacity change from 0 to 2048 [ 113.608499][ T5266] loop4: detected capacity change from 0 to 512 [ 113.616399][ T5266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 113.624368][ T5266] System zones: 1-12 [ 113.628427][ T5266] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.550: corrupted in-inode xattr: e_value size too large [ 113.642317][ T5266] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.642558][ T5266] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.550: couldn't read orphan inode 15 (err -117) [ 113.663662][ T5266] loop4: lost filesystem error report for type 5 error -117 [ 113.666431][ T5266] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 113.692069][ T5260] GPT:first_usable_lbas don't match. [ 113.697563][ T5260] GPT:34 != 290 [ 113.701184][ T5260] GPT: Use GNU Parted to correct GPT errors. [ 113.707973][ T5260] loop0: p1 p2 p3 [ 113.773850][ T4609] udevd[4609]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 113.782747][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 113.784602][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 113.845815][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 113.845830][ T28] audit: type=1400 audit(1780324536.604:733): avc: denied { getopt } for pid=5277 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.895005][ T28] audit: type=1400 audit(1780324536.664:734): avc: denied { read } for pid=5282 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.934396][ T5284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.555'. [ 113.949709][ T5284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.555'. [ 113.963750][ T5284] netlink: 108 bytes leftover after parsing attributes in process `syz.1.555'. [ 113.972797][ T5284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 114.024195][ T5284] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 114.160163][ T5300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 114.168143][ T5300] System zones: 1-12 [ 114.172384][ T5300] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.561: corrupted in-inode xattr: e_value size too large [ 114.186279][ T5300] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.186472][ T5300] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.561: couldn't read orphan inode 15 (err -117) [ 114.216333][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 114.222785][ C0] EXT4-fs (loop3): initial error at time 1780324536: ext4_iget_extra_inode:5128: inode 15 [ 114.225947][ T5300] loop3: lost filesystem error report for type 5 error -117 [ 114.232693][ C0] EXT4-fs (loop3): last error at time 1780324536: ext4_iget_extra_inode:5128: inode 15 [ 114.251662][ T5304] Failed to initialize the IGMP autojoin socket (err -2) [ 114.258789][ T28] audit: type=1400 audit(1780324536.984:735): avc: denied { read append } for pid=5302 comm="syz.1.562" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.288800][ T5306] FAULT_INJECTION: forcing a failure. [ 114.288800][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.295341][ T28] audit: type=1400 audit(1780324536.984:736): avc: denied { open } for pid=5302 comm="syz.1.562" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.309062][ T5306] CPU: 1 UID: 0 PID: 5306 Comm: syz.1.563 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.309117][ T5306] Tainted: [W]=WARN [ 114.309151][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.309162][ T5306] Call Trace: [ 114.309170][ T5306] [ 114.309179][ T5306] __dump_stack+0x1d/0x30 [ 114.309204][ T5306] dump_stack_lvl+0x95/0xd0 [ 114.309222][ T5306] dump_stack+0x15/0x1b [ 114.309241][ T5306] should_fail_ex+0x263/0x280 [ 114.309268][ T5306] should_fail+0xb/0x20 [ 114.309284][ T5306] should_fail_usercopy+0x1a/0x20 [ 114.309376][ T5306] _copy_from_user+0x1c/0xb0 [ 114.309398][ T5306] ___sys_sendmsg+0xc1/0x1e0 [ 114.309422][ T5306] ? _raw_spin_unlock+0x9/0x30 [ 114.309454][ T5306] __x64_sys_sendmsg+0xd4/0x160 [ 114.309483][ T5306] x64_sys_call+0x194c/0x3020 [ 114.309506][ T5306] do_syscall_64+0x12c/0x3b0 [ 114.309550][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.309570][ T5306] RIP: 0033:0x7f7694d8ce59 [ 114.309587][ T5306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.309604][ T5306] RSP: 002b:00007f76937df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.309667][ T5306] RAX: ffffffffffffffda RBX: 00007f7695005fa0 RCX: 00007f7694d8ce59 [ 114.309679][ T5306] RDX: 0000000020000040 RSI: 0000200000000440 RDI: 0000000000000005 [ 114.309719][ T5306] RBP: 00007f76937df090 R08: 0000000000000000 R09: 0000000000000000 [ 114.309736][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.309747][ T5306] R13: 00007f7695006038 R14: 00007f7695005fa0 R15: 00007ffcbcb771c8 [ 114.309766][ T5306] [ 114.393576][ T5300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, [ 114.395590][ T28] audit: type=1400 audit(1780324536.984:737): avc: denied { ioctl } for pid=5302 comm="syz.1.562" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.398217][ T5300] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 114.402818][ T28] audit: type=1400 audit(1780324536.984:738): avc: denied { ioctl } for pid=5302 comm="syz.1.562" path="socket:[10668]" dev="sockfs" ino=10668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.402852][ T28] audit: type=1400 audit(1780324537.044:739): avc: denied { write } for pid=5299 comm="syz.3.561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.626054][ T28] audit: type=1400 audit(1780324537.044:740): avc: denied { write } for pid=5299 comm="syz.3.561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.628157][ T5309] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 114.647688][ T28] audit: type=1400 audit(1780324537.164:741): avc: denied { write } for pid=5299 comm="syz.3.561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.677280][ T28] audit: type=1400 audit(1780324537.164:742): avc: denied { write } for pid=5299 comm="syz.3.561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.688959][ T5309] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 114.715449][ T5309] EXT4-fs (loop2): 1 truncate cleaned up [ 114.785276][ T5309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.889564][ T5327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 114.983744][ T5332] Failed to initialize the IGMP autojoin socket (err -2) [ 115.042881][ T5328] loop3: p1 p2 p3 [ 115.054903][ T5328] loop3: p3 size 101253376 extends beyond EOD, truncated [ 115.240556][ T5339] journal_path: Non-blockdev passed as './file0' [ 115.259340][ T5339] EXT4-fs: error: could not find journal device path [ 115.500587][ T5346] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.652722][ T5348] netlink: 13 bytes leftover after parsing attributes in process `syz.1.575'. [ 115.685954][ T5348] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 117.268239][ T5354] set_capacity_and_notify: 9 callbacks suppressed [ 117.268256][ T5354] loop0: detected capacity change from 0 to 512 [ 117.923073][ T5350] syzkaller0: entered promiscuous mode [ 117.928576][ T5350] syzkaller0: entered allmulticast mode [ 118.519935][ T5357] loop3: detected capacity change from 0 to 512 [ 118.603807][ T5354] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 118.660883][ T5357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 118.684427][ T5357] System zones: 1-12 [ 118.696867][ T5357] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.576: corrupted in-inode xattr: e_value size too large [ 118.711247][ T5357] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.720032][ T5357] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.576: couldn't read orphan inode 15 (err -117) [ 118.741206][ T5357] loop3: lost filesystem error report for type 5 error -117 [ 118.789265][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.805006][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.818222][ T5357] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 118.835002][ T5360] Failed to initialize the IGMP autojoin socket (err -2) [ 118.855767][ T5364] loop1: detected capacity change from 0 to 512 [ 118.891626][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 118.891648][ T28] audit: type=1400 audit(1780324541.664:761): avc: denied { mount } for pid=5366 comm="syz.0.579" name="/" dev="hugetlbfs" ino=10796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.931553][ T5367] FAULT_INJECTION: forcing a failure. [ 118.931553][ T5367] name failslab, interval 1, probability 0, space 0, times 0 [ 118.944535][ T5367] CPU: 1 UID: 0 PID: 5367 Comm: syz.0.579 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 118.944581][ T5367] Tainted: [W]=WARN [ 118.944650][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.944666][ T5367] Call Trace: [ 118.944681][ T5367] [ 118.944689][ T5367] __dump_stack+0x1d/0x30 [ 118.944711][ T5367] dump_stack_lvl+0x95/0xd0 [ 118.944729][ T5367] dump_stack+0x15/0x1b [ 118.944744][ T5367] should_fail_ex+0x263/0x280 [ 118.944781][ T5367] should_failslab+0x8c/0xb0 [ 118.944808][ T5367] kmem_cache_alloc_noprof+0x66/0x3f0 [ 118.944839][ T5367] ? do_getname+0x2e/0x1c0 [ 118.944860][ T5367] do_getname+0x2e/0x1c0 [ 118.944949][ T5367] __se_sys_mknodat+0x24/0xf0 [ 118.944973][ T5367] __x64_sys_mknodat+0x55/0x70 [ 118.945069][ T5367] x64_sys_call+0x312/0x3020 [ 118.945098][ T5367] do_syscall_64+0x12c/0x3b0 [ 118.945164][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.945186][ T5367] RIP: 0033:0x7fc3bbf0ce59 [ 118.945200][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.945214][ T5367] RSP: 002b:00007fc3ba95f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 118.945308][ T5367] RAX: ffffffffffffffda RBX: 00007fc3bc185fa0 RCX: 00007fc3bbf0ce59 [ 118.945323][ T5367] RDX: b0a54e68b1cd2fdb RSI: 0000200000000040 RDI: ffffffffffffff9c [ 118.945343][ T5367] RBP: 00007fc3ba95f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.945357][ T5367] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 118.945370][ T5367] R13: 00007fc3bc186038 R14: 00007fc3bc185fa0 R15: 00007ffd517af8b8 [ 118.945387][ T5367] [ 119.121089][ T5364] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.132745][ T5364] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 119.142813][ T5364] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.577: Corrupt directory, running e2fsck is recommended [ 119.195677][ T5373] loop3: detected capacity change from 0 to 512 [ 119.214443][ T5364] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 119.250480][ T5374] Failed to initialize the IGMP autojoin socket (err -2) [ 119.271678][ T5364] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.577: corrupted in-inode xattr: e_name out of bounds [ 119.285647][ T5364] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.290207][ T5364] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.577: couldn't read orphan inode 15 (err -117) [ 119.311228][ T5364] loop1: lost filesystem error report for type 5 error -117 [ 119.460658][ T28] audit: type=1400 audit(1780324542.224:762): avc: denied { write } for pid=5372 comm="syz.3.580" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.498438][ T5375] loop0: detected capacity change from 0 to 512 [ 119.501260][ T28] audit: type=1400 audit(1780324542.224:763): avc: denied { write } for pid=5372 comm="syz.3.580" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.638254][ T28] audit: type=1400 audit(1780324542.334:764): avc: denied { write } for pid=5371 comm="syz.0.581" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.898774][ T5386] FAULT_INJECTION: forcing a failure. [ 119.898774][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 119.911465][ T5386] CPU: 0 UID: 0 PID: 5386 Comm: syz.3.582 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 119.911519][ T5386] Tainted: [W]=WARN [ 119.911525][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.911535][ T5386] Call Trace: [ 119.911542][ T5386] [ 119.911549][ T5386] __dump_stack+0x1d/0x30 [ 119.911605][ T5386] dump_stack_lvl+0x95/0xd0 [ 119.911631][ T5386] dump_stack+0x15/0x1b [ 119.911647][ T5386] should_fail_ex+0x263/0x280 [ 119.911663][ T5386] ? __se_sys_memfd_create+0x1df/0x3b0 [ 119.911698][ T5386] should_failslab+0x8c/0xb0 [ 119.911724][ T5386] __kmalloc_cache_noprof+0x5f/0x400 [ 119.911779][ T5386] ? fput+0x8f/0xc0 [ 119.911799][ T5386] __se_sys_memfd_create+0x1df/0x3b0 [ 119.911820][ T5386] __x64_sys_memfd_create+0x31/0x40 [ 119.911840][ T5386] x64_sys_call+0x1f22/0x3020 [ 119.911884][ T5386] do_syscall_64+0x12c/0x3b0 [ 119.911960][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.911983][ T5386] RIP: 0033:0x7f0b016cce59 [ 119.911998][ T5386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.912013][ T5386] RSP: 002b:00007f0b000dce08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 119.912053][ T5386] RAX: ffffffffffffffda RBX: 00000000000004a4 RCX: 00007f0b016cce59 [ 119.912068][ T5386] RDX: 00007f0b000dcee0 RSI: 0000000000000000 RDI: 00007f0b01762f4f [ 119.912082][ T5386] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000 [ 119.912094][ T5386] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 119.912104][ T5386] R13: 00007f0b000dcee0 R14: 00007f0b000dcea0 R15: 00002000000000c0 [ 119.912120][ T5386] [ 122.275173][ T5387] loop4: detected capacity change from 0 to 512 [ 122.421207][ T5393] loop1: detected capacity change from 0 to 2048 [ 122.442672][ T5387] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.583: corrupted xattr block 95: invalid header [ 122.456437][ T5387] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.456892][ T5387] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.583: bg 0: block 7: invalid block bitmap [ 122.478273][ T5387] loop4: lost filesystem error report for type 5 error -117 [ 122.515409][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 122.529108][ C0] EXT4-fs (loop4): initial error at time 1780324545: ext4_expand_extra_isize_ea:2810: inode 11 [ 122.539492][ C0] EXT4-fs (loop4): last error at time 1780324545: ext4_validate_block_bitmap:432 [ 122.552735][ T5387] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 122.561637][ T5387] loop4: lost filesystem error report for type 5 error -117 [ 122.562856][ T5387] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.583: corrupted xattr block 95: invalid header [ 122.583620][ T5387] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.584476][ T5387] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 122.602739][ T5387] EXT4-fs (loop4): 1 orphan inode deleted [ 123.238254][ T5403] loop3: detected capacity change from 0 to 512 [ 123.362348][ T5403] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 123.439766][ T5403] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 123.451123][ T5403] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.587: bad orphan inode 4 [ 123.461597][ T5403] loop3: lost filesystem error report for type 5 error -117 [ 123.467421][ T5403] EXT4-fs (loop3): 1 orphan inode deleted [ 123.506075][ T5403] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.587: lblock 0 mapped to illegal pblock 4 (length 1) [ 123.522437][ T28] audit: type=1400 audit(1780324546.274:765): avc: denied { setattr } for pid=5394 comm="syz.3.587" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.619499][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 123.658184][ T28] audit: type=1400 audit(1780324546.274:766): avc: denied { write } for pid=5394 comm="syz.3.587" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.823624][ T28] audit: type=1400 audit(1780324546.274:767): avc: denied { create } for pid=5394 comm="syz.3.587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 123.903029][ T5415] loop3: detected capacity change from 0 to 256 [ 123.921469][ T28] audit: type=1326 audit(1780324546.684:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.946709][ T28] audit: type=1326 audit(1780324546.684:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.946778][ T28] audit: type=1326 audit(1780324546.684:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.946882][ T28] audit: type=1326 audit(1780324546.684:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.946904][ T28] audit: type=1326 audit(1780324546.684:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.946994][ T28] audit: type=1326 audit(1780324546.684:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.947016][ T28] audit: type=1326 audit(1780324546.684:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.947045][ T28] audit: type=1326 audit(1780324546.684:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.947097][ T28] audit: type=1326 audit(1780324546.684:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 123.947121][ T28] audit: type=1326 audit(1780324546.684:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b016cce59 code=0x7ffc0000 [ 124.143652][ T5424] loop0: detected capacity change from 0 to 512 [ 124.423219][ T5432] macvlan0: entered promiscuous mode [ 124.429730][ T5432] dummy0: entered promiscuous mode [ 124.435780][ T5432] hsr1: entered promiscuous mode [ 124.440808][ T5432] hsr1: entered allmulticast mode [ 124.446268][ T5432] macvlan0: entered allmulticast mode [ 124.451714][ T5432] veth1_vlan: entered allmulticast mode [ 124.457829][ T5432] dummy0: entered allmulticast mode [ 124.510347][ T5434] ALSA: seq fatal error: cannot create timer (-19) [ 124.525329][ T5434] loop4: detected capacity change from 0 to 512 [ 124.533639][ T5434] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 124.585712][ T5434] loop4: detected capacity change from 0 to 164 [ 124.598964][ T5434] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 124.608737][ T5434] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 124.618707][ T5434] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.626732][ T5434] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 124.942348][ T5444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.599'. [ 124.952291][ T5444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.599'. [ 124.972370][ T5444] netlink: 108 bytes leftover after parsing attributes in process `syz.3.599'. [ 124.988931][ T5444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 125.005329][ T5444] wireguard: wg2: Could not create IPv4 socket [ 125.074484][ T5444] loop3: detected capacity change from 0 to 4096 [ 125.123054][ T5444] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 125.399862][ T5456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.602'. [ 125.414731][ T5438] syz.4.598 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 125.432080][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: syz.4.598 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 125.432107][ T5438] Tainted: [W]=WARN [ 125.432113][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.432126][ T5438] Call Trace: [ 125.432206][ T5438] [ 125.432215][ T5438] __dump_stack+0x1d/0x30 [ 125.432334][ T5438] dump_stack_lvl+0x95/0xd0 [ 125.432359][ T5438] dump_stack+0x15/0x1b [ 125.432439][ T5438] dump_header+0x80/0x240 [ 125.432458][ T5438] oom_kill_process+0x295/0x350 [ 125.432555][ T5438] out_of_memory+0x97d/0xb80 [ 125.432582][ T5438] try_charge_memcg+0x62f/0xa10 [ 125.432612][ T5438] charge_memcg+0x6d/0x120 [ 125.432697][ T5438] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 125.432720][ T5438] __swap_cache_prepare_and_add+0x69/0x4a0 [ 125.432765][ T5438] ? alloc_pages_mpol+0x217/0x260 [ 125.432926][ T5438] swap_cache_alloc_folio+0xa2/0x120 [ 125.432947][ T5438] swap_cluster_readahead+0x35c/0x3c0 [ 125.432976][ T5438] swapin_readahead+0xde/0x840 [ 125.433069][ T5438] ? _raw_spin_unlock+0x9/0x30 [ 125.433160][ T5438] ? swap_put_entries_cluster+0x46c/0x490 [ 125.433181][ T5438] ? __entry_text_end+0x1d848/0x102179 [ 125.433205][ T5438] ? __rcu_read_unlock+0x4e/0x70 [ 125.433226][ T5438] ? swap_cache_get_folio+0x1e0/0x1f0 [ 125.433249][ T5438] do_swap_page+0x31e/0x2180 [ 125.433310][ T5438] ? __css_rstat_updated+0xbb/0x280 [ 125.433330][ T5438] ? __rcu_read_lock+0x36/0x50 [ 125.433424][ T5438] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 125.433444][ T5438] handle_mm_fault+0xb30/0x2e70 [ 125.433469][ T5438] ? vma_start_read+0x1c7/0x2c0 [ 125.433551][ T5438] do_user_addr_fault+0x62f/0x1050 [ 125.433579][ T5438] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 125.433604][ T5438] ? trace_page_fault_user+0x1f/0xa0 [ 125.433652][ T5438] exc_page_fault+0x62/0xa0 [ 125.433722][ T5438] asm_exc_page_fault+0x26/0x30 [ 125.433739][ T5438] RIP: 0033:0x7fe0e9c6a80c [ 125.433753][ T5438] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 125.433788][ T5438] RSP: 002b:00007fffe812f620 EFLAGS: 00010202 [ 125.433802][ T5438] RAX: 0000000000000000 RBX: 00007fe0ea016090 RCX: 000055558a408808 [ 125.433816][ T5438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.433829][ T5438] RBP: 00007fe0ea017da0 R08: 0000000000000000 R09: 0000000000000000 [ 125.433843][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001ea5b [ 125.433855][ T5438] R13: 00007fe0ea01618c R14: 000000000001e7e2 R15: 00007fe0ea016180 [ 125.433884][ T5438] [ 125.436431][ T5438] memory: usage 292120kB, limit 307200kB, failcnt 169 [ 125.727112][ T5438] memory+swap: usage 80948kB, limit 9007199254740988kB, failcnt 0 [ 125.735439][ T5438] kmem: usage 64664kB, limit 9007199254740988kB, failcnt 0 [ 125.742663][ T5438] Memory cgroup stats for /syz4: [ 125.742856][ T5438] cache 24576 [ 125.751246][ T5438] rss 0 [ 125.754021][ T5438] shmem 24576 [ 125.757368][ T5438] mapped_file 0 [ 125.760854][ T5438] dirty 0 [ 125.763832][ T5438] writeback 0 [ 125.767113][ T5438] workingset_refault_anon 31 [ 125.771691][ T5438] workingset_refault_file 0 [ 125.776283][ T5438] swap 4472832 [ 125.779683][ T5438] swapcached 4603904 [ 125.783607][ T5438] pgpgin 268354 [ 125.787058][ T5438] pgpgout 268347 [ 125.790605][ T5438] pgfault 291664 [ 125.808799][ T5438] pgmajfault 23 [ 125.812289][ T5438] inactive_anon 0 [ 125.816272][ T5438] active_anon 0 [ 125.820111][ T5438] inactive_file 0 [ 125.823883][ T5438] active_file 0 [ 125.827347][ T5438] unevictable 24576 [ 125.831693][ T5438] hierarchical_memory_limit 314572800 [ 125.837821][ T5463] loop3: detected capacity change from 0 to 512 [ 125.837898][ T5438] hierarchical_memsw_limit 9223372036854771712 [ 125.851745][ T5438] total_cache 24576 [ 125.855614][ T5438] total_rss 0 [ 125.865372][ T5438] total_shmem 24576 [ 125.866617][ T5465] loop0: detected capacity change from 0 to 512 [ 125.876698][ T5438] total_mapped_file 0 [ 125.880691][ T5438] total_dirty 0 [ 125.884143][ T5438] total_writeback 0 [ 125.887952][ T5438] total_workingset_refault_anon 31 [ 125.904992][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 125.907542][ T5438] total_workingset_refault_file 0 [ 125.914711][ T5466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5466 comm=syz.2.603 [ 125.935217][ T5466] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 125.945890][ T5438] total_swap 4472832 [ 125.945924][ T5465] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 125.949816][ T5438] total_swapcached 4603904 [ 125.949828][ T5438] total_pgpgin 268354 [ 125.949835][ T5438] total_pgpgout 268347 [ 125.949843][ T5438] total_pgfault 291664 [ 125.949876][ T5438] total_pgmajfault 23 [ 125.949884][ T5438] total_inactive_anon 0 [ 125.949892][ T5438] total_active_anon 0 [ 125.949899][ T5438] total_inactive_file 0 [ 125.949908][ T5438] total_active_file 0 [ 125.949979][ T5438] total_unevictable 24576 [ 125.949986][ T5438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 126.018809][ T5465] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 126.028364][ T5438] ,mems_allowed=0 [ 126.034409][ T5465] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.606: Bad quota inode: 4, type: 1 [ 126.037569][ T5438] ,oom_memcg= [ 126.041014][ T5465] loop0: lost filesystem error report for type 5 error -117 [ 126.057641][ T5465] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.080694][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 126.080763][ C1] EXT4-fs (loop0): initial error at time 1780324548: ext4_ext_check_inode:521: inode 4 [ 126.080871][ C1] EXT4-fs (loop0): last error at time 1780324548: ext4_quota_enable:7228 [ 126.089094][ T5438] /syz4 [ 126.099965][ T5465] EXT4-fs (loop0): mount failed [ 126.105912][ T5438] ,task_memcg=/syz4,task=syz.4.598,pid=5438,uid=0 [ 126.136955][ T5438] Memory cgroup out of memory: Killed process 5438 (syz.4.598) total-vm:96348kB, anon-rss:1232kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 126.177802][ T5465] loop0: detected capacity change from 0 to 512 [ 126.213998][ T5473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.222594][ T5473] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.274015][ T5479] syzkaller1: entered promiscuous mode [ 126.283714][ T5479] syzkaller1: entered allmulticast mode [ 126.293707][ T5473] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.607: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 126.311654][ T5473] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.311931][ T5473] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.607: Bad quota inode: 3, type: 0 [ 126.332410][ T5473] loop1: lost filesystem error report for type 5 error -117 [ 126.332590][ T5473] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 126.354611][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 126.354630][ C0] EXT4-fs (loop1): initial error at time 1780324549: ext4_ext_check_inode:521: inode 3 [ 126.354654][ C0] EXT4-fs (loop1): last error at time 1780324549: ext4_quota_enable:7228 [ 126.361859][ T5473] EXT4-fs (loop1): mount failed [ 126.547104][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 126.606293][ T5498] FAULT_INJECTION: forcing a failure. [ 126.606293][ T5498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.621873][ T5498] CPU: 1 UID: 0 PID: 5498 Comm: syz.1.616 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 126.621907][ T5498] Tainted: [W]=WARN [ 126.621914][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.621997][ T5498] Call Trace: [ 126.622004][ T5498] [ 126.622012][ T5498] __dump_stack+0x1d/0x30 [ 126.622041][ T5498] dump_stack_lvl+0x95/0xd0 [ 126.622061][ T5498] dump_stack+0x15/0x1b [ 126.622146][ T5498] should_fail_ex+0x263/0x280 [ 126.622168][ T5498] should_fail+0xb/0x20 [ 126.622185][ T5498] should_fail_usercopy+0x1a/0x20 [ 126.622255][ T5498] _copy_from_iter+0xcf/0xea0 [ 126.622274][ T5498] ? __alloc_skb+0x4f6/0x690 [ 126.622292][ T5498] ? __alloc_skb+0x200/0x690 [ 126.622309][ T5498] netlink_sendmsg+0x4ae/0x6f0 [ 126.622371][ T5498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.622443][ T5498] ____sys_sendmsg+0x563/0x5b0 [ 126.622469][ T5498] ___sys_sendmsg+0x195/0x1e0 [ 126.622505][ T5498] __x64_sys_sendmsg+0xd4/0x160 [ 126.622533][ T5498] x64_sys_call+0x194c/0x3020 [ 126.622578][ T5498] do_syscall_64+0x12c/0x3b0 [ 126.622610][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.622667][ T5498] RIP: 0033:0x7f7694d8ce59 [ 126.622682][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.622736][ T5498] RSP: 002b:00007f76937df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.622757][ T5498] RAX: ffffffffffffffda RBX: 00007f7695005fa0 RCX: 00007f7694d8ce59 [ 126.622772][ T5498] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 126.622783][ T5498] RBP: 00007f76937df090 R08: 0000000000000000 R09: 0000000000000000 [ 126.622794][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.622855][ T5498] R13: 00007f7695006038 R14: 00007f7695005fa0 R15: 00007ffcbcb771c8 [ 126.622875][ T5498] [ 126.645557][ T5500] FAULT_INJECTION: forcing a failure. [ 126.645557][ T5500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.655095][ T5502] netlink: 'syz.1.618': attribute type 32 has an invalid length. [ 126.657056][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.4.617 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 126.657089][ T5500] Tainted: [W]=WARN [ 126.657121][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.657133][ T5500] Call Trace: [ 126.657140][ T5500] [ 126.657148][ T5500] __dump_stack+0x1d/0x30 [ 126.657173][ T5500] dump_stack_lvl+0x95/0xd0 [ 126.657232][ T5500] dump_stack+0x15/0x1b [ 126.657250][ T5500] should_fail_ex+0x263/0x280 [ 126.657270][ T5500] should_fail+0xb/0x20 [ 126.657287][ T5500] should_fail_usercopy+0x1a/0x20 [ 126.657366][ T5500] _copy_from_user+0x1c/0xb0 [ 126.657390][ T5500] file_ioctl+0xbe/0x5c0 [ 126.657417][ T5500] do_vfs_ioctl+0x7c9/0xe70 [ 126.657447][ T5500] ? selinux_file_ioctl+0x338/0x3b0 [ 126.657533][ T5500] ? __fget_files+0x184/0x1c0 [ 126.657551][ T5500] ? mutex_lock+0x57/0x90 [ 126.657576][ T5500] __se_sys_ioctl+0x82/0x140 [ 126.657602][ T5500] __x64_sys_ioctl+0x43/0x50 [ 126.657718][ T5500] x64_sys_call+0x1563/0x3020 [ 126.657740][ T5500] do_syscall_64+0x12c/0x3b0 [ 126.657827][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.657888][ T5500] RIP: 0033:0x7fe0e9d9ce59 [ 126.657905][ T5500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.657922][ T5500] RSP: 002b:00007fe0e87f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.657942][ T5500] RAX: ffffffffffffffda RBX: 00007fe0ea015fa0 RCX: 00007fe0e9d9ce59 [ 126.657955][ T5500] RDX: 0000200000000000 RSI: 0000000040305829 RDI: 0000000000000005 [ 126.657991][ T5500] RBP: 00007fe0e87f7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.658003][ T5500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.658016][ T5500] R13: 00007fe0ea016038 R14: 00007fe0ea015fa0 R15: 00007fffe812f4b8 [ 126.658037][ T5500] [ 126.824378][ T5508] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.828730][ T5502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 126.839095][ T5508] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 126.839119][ T5508] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.619: Corrupt directory, running e2fsck is recommended [ 126.840194][ T5508] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 126.900794][ T5510] tmpfs: Bad value for 'mpol' [ 127.044824][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 127.048397][ T5508] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.619: corrupted in-inode xattr: e_name out of bounds [ 127.136688][ T5508] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.136935][ T5508] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.619: couldn't read orphan inode 15 (err -117) [ 127.158083][ T5508] loop4: lost filesystem error report for type 5 error -117 [ 127.258441][ T5514] EXT4-fs (loop1): 1 orphan inode deleted [ 127.306628][ T5513] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 127.316309][ T5513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.381116][ T5522] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.474360][ T5535] set_capacity_and_notify: 4 callbacks suppressed [ 127.474379][ T5535] loop4: detected capacity change from 0 to 512 [ 127.497392][ T5535] EXT4-fs: Ignoring removed nobh option [ 127.524170][ T5535] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.551979][ T5522] bond0 (unregistering): Released all slaves [ 127.581487][ T5531] loop2: detected capacity change from 0 to 512 [ 127.618192][ T5542] loop3: detected capacity change from 0 to 512 [ 127.639637][ T5531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 127.647850][ T5531] System zones: 0-2, 18-18, 34-34 [ 127.665106][ T5531] EXT4-fs (loop2): 1 orphan inode deleted [ 127.677928][ T5531] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.694404][ T4855] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 127.708136][ T4855] EXT4-fs (loop2): Remounting filesystem read-only [ 127.743806][ T3299] EXT4-fs unmount: 41 callbacks suppressed [ 127.743824][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.813262][ T5566] FAULT_INJECTION: forcing a failure. [ 127.813262][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 127.826070][ T5560] loop2: detected capacity change from 0 to 4096 [ 127.832957][ T5566] CPU: 1 UID: 0 PID: 5566 Comm: syz.3.637 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 127.832990][ T5566] Tainted: [W]=WARN [ 127.832998][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.833057][ T5566] Call Trace: [ 127.833063][ T5566] [ 127.833071][ T5566] __dump_stack+0x1d/0x30 [ 127.833095][ T5566] dump_stack_lvl+0x95/0xd0 [ 127.833115][ T5566] dump_stack+0x15/0x1b [ 127.833195][ T5566] should_fail_ex+0x263/0x280 [ 127.833301][ T5566] should_failslab+0x8c/0xb0 [ 127.833327][ T5566] kmem_cache_alloc_noprof+0x66/0x3f0 [ 127.833353][ T5566] ? do_getname+0x2e/0x1c0 [ 127.833442][ T5566] do_getname+0x2e/0x1c0 [ 127.833461][ T5566] __se_sys_mknodat+0x24/0xf0 [ 127.833487][ T5566] __x64_sys_mknodat+0x55/0x70 [ 127.833511][ T5566] x64_sys_call+0x312/0x3020 [ 127.833534][ T5566] do_syscall_64+0x12c/0x3b0 [ 127.833585][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.833606][ T5566] RIP: 0033:0x7f0b016cce59 [ 127.833623][ T5566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.833641][ T5566] RSP: 002b:00007f0b0011f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 127.833680][ T5566] RAX: ffffffffffffffda RBX: 00007f0b01945fa0 RCX: 00007f0b016cce59 [ 127.833695][ T5566] RDX: b0a54e68b1cd2fdb RSI: 0000200000000040 RDI: ffffffffffffff9c [ 127.833709][ T5566] RBP: 00007f0b0011f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.833722][ T5566] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 127.833734][ T5566] R13: 00007f0b01946038 R14: 00007f0b01945fa0 R15: 00007ffc6e472df8 [ 127.833749][ T5566] [ 128.018247][ T5560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.056924][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.059866][ T5572] loop0: detected capacity change from 0 to 512 [ 128.106786][ T5576] loop1: detected capacity change from 0 to 512 [ 128.142185][ T5572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.187488][ T5586] loop4: detected capacity change from 0 to 128 [ 128.194849][ T5586] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.201222][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.221739][ T5586] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.268580][ T5586] FAULT_INJECTION: forcing a failure. [ 128.268580][ T5586] name failslab, interval 1, probability 0, space 0, times 0 [ 128.268723][ T5590] loop3: detected capacity change from 0 to 512 [ 128.281535][ T5586] CPU: 1 UID: 0 PID: 5586 Comm: syz.4.644 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 128.281612][ T5586] Tainted: [W]=WARN [ 128.281619][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.281631][ T5586] Call Trace: [ 128.281639][ T5586] [ 128.281647][ T5586] __dump_stack+0x1d/0x30 [ 128.281672][ T5586] dump_stack_lvl+0x95/0xd0 [ 128.281691][ T5586] dump_stack+0x15/0x1b [ 128.281736][ T5586] should_fail_ex+0x263/0x280 [ 128.281757][ T5586] should_failslab+0x8c/0xb0 [ 128.281784][ T5586] __kmalloc_node_noprof+0xc8/0x550 [ 128.281864][ T5586] ? qdisc_alloc+0x65/0x410 [ 128.281887][ T5586] ? __hrtimer_setup+0x13e/0x1a0 [ 128.281980][ T5586] qdisc_alloc+0x65/0x410 [ 128.282025][ T5586] qdisc_create_dflt+0x7f/0x2b0 [ 128.282049][ T5586] taprio_init+0x286/0x5f0 [ 128.282068][ T5586] ? __pfx_taprio_init+0x10/0x10 [ 128.282104][ T5586] qdisc_create+0x582/0x9d0 [ 128.282125][ T5586] tc_modify_qdisc+0xffc/0x14f0 [ 128.282151][ T5586] ? __mutex_lock_slowpath+0xa/0x10 [ 128.282238][ T5586] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 128.282257][ T5586] rtnetlink_rcv_msg+0x6a7/0x720 [ 128.282289][ T5586] netlink_rcv_skb+0x123/0x220 [ 128.282393][ T5586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.282486][ T5586] rtnetlink_rcv+0x1c/0x30 [ 128.282510][ T5586] netlink_unicast+0x5a8/0x680 [ 128.282546][ T5586] netlink_sendmsg+0x5c8/0x6f0 [ 128.282584][ T5586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.282617][ T5586] ____sys_sendmsg+0x563/0x5b0 [ 128.282647][ T5586] ___sys_sendmsg+0x195/0x1e0 [ 128.282681][ T5586] __x64_sys_sendmsg+0xd4/0x160 [ 128.282726][ T5586] x64_sys_call+0x194c/0x3020 [ 128.282770][ T5586] do_syscall_64+0x12c/0x3b0 [ 128.282803][ T5586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.282823][ T5586] RIP: 0033:0x7fe0e9d9ce59 [ 128.282839][ T5586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.282856][ T5586] RSP: 002b:00007fe0e87f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.282906][ T5586] RAX: ffffffffffffffda RBX: 00007fe0ea015fa0 RCX: 00007fe0e9d9ce59 [ 128.282920][ T5586] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000007 [ 128.282932][ T5586] RBP: 00007fe0e87f7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.282945][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.282957][ T5586] R13: 00007fe0ea016038 R14: 00007fe0ea015fa0 R15: 00007fffe812f4b8 [ 128.282976][ T5586] [ 128.537318][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.554553][ T5590] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 128.577873][ T5590] EXT4-fs (loop3): 1 truncate cleaned up [ 128.593174][ T5590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.627848][ T5590] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.646: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 128.630152][ T5597] batman_adv: batadv0: Adding interface: geneve2 [ 128.653247][ T5597] batman_adv: batadv0: Interface activated: geneve2 [ 128.671117][ T5601] loop1: detected capacity change from 0 to 128 [ 128.717838][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.721785][ T5605] loop0: detected capacity change from 0 to 512 [ 128.776396][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.867170][ T5622] Failed to initialize the IGMP autojoin socket (err -2) [ 128.869548][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.038697][ T5638] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 129.047996][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 129.048010][ T28] audit: type=1400 audit(1780324551.804:948): avc: denied { connect } for pid=5634 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.094338][ T5638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.101062][ T28] audit: type=1400 audit(1780324551.804:949): avc: denied { bind } for pid=5634 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.124277][ T28] audit: type=1400 audit(1780324551.804:950): avc: denied { setopt } for pid=5634 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.143913][ T28] audit: type=1400 audit(1780324551.804:951): avc: denied { write } for pid=5634 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.167188][ T5636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.663'. [ 129.173142][ T28] audit: type=1400 audit(1780324551.934:952): avc: denied { write } for pid=5625 comm="syz.0.658" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 129.203763][ T5640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.213622][ T5638] bond5: (slave gretap1): making interface the new active one [ 129.223386][ T5638] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 129.254978][ T5640] EXT4-fs (loop0): 1 truncate cleaned up [ 129.261092][ T5640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.289618][ T5648] batman_adv: batadv0: Adding interface: geneve2 [ 129.295989][ T5648] batman_adv: batadv0: Interface activated: geneve2 [ 129.300247][ T28] audit: type=1400 audit(1780324552.024:953): avc: denied { write } for pid=5625 comm="syz.0.658" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.329814][ T5650] FAULT_INJECTION: forcing a failure. [ 129.329814][ T5650] name failslab, interval 1, probability 0, space 0, times 0 [ 129.353531][ T5650] CPU: 0 UID: 0 PID: 5650 Comm: syz.2.666 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 129.353607][ T5650] Tainted: [W]=WARN [ 129.353614][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.353625][ T5650] Call Trace: [ 129.353631][ T5650] [ 129.353637][ T5650] __dump_stack+0x1d/0x30 [ 129.353666][ T5650] dump_stack_lvl+0x95/0xd0 [ 129.353683][ T5650] dump_stack+0x15/0x1b [ 129.353718][ T5650] should_fail_ex+0x263/0x280 [ 129.353738][ T5650] should_failslab+0x8c/0xb0 [ 129.353769][ T5650] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 129.353801][ T5650] ? alloc_inode+0x9a/0x170 [ 129.353818][ T5650] alloc_inode+0x9a/0x170 [ 129.353869][ T5650] new_inode+0x1d/0xe0 [ 129.353888][ T5650] devpts_fill_super+0x1b4/0x2a0 [ 129.353915][ T5650] ? __pfx_devpts_fill_super+0x10/0x10 [ 129.353934][ T5650] get_tree_nodev+0x83/0x100 [ 129.353955][ T5650] devpts_get_tree+0x1c/0x30 [ 129.354087][ T5650] vfs_get_tree+0x57/0x1d0 [ 129.354121][ T5650] do_new_mount+0x288/0x8d0 [ 129.354145][ T5650] ? security_capable+0x7b/0x90 [ 129.354172][ T5650] path_mount+0x4d0/0xbc0 [ 129.354272][ T5650] __se_sys_mount+0x28c/0x2e0 [ 129.354440][ T5650] ? fput+0x8f/0xc0 [ 129.354499][ T5650] __x64_sys_mount+0x67/0x80 [ 129.354558][ T5650] x64_sys_call+0x2d61/0x3020 [ 129.354577][ T5650] do_syscall_64+0x12c/0x3b0 [ 129.354602][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.354621][ T5650] RIP: 0033:0x7ff142ccce59 [ 129.354683][ T5650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.354699][ T5650] RSP: 002b:00007ff141727028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.354720][ T5650] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142ccce59 [ 129.354735][ T5650] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 129.354749][ T5650] RBP: 00007ff141727090 R08: 0000000000000000 R09: 0000000000000000 [ 129.354762][ T5650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.354775][ T5650] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffdc3960328 [ 129.354871][ T5650] [ 129.354889][ T5650] devpts: Unable to alloc inode for ptmx node [ 129.387316][ T5653] FAULT_INJECTION: forcing a failure. [ 129.387316][ T5653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.484049][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.495917][ T5653] CPU: 1 UID: 0 PID: 5653 Comm: syz.1.667 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 129.495964][ T5653] Tainted: [W]=WARN [ 129.495971][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.495983][ T5653] Call Trace: [ 129.495989][ T5653] [ 129.495997][ T5653] __dump_stack+0x1d/0x30 [ 129.496066][ T5653] dump_stack_lvl+0x95/0xd0 [ 129.496085][ T5653] dump_stack+0x15/0x1b [ 129.496103][ T5653] should_fail_ex+0x263/0x280 [ 129.496158][ T5653] should_fail+0xb/0x20 [ 129.496175][ T5653] should_fail_usercopy+0x1a/0x20 [ 129.496269][ T5653] _copy_from_user+0x1c/0xb0 [ 129.496322][ T5653] file_ioctl+0xbe/0x5c0 [ 129.496346][ T5653] do_vfs_ioctl+0x7c9/0xe70 [ 129.496366][ T5653] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 129.496462][ T5653] ? __se_sys_ioctl+0x52/0x140 [ 129.496517][ T5653] __se_sys_ioctl+0x82/0x140 [ 129.496543][ T5653] __x64_sys_ioctl+0x43/0x50 [ 129.496567][ T5653] x64_sys_call+0x1563/0x3020 [ 129.496589][ T5653] do_syscall_64+0x12c/0x3b0 [ 129.496658][ T5653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.496679][ T5653] RIP: 0033:0x7f7694d8ce59 [ 129.496695][ T5653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.496783][ T5653] RSP: 002b:00007f76937df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.496803][ T5653] RAX: ffffffffffffffda RBX: 00007f7695005fa0 RCX: 00007f7694d8ce59 [ 129.496846][ T5653] RDX: 0000200000000000 RSI: 0000000040305829 RDI: 0000000000000005 [ 129.496859][ T5653] RBP: 00007f76937df090 R08: 0000000000000000 R09: 0000000000000000 [ 129.496906][ T5653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.496916][ T5653] R13: 00007f7695006038 R14: 00007f7695005fa0 R15: 00007ffcbcb771c8 [ 129.496932][ T5653] [ 129.548271][ T5658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.608256][ T28] audit: type=1400 audit(1780324552.374:954): avc: denied { create } for pid=5620 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.830389][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.849028][ T28] audit: type=1400 audit(1780324552.404:955): avc: denied { bind } for pid=5620 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.874343][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.877691][ T28] audit: type=1400 audit(1780324552.414:956): avc: denied { write } for pid=5651 comm="syz.4.668" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.905416][ T28] audit: type=1400 audit(1780324552.434:957): avc: denied { write } for pid=5651 comm="syz.4.668" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.948207][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.973740][ T5671] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.982844][ T5677] iso9660: Unknown parameter 'ÿÿ' [ 130.039936][ T5677] ip6gre1: entered allmulticast mode [ 130.063474][ T5677] team0: Device ip6gre1 is of different type [ 130.075420][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.128570][ T5688] veth1_virt_wifi: entered promiscuous mode [ 130.134514][ T5688] veth1_virt_wifi: entered allmulticast mode [ 130.141937][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 130.241949][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.276975][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.289970][ T5696] SELinux: Context system_u:object is not valid (left unmapped). [ 130.333621][ T5702] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.337140][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.346094][ T5699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.390001][ T5702] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.683: Failed to acquire dquot type 1 [ 130.397032][ T5706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.413076][ T5702] loop3: lost filesystem error report for type 5 error -5 [ 130.414127][ T2980] ================================================================== [ 130.425552][ T5706] EXT4-fs (loop2): 1 orphan inode deleted [ 130.429433][ T2980] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 130.429463][ T2980] [ 130.429469][ T2980] read-write to 0xffff88811accbd80 of 4 bytes by task 3288 on cpu 1: [ 130.429486][ T2980] dont_mount+0x2a/0x40 [ 130.429510][ T2980] vfs_unlink+0x206/0x490 [ 130.440459][ T5702] EXT4-fs (loop3): 1 truncate cleaned up [ 130.441878][ T2980] filename_unlinkat+0x1e2/0x410 [ 130.441910][ T2980] __se_sys_unlink+0x2b/0xe0 [ 130.444815][ T5702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 130.452373][ T2980] __x64_sys_unlink+0x1f/0x30 [ 130.452409][ T2980] x64_sys_call+0x2eb6/0x3020 [ 130.452431][ T2980] do_syscall_64+0x12c/0x3b0 [ 130.470230][ T5706] EXT4-fs (loop2): 1 truncate cleaned up [ 130.471399][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.477149][ T5702] FAULT_INJECTION: forcing a failure. [ 130.477149][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 130.488983][ T2980] [ 130.488992][ T2980] read to 0xffff88811accbd80 of 4 bytes by task 2980 on cpu 0: [ 130.489007][ T2980] lookup_fast+0xf0/0x320 [ 130.489037][ T2980] path_lookupat+0x15c/0x500 [ 130.495448][ T5706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.498359][ T2980] filename_lookup+0x190/0x390 [ 130.498384][ T2980] do_readlinkat+0x74/0x2f0 [ 130.498405][ T2980] __x64_sys_readlink+0x47/0x60 [ 130.572138][ T2980] x64_sys_call+0x2b51/0x3020 [ 130.576812][ T2980] do_syscall_64+0x12c/0x3b0 [ 130.581398][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.587283][ T2980] [ 130.589590][ T2980] value changed: 0x00300080 -> 0x00004080 [ 130.595288][ T2980] [ 130.597593][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 130.603732][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 130.614133][ T2980] Tainted: [W]=WARN [ 130.617918][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.627989][ T2980] ================================================================== [ 130.641285][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.642110][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.3.683 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 130.642140][ T5702] Tainted: [W]=WARN [ 130.642147][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.642158][ T5702] Call Trace: [ 130.642165][ T5702] [ 130.642190][ T5702] __dump_stack+0x1d/0x30 [ 130.642213][ T5702] dump_stack_lvl+0x95/0xd0 [ 130.642232][ T5702] dump_stack+0x15/0x1b [ 130.642296][ T5702] should_fail_ex+0x263/0x280 [ 130.642435][ T5702] ? getname_long+0x32/0x100 [ 130.642455][ T5702] should_failslab+0x8c/0xb0 [ 130.642554][ T5702] __kmalloc_cache_noprof+0x5f/0x400 [ 130.642624][ T5702] ? should_fail_usercopy+0x1a/0x20 [ 130.642646][ T5702] getname_long+0x32/0x100 [ 130.642734][ T5702] do_getname+0x12e/0x1c0 [ 130.642752][ T5702] __se_sys_symlink+0x2f/0x1b0 [ 130.642784][ T5702] __x64_sys_symlink+0x31/0x40 [ 130.642845][ T5702] x64_sys_call+0x2465/0x3020 [ 130.642867][ T5702] do_syscall_64+0x12c/0x3b0 [ 130.642896][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.642969][ T5702] RIP: 0033:0x7f0b016cce59 [ 130.642984][ T5702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.643000][ T5702] RSP: 002b:00007f0b0011f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 130.643020][ T5702] RAX: ffffffffffffffda RBX: 00007f0b01945fa0 RCX: 00007f0b016cce59 [ 130.643035][ T5702] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000080 [ 130.643048][ T5702] RBP: 00007f0b0011f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.643072][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.643084][ T5702] R13: 00007f0b01946038 R14: 00007f0b01945fa0 R15: 00007ffc6e472df8 [ 130.643102][ T5702] [ 130.834195][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.846553][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.