last executing test programs: 42.293920356s ago: executing program 1 (id=249): unshare(0x22020600) r0 = socket$inet6(0xa, 0x5, 0x5) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800810, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21102f, 0x0, 0x1, 0x0, &(0x7f0000000280)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x8004745a, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xcdfd, 0x280002, @local, 0xfffbfffd}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000001000000010000104e6ff04cef725c000c0000002b1bee7039b29e3c5e5962eb635e7dca3449009e2495c46a8a24cfa9d05296c5abb4f112e612a805b419b699ed8d8269509c35441a4a652998463a1fa084412ca12e923aae95e4facebc5f24c2a0918c633be7531214bdf2b2ddde9a4ac93ba4090efa0da2bbf3b6f0882495b188f61c22ea"], 0x30}, 0x4008040) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) 41.314219278s ago: executing program 1 (id=256): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@user_xattr}, {@nobh}, {@block_validity}, {@minixdf}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@noinit_itable}], [{@fsmagic={'fsmagic', 0x3d, 0x6d2}}]}, 0x1, 0x463, &(0x7f0000001040)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x8804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) socket(0xa, 0x3, 0xff) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x700}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000003680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x1}]}}}}}, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x3e}, 0x28) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000001980)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f7a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445697eb0d6867f0ddf0b4a45ce8687fc9", @ANYRES8, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) 39.740545115s ago: executing program 1 (id=265): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0xfd, 0x0, 0x6, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000005c0)}, 0x103804, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x40200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r2 = socket$inet6(0xa, 0x80001, 0x0) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r6, r7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x40, 0x1) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r8, &(0x7f00000001c0)) r9 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) write$binfmt_script(r10, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r12) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000480)={0x0, 0xff5b, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="7418be67994818397b73e64b20e708e8b9f4df746384bb1cfd88284f8a36f24be3b9cfaf10291e30f7d11aaf581cd418", @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30000000000000080005"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x20008044}, 0x1000c080) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 39.17262896s ago: executing program 1 (id=271): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x2}, 0xa216, 0x6, 0x11000, 0x4, 0x40, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x523401, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@map_acorn}, {@hide}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x1}}, {}, {@dmode={'dmode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_normal}, {@hide}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@hide}, {@utf8}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@utf8}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x7ffffffff000, 0x1002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010300000000000040000000000005000100070000009216528fd2d8d6255b880231fcb4fdbe0d"], 0x1c}}, 0x0) 38.670928771s ago: executing program 1 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0xb01, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x3, 0xff, 0x8, 0x800}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c041}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x1a, 0x2003) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0x1}, 0x1000, 0x0, 0x80000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="4009006a00000104000000000000000000000000a93f8d84e362fd5cf89df5327cc980accd09cb039b23b6cadeea7c3281f6e0a47a77d07814f811b9b6ad5390b56f13635bb37e9dbe7c9479d4a0326aa44fbc8307f90f716b97baf06c1f25df8a92921a70356a79b6cfd6142437ebe65d814239ff96323d1fb8464f4527e657049e2dfb83edb7a68c686c49838b60712076bed76788cd5cf5f1d774f2213b00dbb6faacf240f2a56ef0d42db2eabe51451a1557", @ANYRES32=r4, @ANYBLOB="1081020006020400200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x8, 0x0, 0x0, 0x0, 0x9, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0x7, 0x120000000000000}, 0xd, 0x0, 0x6, 0x4, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xe000000000000003, 0xffffffffffffffff, 0x9) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d010900500011"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd7000fedbdf2507", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x81, 0x7, 0xf8, 0xa, 0x0, 0xb4c, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x1110a1, 0x4, 0x4, 0xb, 0x7, 0x9, 0x9, 0x0, 0x14b, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0xe, 0x6, @l2={'eth', 0x3a, '\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 37.866771816s ago: executing program 1 (id=284): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_mount_image$vfat(&(0x7f0000003240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x4, 0x2b8, &(0x7f0000002f80)="$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") (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="0504"], 0x9c}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) sendmsg$NFT_BATCH(r2, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1cc, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "a3b6fcc185dda3aead4754d7449d2061f7dfebe15c180c0af343ee0108486ca44fc5ae5d4532ba7f3f4c5651fbd9496976c19f4a53307c9770d711290abc504458076dd5226dc6473c960109d3bf9dfb3b4a548bbf6b198a063c4e310fbe1b191e3a2995fb840c1237e59a7941c2cf0e6467a42812e1fc55dda1e12270d6a2b64f7475d52720c533bef4faa224350329e67ed50086a4769a3c5a157167a58c9ea22e61cf67a7c28df2cd85cb6adc67f73ac0b1cdd0e46f0a3b0ec7f36e14b2574e36a190f7a2b5b1611f0e3e7195875ef27917ece1f4bb002093dc66b911295e88"}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4659f54c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff574b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x270}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4810) (async) pwrite64(r2, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) unshare(0xc040400) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r11, 0x5412, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0x2}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") open(&(0x7f0000000080)='./bus\x00', 0x66842, 0x90) 37.865812126s ago: executing program 32 (id=284): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_mount_image$vfat(&(0x7f0000003240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x4, 0x2b8, &(0x7f0000002f80)="$eJzs209PE1sYx/EftPy/pb2Xe+GCMZ7oRjcTqK+gIZAYm2iQGv8kJoNMpWlpsdNgaozgyq2vg7h0Z2J8A2x8BS7csWHJwjiGzlRbbENDgCnN97OZB855OmfOc6Y5i569B+/W81nXytoV9fcZRaVBHUgJ9SsiX19w7a/Fg2q0rRsT6a+X7z18dDuVTi8sGbOYWr6ZNMaMX/n04tX7q58rY/c/jH8c0m7iyd5+8tvu5O703o/ltZxrcq4plirGNiulUsVeKThmNefmLWPuFhzbdUyu6DrlpvZsobSxUTV2cTU2ulF2XNfYxarJO1VTKZlKuWrsZ3auaCzLMrFR4TiZnaUlOxX2KHC2yuWUPS9p5o+WzE4oAwIAAKFqsf/f9vf/sZ7f/3veGUzohcL+v9dFg/3/4+D9bcb+HwAAAAAAAAAAAAAAAAAAAACAi+DA8+Ke58Xr1wGpdsLHC/4ekTQqaUzSX5JiksYlxSUlJP0t6R9JE5L+lfSfpElJU5L+lzTd8FktDiAgZO3qH2lf/74T1x9d51zff3Sd4+s/QP17WMPB3WFp/e1mZjPjX/32VFY5FeRoVnF9r9Uy4MeLt9ILs6YmoUvrW0H+1mYm0pw/p/jhgmmVP+fnm+b8odq6+5WfVPxwgbXKT7bMH9b1aw35luL68lQlFbQanP2t57+ei5j5O+kj+TO1fr3OOpy4N5La1M+yTN2Rdj+/g/XhzbasT1Qz0XCfHZJbfZm3CwWnfDrB8046j/jBlE7ppgQnC4bVSWed1k1HOu281iXzcyZBpDuG0UHd29uvf8Pjovtd9Pp/IuEOCAAAAAAAAAAAAAAAAADQkfP4OWHYzwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFE/AwAA//9Vb2Vh") (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="0504"], 0x9c}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) sendmsg$NFT_BATCH(r2, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1cc, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "a3b6fcc185dda3aead4754d7449d2061f7dfebe15c180c0af343ee0108486ca44fc5ae5d4532ba7f3f4c5651fbd9496976c19f4a53307c9770d711290abc504458076dd5226dc6473c960109d3bf9dfb3b4a548bbf6b198a063c4e310fbe1b191e3a2995fb840c1237e59a7941c2cf0e6467a42812e1fc55dda1e12270d6a2b64f7475d52720c533bef4faa224350329e67ed50086a4769a3c5a157167a58c9ea22e61cf67a7c28df2cd85cb6adc67f73ac0b1cdd0e46f0a3b0ec7f36e14b2574e36a190f7a2b5b1611f0e3e7195875ef27917ece1f4bb002093dc66b911295e88"}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4659f54c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff574b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x270}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4810) (async) pwrite64(r2, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) unshare(0xc040400) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r11, 0x5412, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0x2}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") open(&(0x7f0000000080)='./bus\x00', 0x66842, 0x90) 3.930977741s ago: executing program 0 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040a5}, 0xc890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002080)}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) syz_open_dev$mouse(0x0, 0x8, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x700}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) 3.739086689s ago: executing program 0 (id=686): unshare(0x60000600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) tgkill(0x0, 0x0, 0x24) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000060003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe8, 0x0, 0x8aa, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000, 0x5, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r6, &(0x7f00000000c0)=""/39, 0x27) getdents(r6, 0xffffffffffffffff, 0x5a) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=ANY=[], 0x20}], 0x1}, 0x0) 3.091063487s ago: executing program 4 (id=689): openat$tun(0xffffffffffffff9c, 0x0, 0x448100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x18a21, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socket$inet(0x2, 0x5, 0x0) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 3.087621967s ago: executing program 0 (id=690): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) (fail_nth: 2) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.073239218s ago: executing program 3 (id=691): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.832645918s ago: executing program 2 (id=692): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x3, 0x8}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x40006, 0x3, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) fcntl$getown(r1, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0xf4240, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1902000000c400000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r7, 0x7, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) setfsgid(0xee01) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6}, 0x34) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0x1}, 0x1000, 0x0, 0x80000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 2.636125006s ago: executing program 4 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1, 0xf2ffffffffffffff}, 0x38) 2.383484017s ago: executing program 4 (id=697): socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001100010100000000fedbdf250300000008000000060000000800e880040043"], 0x24}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x84) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$9p_fd(0x0, 0x0, 0x0, 0x311880, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='size,\x00']) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x2, 0xe, 0x2, 0xd764}, 0x3e92, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x2, 0x1, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.350714199s ago: executing program 3 (id=698): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x12, &(0x7f0000003b40)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf164658e9b135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES8=r1, @ANYRES8], 0x8, 0x2eb, &(0x7f00000004c0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x20000000) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000440)='*\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) 2.173701187s ago: executing program 3 (id=699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000380)=0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000040a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffed000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000010096070000000000000000000000000002be0000000000000000000000b1a00100000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000080fffffffc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x80) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6400, 0x0, 0x3) 2.157123017s ago: executing program 0 (id=700): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x10, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x10, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) setpgid(r1, r2) r3 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r5, @ANYBLOB="01980000020800001800000000000100677265000c00028008000700ac141469"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100039040200"/20, @ANYRES32=r5, @ANYBLOB="40100000004104001c001280080001006772650010000280040012000600cd004e200000bb4e08b8dfdf717e60962b95f98504be8db8b8d46040c3a7e6bbbd48b4ddb58e4618383e0e7ade3429e9b369f2ac3b25ab086df2ea4d3a285600c4a2cea449f438044f236a37f4ade2a0a00067301ce0ae76c25deec9d6df4fe24fe8c7e7428952c7ceaae3fa42ab12f4cc7ec4c73b2f7e81916dfd995ae84c0969e643e6feea56ad3566639a4707f372"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x2c}}, 0x8850) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40051}, 0x4804) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40051}, 0x4804) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0280000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.067189121s ago: executing program 3 (id=701): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100048000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.066925231s ago: executing program 3 (id=702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc8fff18c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.061545221s ago: executing program 5 (id=703): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x14100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000100)={0x21, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0b00000005000000000400000b000000010000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="05000000000000000000210000000800030065618b79cc5cb438cd9690e4b713c0b991e982160cb5eb94f96b2fac2ef23e83c8855405834cba7870915bd421e782b150ce06605c3677b3e980a4e82b97f1f250536619a3ded81bc70dd50f4fd0663daa8cf5dd47aa3d840a1e1d0e5dbaf3181cebef09a92809d80a1c1dba69181cba594960a3b281e439f3d058311bda5608cd4d8916", @ANYRES32=0x0, @ANYBLOB="04002a00"], 0x20}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200fffb0005000500000000000a"], 0x80}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000800000001000200", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000700"/27], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0x70}}, 0x0) dup(r3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) perf_event_open$cgroup(&(0x7f0000000b40)={0x4, 0x80, 0x0, 0x0, 0x37, 0xa, 0x0, 0x3, 0x400, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x8}, 0x8c08, 0x47, 0x4420, 0x8, 0x8, 0x2, 0x40, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) 2.059534951s ago: executing program 4 (id=704): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008044}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.003050314s ago: executing program 0 (id=705): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x405) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0x6, 0x4018032, r1, 0xc1624000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x6) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x15402, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbffffffffffb, r3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x8) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x87, 0x0, 0x0, 0xe12b}, {0x16}]}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) close(r4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap$xdp(&(0x7f000057b000/0x1000)=nil, 0x1000, 0x1, 0x20032, 0xffffffffffffffff, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019240)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9b4, 0x0, 0x2, 0x0, &(0x7f0000019200)="80fa", 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRES16=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r6, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 1.999600924s ago: executing program 2 (id=706): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2ec, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x50d180, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 1.967147565s ago: executing program 4 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006028000000082f00fe88a43de1a400000000000000007d01ff0200000000000000002800000000010000883e"], 0xfdef) 1.955302916s ago: executing program 5 (id=708): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000000c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000030000000000000800000000000000000000000204000200030000000000001204000000000000612e00"], 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x56ab, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x2, 0x40000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000001c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x80, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.894899568s ago: executing program 3 (id=709): r0 = openat(0xffffffffffffff9c, 0x0, 0x109342, 0x0) bind$inet6(r0, &(0x7f0000001040)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeeb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x20, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r5, 0x0, 0xfdef) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") clock_gettime(0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x557b57b46fcd6106}, 0x803cc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.894362569s ago: executing program 2 (id=710): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x12, &(0x7f0000003b40)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=r1, @ANYRES8], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x20000000) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000440)='*\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) 1.894066379s ago: executing program 5 (id=711): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x48) 1.84919154s ago: executing program 5 (id=712): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2808043, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x33b40}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.776072863s ago: executing program 2 (id=713): socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x4) syz_ublk_setup_io_uring(0x5fae, 0x0, 0x0, 0x0, &(0x7f0000000280)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r0 = open(0x0, 0x0, 0x112) getdents(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @time={0x7fffffff, 0x6}, {}, {}, @raw32={[0x1f00]}}], 0x1c) 1.459050527s ago: executing program 4 (id=714): socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001100010100000000fedbdf250300000008000000060000000800e880040043"], 0x24}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x84) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$9p_fd(0x0, 0x0, 0x0, 0x311880, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='size,\x00']) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x2, 0xe, 0x2, 0xd764}, 0x3e92, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x2, 0x1, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.362947731s ago: executing program 5 (id=715): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2e9}, 0x119b10, 0x8, 0xe, 0x9, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x66842, 0x90) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x56, 0x0, 0x8001, {0x0, 0x1}, {0x64, 0x2}, @const={0x8, {0x6, 0x0, 0xe, 0x401}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) msgsnd(0x0, &(0x7f0000000b80)={0x2}, 0x8, 0x800) (async) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) (async) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) (async) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00%\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.248690636s ago: executing program 2 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = io_uring_setup(0x7d95, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x91}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) sendmsg$inet(r5, &(0x7f0000003480)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f0000000180)="e499", 0x2}], 0x1}, 0x480) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x5e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$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") getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x10c8d}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x1) close(r3) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x28, 0xa01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.16949022s ago: executing program 0 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000a7ffffff01000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 589.549µs ago: executing program 5 (id=718): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x20008044}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 0s ago: executing program 2 (id=719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000500), &(0x7f00000002c0)=r2}, 0x20) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x2001, 0x0, 0x3) r3 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x23a, 0x5a}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) kernel console output (not intermixed with test programs): #15: comm syz.1.143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 48.989932][ T3979] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.142: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.006951][ T3987] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 8: comm syz.1.143: lblock 8 mapped to illegal pblock 8 (length 1) [ 49.023834][ T3988] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 8: comm syz.0.142: lblock 8 mapped to illegal pblock 8 (length 1) [ 49.064065][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.109412][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.163233][ T3992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.145'. [ 49.217200][ T28] audit: type=1400 audit(1778606722.168:312): avc: denied { setopt } for pid=3995 comm="syz.1.147" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.248133][ T4000] Symlink component flag not implemented [ 49.254119][ T4000] Symlink component flag not implemented [ 49.306019][ T4003] vfat: Unknown parameter '' [ 49.648391][ T4031] vfat: Unknown parameter '' [ 49.778466][ T4034] FAULT_INJECTION: forcing a failure. [ 49.778466][ T4034] name failslab, interval 1, probability 0, space 0, times 0 [ 49.885504][ T4034] CPU: 1 UID: 0 PID: 4034 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT(full) [ 49.885578][ T4034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.885588][ T4034] Call Trace: [ 49.885594][ T4034] [ 49.885603][ T4034] __dump_stack+0x1d/0x30 [ 49.885676][ T4034] dump_stack_lvl+0x95/0xd0 [ 49.885693][ T4034] dump_stack+0x15/0x1b [ 49.885709][ T4034] should_fail_ex+0x263/0x280 [ 49.885738][ T4034] should_failslab+0x8c/0xb0 [ 49.885775][ T4034] kmem_cache_alloc_noprof+0x66/0x3f0 [ 49.885799][ T4034] ? do_getname+0x2e/0x1c0 [ 49.885813][ T4034] ? __rcu_read_unlock+0x4e/0x70 [ 49.885834][ T4034] do_getname+0x2e/0x1c0 [ 49.885926][ T4034] getname_flags+0x1d/0x30 [ 49.885941][ T4034] do_sys_openat2+0x60/0x130 [ 49.886020][ T4034] __x64_sys_creat+0x65/0x90 [ 49.886044][ T4034] x64_sys_call+0x2ea0/0x3020 [ 49.886074][ T4034] do_syscall_64+0x12c/0x3b0 [ 49.886120][ T4034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.886138][ T4034] RIP: 0033:0x7fa3bd82cdd9 [ 49.886153][ T4034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.886173][ T4034] RSP: 002b:00007fa3bc27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 49.886191][ T4034] RAX: ffffffffffffffda RBX: 00007fa3bdaa5fa0 RCX: 00007fa3bd82cdd9 [ 49.886205][ T4034] RDX: 0000000000000000 RSI: d931d3864d39dcca RDI: 0000200000000000 [ 49.886219][ T4034] RBP: 00007fa3bc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.886296][ T4034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.886307][ T4034] R13: 00007fa3bdaa6038 R14: 00007fa3bdaa5fa0 R15: 00007ffd90abb6e8 [ 49.886324][ T4034] [ 50.121001][ T4037] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 50.175859][ T4037] EXT4-fs (loop0): group descriptors corrupted! [ 50.189360][ T4041] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 50.544619][ T4050] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.552759][ T4050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.681830][ T4050] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.770539][ T4050] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 50.791503][ T4050] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.170: inode has both inline data and extents flags [ 50.853498][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.853661][ T4050] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.170: couldn't read orphan inode 16 (err -117) [ 50.862825][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.862858][ C1] EXT4-fs (loop1): initial error at time 1778606723: ext4_orphan_get:1397: inode 16 [ 50.862889][ C1] EXT4-fs (loop1): last error at time 1778606723: ext4_orphan_get:1397: inode 16 [ 51.048590][ T4050] loop1: lost filesystem error report for type 5 error -117 [ 51.050373][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.144443][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.198634][ T4073] set_capacity_and_notify: 11 callbacks suppressed [ 51.198648][ T4073] loop1: detected capacity change from 0 to 1024 [ 51.249900][ T4073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.281935][ T4073] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.313403][ T4073] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm syz.1.178: lblock 8 mapped to illegal pblock 8 (length 1) [ 51.352578][ T4073] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.178: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 51.402649][ T4073] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 8: comm syz.1.178: lblock 8 mapped to illegal pblock 8 (length 1) [ 51.443641][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.509184][ T4078] xfrm0 speed is unknown, defaulting to 1000 [ 51.819042][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 51.819129][ T28] audit: type=1400 audit(1778606724.778:321): avc: denied { bind } for pid=4085 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.849632][ T4086] loop4: detected capacity change from 0 to 512 [ 51.872363][ T4086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.891326][ T4078] loop1: detected capacity change from 0 to 2048 [ 51.901183][ T4086] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.912867][ T4090] loop0: detected capacity change from 0 to 512 [ 51.925630][ T4090] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.940509][ T4078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.957297][ T28] audit: type=1400 audit(1778606724.918:322): avc: denied { write } for pid=4085 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.958847][ T4090] EXT4-fs (loop0): group descriptors corrupted! [ 51.988454][ T4078] Cannot find add_set index 0 as target [ 52.031798][ T4086] tipc: Started in network mode [ 52.044920][ T4086] tipc: Node identity 2edd18389056, cluster identity 4711 [ 52.092394][ T4086] tipc: Enabled bearer , priority 0 [ 52.125368][ T4086] tipc: Resetting bearer [ 52.139679][ T28] audit: type=1400 audit(1778606725.098:323): avc: denied { write } for pid=4077 comm="syz.1.179" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.167885][ T4086] tipc: Disabling bearer [ 52.229926][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.435468][ T4106] tmpfs: Bad value for 'size' [ 52.562189][ T28] audit: type=1400 audit(1778606725.518:324): avc: denied { shutdown } for pid=4097 comm="syz.0.185" lport=59977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.799417][ T4111] loop4: detected capacity change from 0 to 1024 [ 52.883266][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.964316][ T4111] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.041951][ T28] audit: type=1400 audit(1778606725.998:325): avc: denied { write } for pid=4110 comm="syz.4.189" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.082554][ T4111] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.189: lblock 8 mapped to illegal pblock 8 (length 1) [ 53.130866][ T4117] loop0: detected capacity change from 0 to 512 [ 53.162544][ T4117] EXT4-fs (loop0): 1 truncate cleaned up [ 53.170246][ T4111] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.194449][ T4117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.218635][ T4119] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.189: lblock 8 mapped to illegal pblock 8 (length 1) [ 53.252180][ T4117] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.191: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 53.292319][ T4117] __nla_validate_parse: 7 callbacks suppressed [ 53.292333][ T4117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 53.346379][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.370169][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.449704][ T4124] loop0: detected capacity change from 0 to 512 [ 53.492184][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 53.501764][ T4124] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.559847][ T4124] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.193: bad orphan inode 131083 [ 53.581784][ T4126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'. [ 53.606751][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.616754][ T4124] loop0: lost filesystem error report for type 5 error -117 [ 53.618804][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.632527][ C0] EXT4-fs (loop0): initial error at time 1778606726: ext4_orphan_get:1423 [ 53.641045][ C0] EXT4-fs (loop0): last error at time 1778606726: ext4_orphan_get:1423 [ 53.665963][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.700546][ T28] audit: type=1400 audit(1778606726.648:326): avc: denied { write } for pid=4123 comm="syz.0.193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.076127][ T28] audit: type=1400 audit(1778606726.908:327): avc: denied { write } for pid=4128 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.168053][ T4133] SELinux: failed to load policy [ 54.177333][ T28] audit: type=1400 audit(1778606727.118:328): avc: denied { load_policy } for pid=4123 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.379491][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.508326][ T4148] loop3: detected capacity change from 0 to 128 [ 54.517742][ T28] audit: type=1400 audit(1778606727.468:329): avc: denied { write } for pid=4149 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.596080][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 54.605821][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 54.615291][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 54.624477][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 54.779667][ T28] audit: type=1326 audit(1778606727.468:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 54.822663][ T4150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 54.835738][ T4150] ip6tnl1: entered allmulticast mode [ 55.023975][ T4156] loop4: detected capacity change from 0 to 512 [ 55.051867][ T4156] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 55.095044][ T4156] EXT4-fs (loop4): group descriptors corrupted! [ 55.164540][ T4164] xfrm0 speed is unknown, defaulting to 1000 [ 55.178745][ T4161] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 55.311215][ T4174] loop2: detected capacity change from 0 to 512 [ 55.330891][ T4174] EXT4-fs (loop2): 1 truncate cleaned up [ 55.339298][ T4176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.342825][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.351579][ T4176] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.383135][ T4176] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm syz.1.210: lblock 8 mapped to illegal pblock 8 (length 1) [ 55.408061][ T4176] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 55.436262][ T4186] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 8: comm syz.1.210: lblock 8 mapped to illegal pblock 8 (length 1) [ 55.451414][ T4187] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.209: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 55.490388][ T4185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 55.500275][ T4174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 55.516515][ T4188] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 55.544600][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.579438][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.718944][ T4195] FAULT_INJECTION: forcing a failure. [ 55.718944][ T4195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.732284][ T4195] CPU: 0 UID: 0 PID: 4195 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) [ 55.732305][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 55.732315][ T4195] Call Trace: [ 55.732322][ T4195] [ 55.732329][ T4195] __dump_stack+0x1d/0x30 [ 55.732402][ T4195] dump_stack_lvl+0x95/0xd0 [ 55.732469][ T4195] dump_stack+0x15/0x1b [ 55.732485][ T4195] should_fail_ex+0x263/0x280 [ 55.732508][ T4195] should_fail+0xb/0x20 [ 55.732603][ T4195] should_fail_usercopy+0x1a/0x20 [ 55.732630][ T4195] _copy_to_user+0x20/0xa0 [ 55.732676][ T4195] generic_map_lookup_batch+0x675/0x900 [ 55.732700][ T4195] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 55.732721][ T4195] bpf_map_do_batch+0x1bc/0x380 [ 55.732794][ T4195] ? security_bpf+0x2b/0x90 [ 55.732812][ T4195] __sys_bpf+0x59b/0x7e0 [ 55.732839][ T4195] __x64_sys_bpf+0x41/0x50 [ 55.732859][ T4195] x64_sys_call+0x10cb/0x3020 [ 55.732947][ T4195] do_syscall_64+0x12c/0x3b0 [ 55.732974][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.733066][ T4195] RIP: 0033:0x7f56845fcdd9 [ 55.733083][ T4195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.733098][ T4195] RSP: 002b:00007f5683057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.733118][ T4195] RAX: ffffffffffffffda RBX: 00007f5684875fa0 RCX: 00007f56845fcdd9 [ 55.733130][ T4195] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 55.733221][ T4195] RBP: 00007f5683057090 R08: 0000000000000000 R09: 0000000000000000 [ 55.733234][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.733246][ T4195] R13: 00007f5684876038 R14: 00007f5684875fa0 R15: 00007ffd32aa8d88 [ 55.733264][ T4195] [ 55.956578][ T4164] Cannot find add_set index 0 as target [ 56.000089][ T4209] FAULT_INJECTION: forcing a failure. [ 56.000089][ T4209] name failslab, interval 1, probability 0, space 0, times 0 [ 56.060033][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) [ 56.060082][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 56.060094][ T4209] Call Trace: [ 56.060101][ T4209] [ 56.060108][ T4209] __dump_stack+0x1d/0x30 [ 56.060131][ T4209] dump_stack_lvl+0x95/0xd0 [ 56.060151][ T4209] dump_stack+0x15/0x1b [ 56.060170][ T4209] should_fail_ex+0x263/0x280 [ 56.060198][ T4209] should_failslab+0x8c/0xb0 [ 56.060227][ T4209] __kmalloc_noprof+0xb8/0x4d0 [ 56.060302][ T4209] ? tipc_nl_compat_doit+0xfa/0x370 [ 56.060327][ T4209] tipc_nl_compat_doit+0xfa/0x370 [ 56.060358][ T4209] tipc_nl_compat_recv+0x832/0xa10 [ 56.060465][ T4209] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 56.060487][ T4209] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 56.060513][ T4209] genl_family_rcv_msg_doit+0x187/0x1f0 [ 56.060534][ T4209] genl_rcv_msg+0x432/0x470 [ 56.060611][ T4209] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 56.060637][ T4209] netlink_rcv_skb+0x123/0x220 [ 56.060658][ T4209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.060753][ T4209] genl_rcv+0x28/0x40 [ 56.060767][ T4209] netlink_unicast+0x5a8/0x680 [ 56.060792][ T4209] netlink_sendmsg+0x5c8/0x6f0 [ 56.060822][ T4209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.060918][ T4209] ____sys_sendmsg+0x563/0x5b0 [ 56.060945][ T4209] ___sys_sendmsg+0x195/0x1e0 [ 56.060979][ T4209] __x64_sys_sendmsg+0xd4/0x160 [ 56.061005][ T4209] x64_sys_call+0x194c/0x3020 [ 56.061081][ T4209] do_syscall_64+0x12c/0x3b0 [ 56.061160][ T4209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.061180][ T4209] RIP: 0033:0x7fa3bd82cdd9 [ 56.061195][ T4209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.061248][ T4209] RSP: 002b:00007fa3bc27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.061267][ T4209] RAX: ffffffffffffffda RBX: 00007fa3bdaa5fa0 RCX: 00007fa3bd82cdd9 [ 56.061282][ T4209] RDX: 0000000000000800 RSI: 0000200000000580 RDI: 0000000000000003 [ 56.061293][ T4209] RBP: 00007fa3bc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.061304][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.061314][ T4209] R13: 00007fa3bdaa6038 R14: 00007fa3bdaa5fa0 R15: 00007ffd90abb6e8 [ 56.061380][ T4209] [ 56.788669][ T4226] set_capacity_and_notify: 3 callbacks suppressed [ 56.788683][ T4226] loop3: detected capacity change from 0 to 4096 [ 56.812659][ T4229] loop2: detected capacity change from 0 to 512 [ 56.935335][ T4226] EXT4-fs: Ignoring removed bh option [ 56.943015][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 56.943028][ T28] audit: type=1400 audit(1778606729.898:507): avc: denied { getopt } for pid=4230 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.976050][ T4229] EXT4-fs (loop2): 1 truncate cleaned up [ 56.983345][ T28] audit: type=1400 audit(1778606729.928:508): avc: denied { ioctl } for pid=4230 comm="syz.4.224" path="socket:[7409]" dev="sockfs" ino=7409 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.067501][ T4240] capability: warning: `syz.4.227' uses deprecated v2 capabilities in a way that may be insecure [ 57.096150][ T28] audit: type=1400 audit(1778606729.968:509): avc: denied { write } for pid=4225 comm="syz.3.222" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.143253][ T4229] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.223: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 57.190240][ T28] audit: type=1400 audit(1778606729.978:510): avc: denied { write } for pid=4225 comm="syz.3.222" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.300476][ T4250] loop1: detected capacity change from 0 to 764 [ 57.318020][ T4250] Symlink component flag not implemented [ 57.349349][ T4250] Symlink component flag not implemented [ 57.368404][ T4252] loop4: detected capacity change from 0 to 1024 [ 57.400317][ T4252] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.424242][ T28] audit: type=1400 audit(1778606730.378:511): avc: denied { write } for pid=4251 comm="syz.4.232" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.451117][ T4252] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.232: lblock 8 mapped to illegal pblock 8 (length 1) [ 57.466275][ T4254] loop2: detected capacity change from 0 to 1024 [ 57.514078][ T4252] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.600027][ T4259] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.232: lblock 8 mapped to illegal pblock 8 (length 1) [ 57.653170][ T4265] Cannot find add_set index 0 as target [ 57.729949][ T4254] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.797176][ T28] audit: type=1400 audit(1778606730.748:512): avc: denied { read write } for pid=4271 comm="syz.4.237" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.827247][ T4254] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.231: lblock 8 mapped to illegal pblock 8 (length 1) [ 57.841462][ T4270] loop3: detected capacity change from 0 to 512 [ 57.858049][ T4270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.877614][ T28] audit: type=1400 audit(1778606730.748:513): avc: denied { open } for pid=4271 comm="syz.4.237" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.920635][ T4270] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.238: bad orphan inode 131083 [ 57.927731][ T28] audit: type=1400 audit(1778606730.758:514): avc: denied { read } for pid=4274 comm="syz.0.239" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.933995][ T4254] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.231: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.969363][ T28] audit: type=1400 audit(1778606730.758:515): avc: denied { open } for pid=4274 comm="syz.0.239" path="/dev/usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.981692][ T4277] loop0: detected capacity change from 0 to 1024 [ 57.998494][ T28] audit: type=1400 audit(1778606730.758:516): avc: denied { map } for pid=4274 comm="syz.0.239" path="/proc/114/task/115/attr/sockcreate" dev="proc" ino=8236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 58.002082][ T4270] loop3: lost filesystem error report for type 5 error -117 [ 58.068723][ T4287] loop4: detected capacity change from 0 to 512 [ 58.097688][ T4277] EXT4-fs: Ignoring removed bh option [ 58.138967][ T4282] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.231: lblock 8 mapped to illegal pblock 8 (length 1) [ 58.149826][ T4277] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.190545][ T4287] EXT4-fs (loop4): 1 truncate cleaned up [ 58.197624][ T4277] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.216852][ T4277] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.240: Bad quota inum: 4294934528, type: 0 [ 58.237000][ T4287] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.242: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 58.267764][ T4277] loop0: lost filesystem error report for type 5 error -117 [ 58.268806][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.282522][ C1] EXT4-fs (loop0): initial error at time 1778606731: ext4_quota_enable:7221 [ 58.291209][ C1] EXT4-fs (loop0): last error at time 1778606731: ext4_quota_enable:7221 [ 58.300031][ T4277] EXT4-fs (loop0): Remounting filesystem read-only [ 58.309833][ T4277] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 58.310539][ T4287] __nla_validate_parse: 9 callbacks suppressed [ 58.310551][ T4287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.242'. [ 58.340776][ T4277] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 58.354151][ T4270] SELinux: failed to load policy [ 58.476071][ T4296] netlink: 80 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.506958][ T4296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.520003][ T4298] tmpfs: Bad value for 'size' [ 58.595375][ T4302] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 59.094960][ T4302] syz_tun: entered promiscuous mode [ 59.120867][ T4313] loop1: detected capacity change from 0 to 512 [ 59.130709][ T4302] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.149441][ T4315] netlink: 116 bytes leftover after parsing attributes in process `syz.0.250'. [ 59.169359][ T4313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.211541][ T4313] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.412112][ T4337] Cannot find add_set index 0 as target [ 59.514108][ T4342] loop3: detected capacity change from 0 to 1024 [ 59.575121][ T4342] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.603451][ T4348] EXT4-fs: Ignoring removed nobh option [ 59.627654][ T4348] journal_path: Lookup failure for './file0' [ 59.638979][ T4342] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.255: lblock 8 mapped to illegal pblock 8 (length 1) [ 59.656171][ T4348] EXT4-fs: error: could not find journal device path [ 59.690578][ T4342] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.719688][ T4349] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 8: comm syz.3.255: lblock 8 mapped to illegal pblock 8 (length 1) [ 59.778576][ T4353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.831095][ T4353] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.257: bad orphan inode 131083 [ 59.852590][ T4353] loop2: lost filesystem error report for type 5 error -117 [ 59.915370][ T4353] SELinux: failed to load policy [ 60.087658][ T4371] vfat: Unknown parameter '' [ 60.095885][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 60.788907][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 61.119530][ T4383] syz.4.266 uses obsolete (PF_INET,SOCK_PACKET) [ 61.335829][ T4386] SET target dimension over the limit! [ 61.382887][ T4384] Symlink component flag not implemented [ 61.466169][ T4388] EXT4-fs (loop2): 1 truncate cleaned up [ 61.478914][ T4384] Symlink component flag not implemented [ 61.609587][ T4395] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.269: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 62.117946][ T3309] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 62.166149][ T3309] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 62.305755][ T4409] set_capacity_and_notify: 7 callbacks suppressed [ 62.305772][ T4409] loop3: detected capacity change from 0 to 128 [ 62.319628][ T4409] vfat: Unknown parameter '' [ 62.328664][ T4409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 62.394855][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 62.405107][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 62.414375][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 62.780713][ T4424] xfrm0 speed is unknown, defaulting to 1000 [ 62.789203][ T4426] loop4: detected capacity change from 0 to 764 [ 62.799018][ T4426] Symlink component flag not implemented [ 62.812936][ T4426] Symlink component flag not implemented [ 62.882150][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 62.882163][ T28] audit: type=1326 audit(1778606735.838:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.4.283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x0 [ 62.938177][ T4424] loop3: detected capacity change from 0 to 2048 [ 62.955019][ T4424] Cannot find add_set index 0 as target [ 63.015813][ T28] audit: type=1400 audit(1778606735.968:548): avc: denied { write } for pid=4423 comm="syz.3.281" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.104551][ T4435] xfrm0 speed is unknown, defaulting to 1000 [ 63.105138][ T4445] loop2: detected capacity change from 0 to 1024 [ 63.131170][ T4445] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.145803][ T28] audit: type=1400 audit(1778606736.108:549): avc: denied { write } for pid=4444 comm="syz.2.286" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.168848][ T4445] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.286: lblock 8 mapped to illegal pblock 8 (length 1) [ 63.198163][ T4445] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.286: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 63.217829][ T4445] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.286: lblock 8 mapped to illegal pblock 8 (length 1) [ 63.247633][ T4454] loop0: detected capacity change from 0 to 128 [ 63.254412][ T4454] vfat: Unknown parameter '' [ 63.304912][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.318753][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.330212][ T4435] bridge_slave_0: entered allmulticast mode [ 63.336681][ T4435] bridge_slave_0: entered promiscuous mode [ 63.343443][ T4461] __nla_validate_parse: 3 callbacks suppressed [ 63.343468][ T4461] netlink: 80 bytes leftover after parsing attributes in process `syz.2.289'. [ 63.359137][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.366248][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.373730][ T4435] bridge_slave_1: entered allmulticast mode [ 63.381755][ T4435] bridge_slave_1: entered promiscuous mode [ 63.388515][ T4461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.289'. [ 63.408627][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.419090][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.439107][ T4435] team0: Port device team_slave_0 added [ 63.447196][ T4435] team0: Port device team_slave_1 added [ 63.463208][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.470202][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.496308][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.507542][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.514548][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.540991][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.546500][ T4469] loop2: detected capacity change from 0 to 512 [ 63.595369][ T4435] hsr_slave_0: entered promiscuous mode [ 63.601497][ T4435] hsr_slave_1: entered promiscuous mode [ 63.607387][ T4435] debugfs: 'hsr0' already exists in 'hsr' [ 63.613627][ T4435] Cannot create hsr debugfs directory [ 63.657289][ T28] audit: type=1400 audit(1778606736.608:550): avc: denied { create } for pid=4467 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.741096][ T4479] loop4: detected capacity change from 0 to 764 [ 63.749418][ T4479] Symlink component flag not implemented [ 63.771725][ T4479] Symlink component flag not implemented [ 63.777506][ T4435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.791314][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.799610][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 63.801357][ T4481] ipip0: entered allmulticast mode [ 63.814020][ T4477] netlink: 80 bytes leftover after parsing attributes in process `syz.3.294'. [ 63.829154][ T4477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.294'. [ 63.838555][ T4435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.847455][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.859209][ T4435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.875046][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.901345][ T4435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.922931][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.927511][ T4491] loop3: detected capacity change from 0 to 512 [ 63.937564][ T4491] EXT4-fs: Ignoring removed nobh option [ 63.949771][ T4489] loop2: detected capacity change from 0 to 1024 [ 63.955852][ T4487] netlink: 80 bytes leftover after parsing attributes in process `syz.4.300'. [ 63.977805][ T4489] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.982359][ T4491] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 63.997423][ T4487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.300'. [ 64.009730][ T4489] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.299: lblock 8 mapped to illegal pblock 8 (length 1) [ 64.011945][ T28] audit: type=1400 audit(1778606736.958:551): avc: denied { write } for pid=4488 comm="syz.2.299" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.030560][ T4491] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.301: inode has both inline data and extents flags [ 64.058541][ T4489] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 64.062990][ T4491] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.077615][ T28] audit: type=1400 audit(1778606736.958:552): avc: denied { add_name } for pid=4488 comm="syz.2.299" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.091476][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.107620][ T4501] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.299: lblock 8 mapped to illegal pblock 8 (length 1) [ 64.129987][ T4491] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.301: couldn't read orphan inode 13 (err -117) [ 64.138463][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.141748][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 64.154733][ C0] EXT4-fs (loop3): initial error at time 1778606737: ext4_orphan_get:1397: inode 13 [ 64.164130][ C0] EXT4-fs (loop3): last error at time 1778606737: ext4_orphan_get:1397: inode 13 [ 64.177480][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.179038][ T28] audit: type=1326 audit(1778606737.138:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.0.290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7fc00000 [ 64.184601][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.216765][ T4491] loop3: lost filesystem error report for type 5 error -117 [ 64.221009][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.235344][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.249316][ T4491] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 64.256297][ T28] audit: type=1326 audit(1778606737.138:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.0.290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdcabb0cdd9 code=0x7fc00000 [ 64.287022][ T28] audit: type=1326 audit(1778606737.138:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.0.290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7fc00000 [ 64.312431][ T28] audit: type=1326 audit(1778606737.138:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.0.290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7fc00000 [ 64.395132][ T4510] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 65.333608][ T3307] EXT4-fs unmount: 30 callbacks suppressed [ 65.333623][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.349414][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.382284][ T4523] loop0: detected capacity change from 0 to 764 [ 65.394502][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.415281][ T4523] Symlink component flag not implemented [ 65.431970][ T4523] Symlink component flag not implemented [ 65.441028][ T4525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.452058][ T4528] syz_tun: entered promiscuous mode [ 65.456572][ T4525] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 65.479181][ T4528] vlan2: entered promiscuous mode [ 65.492807][ T4527] netlink: 80 bytes leftover after parsing attributes in process `syz.4.307'. [ 65.506788][ T4527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.307'. [ 65.517107][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 65.554675][ T4536] tmpfs: Bad value for 'size' [ 65.607433][ T4539] tmpfs: Bad value for 'size' [ 65.693781][ T4435] veth0_vlan: entered promiscuous mode [ 65.703142][ T4435] veth1_vlan: entered promiscuous mode [ 65.747759][ T4435] veth0_macvtap: entered promiscuous mode [ 65.766232][ T4435] veth1_macvtap: entered promiscuous mode [ 65.807397][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.830422][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.842629][ T4558] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.847356][ T2385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.861895][ T2385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.871227][ T2385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.873724][ T4558] EXT4-fs (loop2): group descriptors corrupted! [ 65.895303][ T2385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916881][ T4560] xfrm0 speed is unknown, defaulting to 1000 [ 66.130797][ T4583] tmpfs: Bad value for 'size' [ 66.222478][ T4589] xfrm0 speed is unknown, defaulting to 1000 [ 66.292477][ T4599] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 66.315450][ T4599] EXT4-fs (loop2): group descriptors corrupted! [ 66.324336][ T4601] vfat: Unknown parameter '' [ 66.339542][ T4593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.377358][ T4593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.398098][ T4593] bond0 (unregistering): Released all slaves [ 66.480237][ T4607] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 66.484674][ T4585] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.513704][ T3290] udevd[3290]: incorrect ext4 checksum on /dev/loop2 [ 66.521156][ T4608] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 66.525787][ T4585] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.536140][ T4607] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.332: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.560951][ T3290] udevd[3290]: incorrect ext4 checksum on /dev/loop2 [ 66.568501][ T4607] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.569176][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 66.586235][ C0] EXT4-fs (loop5): initial error at time 1778606739: ext4_map_blocks:791: inode 3: block 2 [ 66.597338][ C0] EXT4-fs (loop5): last error at time 1778606739: ext4_map_blocks:791: inode 3: block 2 [ 66.601768][ T4607] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.332: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.639382][ T4607] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.642285][ T4607] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.332: Failed to acquire dquot type 0 [ 66.651314][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.666760][ T4560] Cannot find add_set index 0 as target [ 66.721274][ T4596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.764740][ T4607] loop5: lost filesystem error report for type 5 error -117 [ 66.765224][ T4607] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 66.801176][ T4589] Cannot find add_set index 0 as target [ 66.801970][ T4607] loop5: lost filesystem error report for type 5 error -117 [ 66.808245][ T4607] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.332: mark_inode_dirty error [ 66.826876][ T4607] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.827098][ T4607] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 66.849629][ T4607] EXT4-fs (loop5): 1 orphan inode deleted [ 66.869608][ T60] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.889224][ T4607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.916220][ T60] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.916314][ T60] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 66.980911][ T30] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.995437][ T30] EXT4-fs error (device loop5): ext4_write_dquot:7014: comm kworker/u8:1: Failed to commit dquot type 0 [ 67.018153][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.027585][ T4435] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.040945][ T4435] loop5: lost filesystem error report for type 5 error -117 [ 67.041792][ T4435] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 67.052248][ T4634] program syz.2.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.058967][ T4435] loop5: lost filesystem error report for type 5 error -117 [ 67.067759][ T4435] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 67.086718][ T4435] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.122545][ T4637] ext2: Unknown parameter 'fsname' [ 67.162803][ T4641] Cannot find add_set index 0 as target [ 67.305060][ T4644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.320946][ T4644] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 67.338119][ T4644] --map-set only usable from mangle table [ 67.377711][ T4648] tmpfs: Bad value for 'size' [ 67.534918][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.548360][ T4660] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 67.568591][ T4660] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.577165][ T4660] bond0: (slave team0): Enslaving as an active interface with an up link [ 67.595609][ T4664] set_capacity_and_notify: 13 callbacks suppressed [ 67.605451][ T4664] loop4: detected capacity change from 0 to 512 [ 67.612753][ T4664] ext4: Unknown parameter 'func' [ 67.721284][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.805548][ T4683] FAULT_INJECTION: forcing a failure. [ 67.805548][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.819620][ T4683] CPU: 0 UID: 0 PID: 4683 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(full) [ 67.819650][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.819716][ T4683] Call Trace: [ 67.819722][ T4683] [ 67.819730][ T4683] __dump_stack+0x1d/0x30 [ 67.819767][ T4683] dump_stack_lvl+0x95/0xd0 [ 67.819788][ T4683] dump_stack+0x15/0x1b [ 67.819810][ T4683] should_fail_ex+0x263/0x280 [ 67.819857][ T4683] should_fail+0xb/0x20 [ 67.819880][ T4683] should_fail_usercopy+0x1a/0x20 [ 67.819908][ T4683] strncpy_from_user+0x27/0x250 [ 67.819954][ T4683] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 67.820060][ T4683] do_getname+0x59/0x1c0 [ 67.820076][ T4683] getname_flags+0x1d/0x30 [ 67.820090][ T4683] do_sys_openat2+0x60/0x130 [ 67.820108][ T4683] __x64_sys_creat+0x65/0x90 [ 67.820129][ T4683] x64_sys_call+0x2ea0/0x3020 [ 67.820170][ T4683] do_syscall_64+0x12c/0x3b0 [ 67.820252][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.820275][ T4683] RIP: 0033:0x7fdcabb0cdd9 [ 67.820290][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.820306][ T4683] RSP: 002b:00007fdcaa55f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 67.820327][ T4683] RAX: ffffffffffffffda RBX: 00007fdcabd85fa0 RCX: 00007fdcabb0cdd9 [ 67.820375][ T4683] RDX: 0000000000000000 RSI: d931d3864d39dcca RDI: 0000200000000000 [ 67.820389][ T4683] RBP: 00007fdcaa55f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.820403][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.820413][ T4683] R13: 00007fdcabd86038 R14: 00007fdcabd85fa0 R15: 00007ffed4f00d78 [ 67.820470][ T4683] [ 68.195740][ T28] kauditd_printk_skb: 14813 callbacks suppressed [ 68.195754][ T28] audit: type=1400 audit(1778606741.148:15362): avc: denied { write } for pid=4681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.225558][ T28] audit: type=1400 audit(1778606741.178:15363): avc: denied { create } for pid=4681 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.248376][ T28] audit: type=1400 audit(1778606741.178:15364): avc: denied { write } for pid=4681 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.274747][ T28] audit: type=1400 audit(1778606741.178:15365): avc: denied { append } for pid=4681 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.309220][ T28] audit: type=1400 audit(1778606741.258:15366): avc: denied { write } for pid=4697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.333103][ T28] audit: type=1400 audit(1778606741.288:15367): avc: denied { unlink } for pid=4697 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.364251][ T4696] __nla_validate_parse: 14 callbacks suppressed [ 68.364277][ T4696] netlink: 80 bytes leftover after parsing attributes in process `syz.0.354'. [ 68.368053][ T4699] tmpfs: Bad value for 'size' [ 68.375658][ T4696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 68.411086][ T28] audit: type=1400 audit(1778606741.368:15368): avc: denied { mount } for pid=4703 comm="syz.5.356" name="/" dev="autofs" ino=9657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 68.462622][ T28] audit: type=1400 audit(1778606741.418:15369): avc: denied { write } for pid=4702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.507546][ T28] audit: type=1400 audit(1778606741.418:15370): avc: denied { write } for pid=4703 comm="syz.5.356" lport=58675 faddr=::ffff:100.1.1.128 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.556963][ T4720] xfrm0 speed is unknown, defaulting to 1000 [ 68.582917][ T28] audit: type=1400 audit(1778606741.538:15371): avc: denied { write } for pid=4722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.691636][ T4736] xfrm0 speed is unknown, defaulting to 1000 [ 68.757972][ T4745] loop4: detected capacity change from 0 to 512 [ 68.769875][ T4744] loop2: detected capacity change from 0 to 2048 [ 68.797395][ T4745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.824455][ T4744] loop2: p2 p3 p7 [ 68.846739][ T4744] xt_hashlimit: size too large, truncated to 1048576 [ 68.865263][ T4745] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.910576][ T4585] syz.3.323 (4585) used greatest stack depth: 9152 bytes left [ 68.969427][ T4740] loop5: detected capacity change from 0 to 2048 [ 68.970572][ T4752] loop0: detected capacity change from 0 to 512 [ 69.001794][ T4745] tipc: Enabled bearer , priority 0 [ 69.019175][ T4740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.039919][ T4745] tipc: Disabling bearer [ 69.048229][ T4740] Cannot find add_set index 0 as target [ 69.106444][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.190066][ T4752] xfrm0 speed is unknown, defaulting to 1000 [ 69.195866][ T4763] netlink: 80 bytes leftover after parsing attributes in process `syz.2.367'. [ 69.217743][ T4763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.367'. [ 69.252543][ T4767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 69.357927][ T4772] loop4: detected capacity change from 0 to 1024 [ 69.367598][ T4772] EXT4-fs: test_dummy_encryption option not supported [ 69.662226][ T4775] loop4: detected capacity change from 0 to 512 [ 69.675174][ T4775] EXT4-fs: Ignoring removed orlov option [ 69.684131][ T4775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.715237][ T4775] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.371: invalid indirect mapped block 32768 (level 2) [ 69.729421][ T4775] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.733943][ T4775] EXT4-fs (loop4): 1 orphan inode deleted [ 69.743407][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.743444][ C0] EXT4-fs (loop4): initial error at time 1778606742: ext4_free_branches:1023: inode 16 [ 69.743797][ C0] EXT4-fs (loop4): last error at time 1778606742: ext4_free_branches:1023: inode 16 [ 69.778647][ T4775] EXT4-fs (loop4): 1 truncate cleaned up [ 69.790991][ T4775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.983978][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 70.014788][ T4780] tmpfs: Bad value for 'size' [ 70.036232][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 70.343473][ T4788] loop0: detected capacity change from 0 to 512 [ 70.379461][ T4788] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 70.409099][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.419556][ T4790] loop2: detected capacity change from 0 to 512 [ 70.431311][ T4788] EXT4-fs (loop0): group descriptors corrupted! [ 70.443875][ T4790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.478945][ T4790] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.377: bad orphan inode 131083 [ 70.499947][ T4790] loop2: lost filesystem error report for type 5 error -117 [ 70.500557][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.660163][ T4790] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.2.377: path /80/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 70.700752][ T4803] loop0: detected capacity change from 0 to 764 [ 70.725869][ T4803] Symlink component flag not implemented [ 70.739609][ T4803] Symlink component flag not implemented [ 70.769829][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.804034][ T4805] --map-set only usable from mangle table [ 70.877862][ T4801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.907312][ T4801] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.951025][ T4801] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 70.978264][ T4811] EXT4-fs: Ignoring removed bh option [ 70.994578][ T4435] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.008463][ T4811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.026904][ T4811] EXT4-fs error (device loop0): ext4_empty_dir:3101: inode #12: block 80: comm syz.0.385: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 71.047017][ T4811] EXT4-fs (loop0): Remounting filesystem read-only [ 71.053638][ T4811] EXT4-fs warning (device loop0): ext4_empty_dir:3104: inode #12: comm syz.0.385: directory missing '..' [ 71.086149][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.129351][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.160970][ T4817] tmpfs: Bad value for 'size' [ 71.284731][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.302521][ T4815] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.2.382: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 71.324132][ T4815] EXT4-fs error (device loop2) in ext4_delete_entry:2744: Corrupt filesystem [ 71.340089][ T4815] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.382: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 71.425923][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 71.435795][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 71.445277][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 71.546693][ T4843] EXT4-fs: Ignoring removed bh option [ 71.569680][ T4841] Symlink component flag not implemented [ 71.590661][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.624179][ T4841] Symlink component flag not implemented [ 71.642101][ T4843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.823938][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.872723][ T4855] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 72.005277][ T4851] EXT4-fs: Ignoring removed bh option [ 72.023207][ T4851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.038264][ T4851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.187721][ T4863] EXT4-fs: Ignoring removed bh option [ 72.205223][ T4863] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.228529][ T4863] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.236634][ T4863] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.400: Bad quota inum: 4294934528, type: 0 [ 72.259957][ T4863] loop0: lost filesystem error report for type 5 error -117 [ 72.260182][ T4863] EXT4-fs (loop0): Remounting filesystem read-only [ 72.274090][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 72.274116][ C1] EXT4-fs (loop0): initial error at time 1778606745: ext4_quota_enable:7221 [ 72.274186][ C1] EXT4-fs (loop0): last error at time 1778606745: ext4_quota_enable:7221 [ 72.319610][ T4864] EXT4-fs: dax option not supported [ 72.414556][ T4863] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 72.455312][ T4863] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 72.475186][ T4864] syzkaller0: entered promiscuous mode [ 72.487926][ T4864] syzkaller0: entered allmulticast mode [ 72.492741][ T4863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.563126][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.621295][ T4881] xfrm0 speed is unknown, defaulting to 1000 [ 73.755145][ T4881] set_capacity_and_notify: 9 callbacks suppressed [ 73.755160][ T4881] loop0: detected capacity change from 0 to 2048 [ 73.800277][ T4881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.822822][ T4895] loop5: detected capacity change from 0 to 764 [ 73.836690][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 73.836701][ T28] audit: type=1400 audit(1778606746.788:15507): avc: denied { write } for pid=4880 comm="syz.0.405" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.872653][ T4895] Symlink component flag not implemented [ 73.899427][ T4895] Symlink component flag not implemented [ 73.975757][ T28] audit: type=1400 audit(1778606746.848:15508): avc: denied { map } for pid=4880 comm="syz.0.405" path="/74/file1/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.010308][ T4897] loop5: detected capacity change from 0 to 512 [ 74.017692][ T4897] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.045233][ T4897] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 74.054303][ T4897] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 74.062504][ T4897] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 74.160845][ T4899] __nla_validate_parse: 4 callbacks suppressed [ 74.160868][ T4899] netlink: 80 bytes leftover after parsing attributes in process `syz.5.410'. [ 74.235373][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 74.265164][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz.5.410'. [ 74.492707][ T4912] geneve2: entered promiscuous mode [ 74.672309][ T4912] geneve2: entered allmulticast mode [ 75.443283][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 75.476024][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'. [ 75.494614][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.543236][ T28] audit: type=1326 audit(1778606748.498:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.561622][ T4923] tmpfs: Bad value for 'size' [ 75.622896][ T28] audit: type=1326 audit(1778606748.498:15510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.651891][ T28] audit: type=1326 audit(1778606748.578:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.692295][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.714503][ T4929] loop3: detected capacity change from 0 to 1024 [ 75.722565][ T28] audit: type=1326 audit(1778606748.578:15512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.732248][ T4928] netlink: 80 bytes leftover after parsing attributes in process `syz.5.420'. [ 75.758532][ T4929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.775803][ T28] audit: type=1326 audit(1778606748.578:15513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.816978][ T28] audit: type=1326 audit(1778606748.578:15514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.830064][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.420'. [ 75.843003][ T28] audit: type=1326 audit(1778606748.578:15515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 75.860784][ T4929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.877225][ T28] audit: type=1326 audit(1778606748.578:15516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x7ffc0000 [ 76.005233][ T4940] netlink: 80 bytes leftover after parsing attributes in process `syz.5.423'. [ 76.123493][ T4940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.423'. [ 76.126005][ T4945] tmpfs: Bad value for 'size' [ 76.556015][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.584103][ T4958] xfrm0 speed is unknown, defaulting to 1000 [ 76.712951][ T4961] loop2: detected capacity change from 0 to 764 [ 76.722568][ T4961] Symlink component flag not implemented [ 76.728392][ T4961] Symlink component flag not implemented [ 76.762925][ T4958] loop3: detected capacity change from 0 to 2048 [ 76.775793][ T4963] loop2: detected capacity change from 0 to 2048 [ 76.784733][ T4958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.802405][ T4958] Cannot find add_set index 0 as target [ 76.809480][ T4963] loop2: p3 < > p4 < > [ 76.813639][ T4963] loop2: partition table partially beyond EOD, truncated [ 76.820760][ T4963] loop2: p3 start 4284289 is beyond EOD, truncated [ 76.863673][ T4967] xfrm0 speed is unknown, defaulting to 1000 [ 77.313040][ T4968] loop0: detected capacity change from 0 to 65536 [ 77.332298][ T4967] netlink: 'syz.0.430': attribute type 16 has an invalid length. [ 77.340454][ T4967] netlink: 'syz.0.430': attribute type 17 has an invalid length. [ 77.446684][ T4967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.489964][ T4980] loop4: detected capacity change from 0 to 512 [ 77.529394][ T4980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.556043][ T4980] EXT4-fs (loop4): 1 truncate cleaned up [ 77.585320][ T4980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.614963][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.706192][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.761915][ T4987] tmpfs: Bad value for 'size' [ 77.800322][ T4987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 77.802841][ T4989] tmpfs: Bad value for 'size' [ 77.995927][ T5000] xfrm0 speed is unknown, defaulting to 1000 [ 78.262432][ T5011] loop0: detected capacity change from 0 to 128 [ 78.290569][ T5011] vfat: Unknown parameter '' [ 78.800339][ T5024] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 78.821956][ T5024] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.832276][ T5024] bond0: (slave team0): Enslaving as an active interface with a down link [ 78.991578][ T5030] tmpfs: Bad value for 'size' [ 79.064042][ T5043] loop3: detected capacity change from 0 to 128 [ 79.071471][ T5043] vfat: Unknown parameter '' [ 79.595010][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.604126][ T5073] __nla_validate_parse: 2 callbacks suppressed [ 79.604140][ T5073] netlink: 76 bytes leftover after parsing attributes in process `syz.0.466'. [ 79.813483][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 79.813549][ T28] audit: type=1400 audit(1778606752.768:15588): avc: denied { connect } for pid=5079 comm="syz.2.467" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.841912][ T28] audit: type=1400 audit(1778606752.798:15589): avc: denied { setopt } for pid=5079 comm="syz.2.467" laddr=fe80::13 lport=7 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.937492][ T5085] tmpfs: Bad value for 'size' [ 80.086985][ T5092] loop5: detected capacity change from 0 to 512 [ 80.113979][ T5092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.136710][ T5092] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.191440][ T5101] capability: warning: `syz.2.473' uses 32-bit capabilities (legacy support in use) [ 80.206687][ T28] audit: type=1400 audit(1778606753.158:15590): avc: denied { write } for pid=5100 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.227638][ T5092] tipc: Started in network mode [ 80.233024][ T5092] tipc: Node identity 0233d2ea1456, cluster identity 4711 [ 80.240443][ T5092] tipc: Enabled bearer , priority 0 [ 80.282182][ T5092] tipc: Resetting bearer [ 80.316647][ T5092] tipc: Disabling bearer [ 80.345531][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 80.368776][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 80.386278][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.423209][ T5110] FAULT_INJECTION: forcing a failure. [ 80.423209][ T5110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.452551][ T5112] loop2: detected capacity change from 0 to 512 [ 80.463160][ T5112] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.477: corrupted in-inode xattr: invalid ea_ino [ 80.476558][ T5110] CPU: 1 UID: 0 PID: 5110 Comm: syz.5.475 Not tainted syzkaller #0 PREEMPT(full) [ 80.476664][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.476713][ T5110] Call Trace: [ 80.476721][ T5110] [ 80.476739][ T5110] __dump_stack+0x1d/0x30 [ 80.476771][ T5110] dump_stack_lvl+0x95/0xd0 [ 80.476823][ T5110] dump_stack+0x15/0x1b [ 80.476838][ T5110] should_fail_ex+0x263/0x280 [ 80.476860][ T5110] should_fail+0xb/0x20 [ 80.476880][ T5110] should_fail_usercopy+0x1a/0x20 [ 80.476963][ T5110] _copy_from_user+0x1c/0xb0 [ 80.476991][ T5110] kstrtouint_from_user+0x69/0xf0 [ 80.477062][ T5110] ? 0xffffffff81000000 [ 80.477077][ T5110] ? selinux_file_permission+0x1e1/0x320 [ 80.477102][ T5110] proc_fail_nth_write+0x50/0x160 [ 80.477150][ T5110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.477173][ T5110] vfs_write+0x269/0x9f0 [ 80.477198][ T5110] ? __rcu_read_unlock+0x4e/0x70 [ 80.477220][ T5110] ? __fget_files+0x184/0x1c0 [ 80.477296][ T5110] ? mutex_lock+0x57/0x90 [ 80.477319][ T5110] ksys_write+0xdc/0x1a0 [ 80.477343][ T5110] __x64_sys_write+0x40/0x50 [ 80.477368][ T5110] x64_sys_call+0x27e1/0x3020 [ 80.477407][ T5110] do_syscall_64+0x12c/0x3b0 [ 80.477434][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.477456][ T5110] RIP: 0033:0x7ffafcb4d60e [ 80.477509][ T5110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.477526][ T5110] RSP: 002b:00007ffafb5e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.477547][ T5110] RAX: ffffffffffffffda RBX: 00007ffafb5e76c0 RCX: 00007ffafcb4d60e [ 80.477561][ T5110] RDX: 0000000000000001 RSI: 00007ffafb5e70a0 RDI: 0000000000000004 [ 80.477574][ T5110] RBP: 00007ffafb5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.477591][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.477603][ T5110] R13: 00007ffafce06038 R14: 00007ffafce05fa0 R15: 00007ffe4915efb8 [ 80.477764][ T5110] [ 80.679093][ T5112] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.679306][ T5112] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.477: couldn't read orphan inode 15 (err -117) [ 80.700241][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 80.700282][ C1] EXT4-fs (loop2): initial error at time 1778606753: ext4_iget_extra_inode:5128: inode 15 [ 80.700314][ C1] EXT4-fs (loop2): last error at time 1778606753: ext4_iget_extra_inode:5128: inode 15 [ 80.732909][ T5112] loop2: lost filesystem error report for type 5 error -117 [ 80.734051][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.758069][ T28] audit: type=1400 audit(1778606753.708:15591): avc: denied { setattr } for pid=5111 comm="syz.2.477" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.784918][ T5112] IPv6: addrconf: prefix option has invalid lifetime [ 80.816058][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.816798][ T5124] tmpfs: Bad value for 'size' [ 80.867599][ T28] audit: type=1400 audit(1778606753.818:15592): avc: denied { getopt } for pid=5132 comm="syz.2.484" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.872191][ T5131] loop3: detected capacity change from 0 to 764 [ 80.893440][ T5133] FAULT_INJECTION: forcing a failure. [ 80.893440][ T5133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.914730][ T5131] Symlink component flag not implemented [ 80.923870][ T5133] CPU: 0 UID: 0 PID: 5133 Comm: syz.2.484 Not tainted syzkaller #0 PREEMPT(full) [ 80.923892][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.923902][ T5133] Call Trace: [ 80.923907][ T5133] [ 80.923989][ T5133] __dump_stack+0x1d/0x30 [ 80.924089][ T5133] dump_stack_lvl+0x95/0xd0 [ 80.924108][ T5133] dump_stack+0x15/0x1b [ 80.924125][ T5133] should_fail_ex+0x263/0x280 [ 80.924151][ T5133] should_fail+0xb/0x20 [ 80.924189][ T5133] should_fail_usercopy+0x1a/0x20 [ 80.924215][ T5133] _copy_from_iter+0xcf/0xea0 [ 80.924241][ T5133] ? __alloc_skb+0x4f6/0x690 [ 80.924259][ T5133] ? __alloc_skb+0x200/0x690 [ 80.924303][ T5133] netlink_sendmsg+0x4ae/0x6f0 [ 80.924379][ T5133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.924407][ T5133] ____sys_sendmsg+0x563/0x5b0 [ 80.924432][ T5133] ___sys_sendmsg+0x195/0x1e0 [ 80.924501][ T5133] __x64_sys_sendmsg+0xd4/0x160 [ 80.924528][ T5133] x64_sys_call+0x194c/0x3020 [ 80.924551][ T5133] do_syscall_64+0x12c/0x3b0 [ 80.924636][ T5133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.924654][ T5133] RIP: 0033:0x7f3e3c8dcdd9 [ 80.924670][ T5133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.924713][ T5133] RSP: 002b:00007f3e3b32f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.924740][ T5133] RAX: ffffffffffffffda RBX: 00007f3e3cb55fa0 RCX: 00007f3e3c8dcdd9 [ 80.924752][ T5133] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 80.924841][ T5133] RBP: 00007f3e3b32f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.924854][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.924869][ T5133] R13: 00007f3e3cb56038 R14: 00007f3e3cb55fa0 R15: 00007ffcce250ff8 [ 80.924887][ T5133] [ 80.933623][ T5131] Symlink component flag not implemented [ 80.965995][ T5138] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 81.065655][ T28] audit: type=1400 audit(1778606753.978:15593): avc: denied { ioctl } for pid=5140 comm="syz.2.486" path="socket:[11361]" dev="sockfs" ino=11361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.090165][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 81.096121][ T28] audit: type=1400 audit(1778606754.038:15594): avc: denied { read } for pid=5137 comm="syz.4.485" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.096166][ T28] audit: type=1400 audit(1778606754.038:15595): avc: denied { open } for pid=5137 comm="syz.4.485" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.273242][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.489'. [ 81.326344][ T5158] netlink: 'syz.2.490': attribute type 15 has an invalid length. [ 81.399512][ T5163] loop2: detected capacity change from 0 to 2048 [ 81.415104][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 81.424834][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 81.434208][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 81.443528][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 81.471136][ T28] audit: type=1326 audit(1778606754.338:15596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.2.492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3c8dcdd9 code=0x7ffc0000 [ 81.496926][ T28] audit: type=1326 audit(1778606754.338:15597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.2.492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3c8dcdd9 code=0x7ffc0000 [ 81.580848][ T5163] loop2: unable to read partition table [ 81.586839][ T5163] loop2: partition table beyond EOD, truncated [ 81.600512][ T5163] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 81.638446][ T5165] macsec0: entered promiscuous mode [ 81.643920][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.798761][ T2983] loop2: unable to read partition table [ 81.805439][ T2983] loop2: partition table beyond EOD, truncated [ 81.846154][ T5179] netlink: 'syz.0.497': attribute type 5 has an invalid length. [ 81.868659][ T5165] macsec0: left promiscuous mode [ 81.920407][ T5186] tmpfs: Bad value for 'size' [ 82.029198][ T2554] bond0: (slave bond_slave_0): interface is now down [ 82.037348][ T2554] bond0: (slave bond_slave_1): interface is now down [ 82.053748][ T2554] bond0: now running without any active interface! [ 82.107498][ T5197] loop3: detected capacity change from 0 to 1024 [ 82.142770][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.179914][ T5197] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.306682][ T5197] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.503: lblock 8 mapped to illegal pblock 8 (length 1) [ 82.345183][ T5209] xfrm0 speed is unknown, defaulting to 1000 [ 82.402410][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 82.596934][ T5197] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 82.620414][ T5211] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 8: comm syz.3.503: lblock 8 mapped to illegal pblock 8 (length 1) [ 82.754409][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.852758][ T5219] loop5: detected capacity change from 0 to 128 [ 82.947501][ T5217] loop3: detected capacity change from 0 to 512 [ 82.978605][ T5225] loop5: detected capacity change from 0 to 1024 [ 82.979644][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.986229][ T5225] EXT4-fs: Ignoring removed bh option [ 83.004526][ T5225] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.017108][ T5225] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.024027][ T5225] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.510: Bad quota inum: 4294934528, type: 0 [ 83.070608][ T5225] loop5: lost filesystem error report for type 5 error -117 [ 83.078816][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.093287][ C0] EXT4-fs (loop5): initial error at time 1778606756: ext4_quota_enable:7221 [ 83.102685][ C0] EXT4-fs (loop5): last error at time 1778606756: ext4_quota_enable:7221 [ 83.118870][ T5225] EXT4-fs (loop5): Remounting filesystem read-only [ 83.126047][ T5225] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 83.141904][ T5225] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 83.188500][ T5233] loop0: detected capacity change from 0 to 764 [ 83.213915][ T5225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.249587][ T5231] Symlink component flag not implemented [ 83.302282][ T5231] Symlink component flag not implemented [ 83.611944][ T5217] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.663941][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.802418][ T5250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.815069][ T5250] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.830493][ T5250] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #12: comm syz.0.513: Directory hole found for htree leaf block 0 [ 83.850906][ T5250] openvswitch: netlink: Key type 3846 is out of range max 32 [ 83.864770][ T5254] xfrm0 speed is unknown, defaulting to 1000 [ 84.029172][ T5255] xfrm0 speed is unknown, defaulting to 1000 [ 85.094398][ T5274] set_capacity_and_notify: 1 callbacks suppressed [ 85.094413][ T5274] loop4: detected capacity change from 0 to 512 [ 85.213674][ T5268] VFS: Mount too revealing [ 85.383954][ T5271] FAULT_INJECTION: forcing a failure. [ 85.383954][ T5271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.860607][ T5271] CPU: 0 UID: 0 PID: 5271 Comm: syz.4.523 Not tainted syzkaller #0 PREEMPT(full) [ 85.860633][ T5271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.860644][ T5271] Call Trace: [ 85.860650][ T5271] [ 85.860657][ T5271] __dump_stack+0x1d/0x30 [ 85.860679][ T5271] dump_stack_lvl+0x95/0xd0 [ 85.860743][ T5271] dump_stack+0x15/0x1b [ 85.860760][ T5271] should_fail_ex+0x263/0x280 [ 85.860784][ T5271] should_fail+0xb/0x20 [ 85.860806][ T5271] should_fail_usercopy+0x1a/0x20 [ 85.860908][ T5271] _copy_from_user+0x1c/0xb0 [ 85.860995][ T5271] kstrtouint_from_user+0x69/0xf0 [ 85.861017][ T5271] ? 0xffffffff81000000 [ 85.861030][ T5271] ? selinux_file_permission+0x1e1/0x320 [ 85.861053][ T5271] proc_fail_nth_write+0x50/0x160 [ 85.861102][ T5271] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.861149][ T5271] vfs_write+0x269/0x9f0 [ 85.861170][ T5271] ? __rcu_read_unlock+0x4e/0x70 [ 85.861187][ T5271] ? __fget_files+0x184/0x1c0 [ 85.861258][ T5271] ? mutex_lock+0x57/0x90 [ 85.861287][ T5271] ksys_write+0xdc/0x1a0 [ 85.861302][ T5271] __x64_sys_write+0x40/0x50 [ 85.861318][ T5271] x64_sys_call+0x27e1/0x3020 [ 85.861332][ T5271] do_syscall_64+0x12c/0x3b0 [ 85.861396][ T5271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.861408][ T5271] RIP: 0033:0x7fb9761dd60e [ 85.861418][ T5271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.861428][ T5271] RSP: 002b:00007fb974c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.861440][ T5271] RAX: ffffffffffffffda RBX: 00007fb974c776c0 RCX: 00007fb9761dd60e [ 85.861494][ T5271] RDX: 0000000000000001 RSI: 00007fb974c770a0 RDI: 0000000000000007 [ 85.861502][ T5271] RBP: 00007fb974c77090 R08: 0000000000000000 R09: 0000000000000000 [ 85.861537][ T5271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.861544][ T5271] R13: 00007fb976496038 R14: 00007fb976495fa0 R15: 00007ffd24e1ed58 [ 85.861554][ T5271] [ 86.140451][ T5284] loop3: detected capacity change from 0 to 512 [ 86.147884][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.150042][ T5279] tmpfs: Bad value for 'size' [ 86.168603][ T5286] program syz.2.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.183744][ T5284] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.528: corrupted inode contents [ 86.203698][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.203828][ T5284] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.528: mark_inode_dirty error [ 86.213025][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.213039][ C1] EXT4-fs (loop3): initial error at time 1778606759: ext4_do_update_inode:5690: inode 16 [ 86.213062][ C1] EXT4-fs (loop3): last error at time 1778606759: ext4_do_update_inode:5690: inode 16 [ 86.261829][ T5286] loop2: detected capacity change from 0 to 256 [ 86.268554][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.269800][ T5284] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.528: corrupted inode contents [ 86.305794][ T5299] __nla_validate_parse: 7 callbacks suppressed [ 86.305816][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 86.340191][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 86.340202][ T28] audit: type=1326 audit(1778606759.298:15780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e3c8dcdd9 code=0x0 [ 86.351883][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.381389][ T5284] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.528: mark_inode_dirty error [ 86.402806][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.403042][ T5284] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.528: corrupted inode contents [ 86.424168][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.424384][ T5284] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 86.443367][ T5284] loop3: lost filesystem error report for type 5 error -117 [ 86.443557][ T5284] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.528: corrupted inode contents [ 86.463586][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.463772][ T5284] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.528: mark_inode_dirty error [ 86.484153][ T5284] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.484275][ T5284] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 86.539971][ T5284] loop3: lost filesystem error report for type 5 error -117 [ 86.540450][ T5284] EXT4-fs (loop3): 1 truncate cleaned up [ 86.559872][ T2441] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.573934][ T2441] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 86.587188][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.601844][ T5284] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.651787][ T5311] veth1_macvtap: left promiscuous mode [ 86.670444][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.791719][ T28] audit: type=1400 audit(1778606759.748:15781): avc: denied { read } for pid=5319 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.811015][ T5320] xfrm0 speed is unknown, defaulting to 1000 [ 86.824722][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.827138][ T28] audit: type=1400 audit(1778606759.778:15782): avc: denied { read write } for pid=5329 comm="syz.5.542" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.832790][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.855984][ T28] audit: type=1400 audit(1778606759.778:15783): avc: denied { open } for pid=5329 comm="syz.5.542" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.892568][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.893067][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.936585][ T28] audit: type=1400 audit(1778606759.888:15784): avc: denied { write } for pid=5318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.942244][ T5333] loop4: detected capacity change from 0 to 1024 [ 86.995735][ T28] audit: type=1400 audit(1778606759.948:15785): avc: denied { write } for pid=5341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.092829][ T5333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.117158][ T5333] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.135414][ T28] audit: type=1400 audit(1778606760.088:15786): avc: denied { write } for pid=5332 comm="syz.4.543" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.160311][ T5333] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.543: lblock 8 mapped to illegal pblock 8 (length 1) [ 87.175727][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 87.194310][ T5333] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.543: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 87.216843][ T5333] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.543: lblock 8 mapped to illegal pblock 8 (length 1) [ 87.266553][ T5347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 87.309212][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.356699][ T5351] loop0: detected capacity change from 0 to 4096 [ 87.408679][ T5351] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.435793][ T5355] netlink: 80 bytes leftover after parsing attributes in process `syz.2.548'. [ 87.464396][ T5351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.479246][ T5355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 87.525306][ T5377] FAULT_INJECTION: forcing a failure. [ 87.525306][ T5377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.538607][ T5377] CPU: 0 UID: 0 PID: 5377 Comm: syz.2.553 Not tainted syzkaller #0 PREEMPT(full) [ 87.538632][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.538644][ T5377] Call Trace: [ 87.538652][ T5377] [ 87.538706][ T5377] __dump_stack+0x1d/0x30 [ 87.538783][ T5377] dump_stack_lvl+0x95/0xd0 [ 87.538803][ T5377] dump_stack+0x15/0x1b [ 87.538822][ T5377] should_fail_ex+0x263/0x280 [ 87.538849][ T5377] should_fail+0xb/0x20 [ 87.538884][ T5377] should_fail_usercopy+0x1a/0x20 [ 87.538913][ T5377] _copy_from_iter+0xcf/0xea0 [ 87.538975][ T5377] ? alloc_pages_mpol+0x217/0x260 [ 87.539000][ T5377] ? lapic_next_event+0x11/0x20 [ 87.539044][ T5377] copy_page_from_iter+0x161/0x1f0 [ 87.539073][ T5377] tun_get_user+0xbe3/0x27e0 [ 87.539117][ T5377] ? ref_tracker_alloc+0x1eb/0x2f0 [ 87.539167][ T5377] tun_chr_write_iter+0x15e/0x210 [ 87.539197][ T5377] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 87.539249][ T5377] vfs_write+0x5a6/0x9f0 [ 87.539274][ T5377] ksys_write+0xdc/0x1a0 [ 87.539330][ T5377] __x64_sys_write+0x40/0x50 [ 87.539411][ T5377] x64_sys_call+0x27e1/0x3020 [ 87.539433][ T5377] do_syscall_64+0x12c/0x3b0 [ 87.539484][ T5377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.539596][ T5377] RIP: 0033:0x7f3e3c89d60e [ 87.539613][ T5377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.539660][ T5377] RSP: 002b:00007f3e3b32efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.539682][ T5377] RAX: ffffffffffffffda RBX: 00007f3e3b32f6c0 RCX: 00007f3e3c89d60e [ 87.539697][ T5377] RDX: 000000000000004a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 87.539710][ T5377] RBP: 00007f3e3b32f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.539724][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.539736][ T5377] R13: 00007f3e3cb56038 R14: 00007f3e3cb55fa0 R15: 00007ffcce250ff8 [ 87.539880][ T5377] [ 87.583204][ T28] audit: type=1400 audit(1778606760.498:15787): avc: denied { write } for pid=5357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.740935][ T5388] loop3: detected capacity change from 0 to 512 [ 87.758805][ T28] audit: type=1400 audit(1778606760.558:15788): avc: denied { write } for pid=5382 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.838327][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.948561][ T5394] loop5: detected capacity change from 0 to 128 [ 87.962995][ T5394] vfat: Unknown parameter '' [ 87.978009][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.989946][ T5396] loop2: detected capacity change from 0 to 164 [ 87.999683][ T5394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.554'. [ 88.018474][ T5396] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 88.225463][ T5398] SELinux: policydb magic number 0x4c50ff does not match expected magic number 0xf97cff8c [ 88.317025][ T5398] SELinux: failed to load policy [ 88.367039][ T5412] loop4: detected capacity change from 0 to 1024 [ 88.418702][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 88.428655][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 88.438356][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 88.447408][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 88.476124][ T5412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.489134][ T5412] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.531261][ T5412] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.561: lblock 8 mapped to illegal pblock 8 (length 1) [ 88.556252][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.566744][ T5412] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.561: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 88.593759][ T5412] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.561: lblock 8 mapped to illegal pblock 8 (length 1) [ 88.651643][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.919000][ T5437] loop3: detected capacity change from 0 to 1024 [ 88.926545][ T5437] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 88.937724][ T5437] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 88.964314][ T5437] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.974626][ T5437] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #2: comm syz.3.566: iget: bad extra_isize 65535 (inode size 1024) [ 88.988502][ T5437] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 88.988612][ T5437] EXT4-fs (loop3): no journal found [ 88.997644][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 88.997664][ C0] EXT4-fs (loop3): initial error at time 1778606761: ext4_get_journal_inode:5896: inode 2 [ 88.997710][ C0] EXT4-fs (loop3): last error at time 1778606761: ext4_get_journal_inode:5896: inode 2 [ 89.039753][ T5437] EXT4-fs (loop3): can't get journal size [ 89.047515][ T5437] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.566: iget: bad extra_isize 65535 (inode size 1024) [ 89.079659][ T5437] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 89.079827][ T5437] EXT4-fs (loop3): get root inode failed [ 89.114507][ T5447] sg_write: data in/out 401372/72 bytes for SCSI command 0x58-- guessing data in; [ 89.114507][ T5447] program syz.4.569 not setting count and/or reply_len properly [ 89.141693][ T5437] EXT4-fs (loop3): mount failed [ 89.213561][ T5457] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 89.258231][ T5459] --map-set only usable from mangle table [ 89.321436][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.341556][ T5462] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.354996][ T5464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.370974][ T5462] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.576: lblock 8 mapped to illegal pblock 8 (length 1) [ 89.376948][ T5464] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.395962][ T5462] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 89.410848][ T5464] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.577: lblock 8 mapped to illegal pblock 8 (length 1) [ 89.415075][ T5462] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.576: lblock 8 mapped to illegal pblock 8 (length 1) [ 89.485832][ T5464] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.577: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 89.536525][ T5464] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 8: comm syz.5.577: lblock 8 mapped to illegal pblock 8 (length 1) [ 89.552894][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.707671][ T5489] ipvlan2: entered promiscuous mode [ 89.714230][ T5489] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.727237][ T5489] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 89.739616][ T5489] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 89.784878][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.810067][ T5483] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 89.882931][ T5483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.922726][ T5483] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.048303][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.068699][ T5496] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.195773][ T2554] bond0: (slave bond_slave_0): interface is now down [ 90.205036][ T2554] bond0: (slave bond_slave_1): interface is now down [ 90.222443][ T2554] bond0: now running without any active interface! [ 90.293860][ T5514] set_capacity_and_notify: 7 callbacks suppressed [ 90.293875][ T5514] loop2: detected capacity change from 0 to 1024 [ 90.314531][ T5517] loop3: detected capacity change from 0 to 128 [ 90.343861][ T5514] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.350088][ T5517] vfat: Unknown parameter '' [ 90.362044][ T5514] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.592: lblock 8 mapped to illegal pblock 8 (length 1) [ 90.378360][ T5514] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.592: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 90.414566][ T5514] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.592: lblock 8 mapped to illegal pblock 8 (length 1) [ 90.550934][ T5534] loop2: detected capacity change from 0 to 2048 [ 90.573459][ T5534] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.2.599: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 90.597050][ T5534] EXT4-fs error (device loop2) in ext4_delete_entry:2744: Corrupt filesystem [ 91.470753][ T5560] __nla_validate_parse: 9 callbacks suppressed [ 91.470769][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 91.529180][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 91.538433][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 91.547753][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 91.619176][ T5558] loop4: detected capacity change from 0 to 128 [ 91.693862][ T5558] vfat: Unknown parameter '' [ 91.725605][ T5558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.607'. [ 91.739998][ T5565] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.822721][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 91.822736][ T28] audit: type=1326 audit(1778606764.778:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 91.825027][ T5578] loop3: detected capacity change from 0 to 512 [ 91.829584][ T28] audit: type=1326 audit(1778606764.788:15817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 91.890726][ T5580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.612'. [ 91.890873][ T5578] ext4: Unknown parameter 'noacl' [ 91.907218][ T5580] ip6tnl1: entered allmulticast mode [ 91.930549][ T28] audit: type=1326 audit(1778606764.848:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 91.956092][ T28] audit: type=1326 audit(1778606764.848:15819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 91.994528][ T28] audit: type=1326 audit(1778606764.848:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.032836][ T28] audit: type=1326 audit(1778606764.848:15821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.056917][ T5597] loop0: detected capacity change from 0 to 512 [ 92.076464][ T5597] EXT4-fs: Ignoring removed oldalloc option [ 92.088167][ T28] audit: type=1326 audit(1778606764.848:15822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.101583][ T5597] EXT4-fs: Ignoring removed nobh option [ 92.116587][ T28] audit: type=1326 audit(1778606764.848:15823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.160776][ T28] audit: type=1326 audit(1778606764.848:15824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.173665][ T5597] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.619: iget: bad extra_isize 90 (inode size 256) [ 92.200869][ T5597] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.203759][ T5597] EXT4-fs (loop0): Remounting filesystem read-only [ 92.218807][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 92.225967][ C1] EXT4-fs (loop0): initial error at time 1778606765: ext4_xattr_inode_iget:441: inode 11 [ 92.231901][ T5597] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 92.235817][ C1] EXT4-fs (loop0): last error at time 1778606765: ext4_xattr_inode_iget:441: inode 11 [ 92.256259][ T5606] loop2: detected capacity change from 0 to 512 [ 92.259502][ T28] audit: type=1326 audit(1778606764.848:15825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97621cdd9 code=0x7ffc0000 [ 92.269005][ T5597] EXT4-fs (loop0): 1 orphan inode deleted [ 92.293646][ T5606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.303578][ T5606] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 92.336507][ T5606] netlink: 88 bytes leftover after parsing attributes in process `syz.2.621'. [ 92.354783][ T5606] netlink: 88 bytes leftover after parsing attributes in process `syz.2.621'. [ 92.536883][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 92.546666][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 92.635067][ T5625] x_tables: ip_tables: osf match: only valid for protocol 6 [ 92.658309][ T5627] netlink: 'syz.2.628': attribute type 12 has an invalid length. [ 92.672469][ T5627] netlink: 'syz.2.628': attribute type 29 has an invalid length. [ 92.683525][ T5627] netlink: 'syz.2.628': attribute type 3 has an invalid length. [ 92.722032][ T5627] netlink: 'syz.2.628': attribute type 2 has an invalid length. [ 92.817525][ T5628] loop2: detected capacity change from 0 to 128 [ 92.964280][ T5639] loop4: detected capacity change from 0 to 512 [ 92.977725][ T5639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.999278][ T5639] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.633: iget: bad i_size value: 38620345925642 [ 93.043163][ T5645] loop2: detected capacity change from 0 to 1024 [ 93.050378][ T5639] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.050526][ T5639] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.633: couldn't read orphan inode 15 (err -117) [ 93.059741][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 93.059763][ C1] EXT4-fs (loop4): initial error at time 1778606766: ext4_orphan_get:1397: inode 15 [ 93.059799][ C1] EXT4-fs (loop4): last error at time 1778606766: ext4_orphan_get:1397: inode 15 [ 93.109788][ T5639] loop4: lost filesystem error report for type 5 error -117 [ 93.110802][ T5645] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.133387][ T5645] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.635: lblock 8 mapped to illegal pblock 8 (length 1) [ 93.147720][ T5645] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.635: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.168145][ T5645] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.635: lblock 8 mapped to illegal pblock 8 (length 1) [ 93.258204][ T5652] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.406829][ T5652] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.636: lblock 8 mapped to illegal pblock 8 (length 1) [ 93.429139][ T5652] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.636: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.465622][ T5669] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.636: lblock 8 mapped to illegal pblock 8 (length 1) [ 93.616885][ T5678] tmpfs: Bad value for 'size' [ 93.633818][ T5680] tmpfs: Bad value for 'size' [ 94.777083][ T5689] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.825853][ T5689] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.650: lblock 8 mapped to illegal pblock 8 (length 1) [ 94.843701][ T5689] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.650: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 94.908451][ T5689] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 8: comm syz.4.650: lblock 8 mapped to illegal pblock 8 (length 1) [ 95.118396][ T5722] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.3.661: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 95.151355][ T5722] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 95.235614][ T5736] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.3.664: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 95.270931][ T5736] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 95.657998][ T5744] set_capacity_and_notify: 5 callbacks suppressed [ 95.658012][ T5744] loop5: detected capacity change from 0 to 128 [ 95.760737][ T5744] /dev/loop5: Can't open blockdev [ 95.832349][ T5752] loop0: detected capacity change from 0 to 1024 [ 95.861345][ T5752] EXT4-fs mount: 20 callbacks suppressed [ 95.861358][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.905701][ T5752] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.918601][ T5752] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.671: lblock 8 mapped to illegal pblock 8 (length 1) [ 95.950458][ T5752] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.671: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 95.973834][ T5752] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 8: comm syz.0.671: lblock 8 mapped to illegal pblock 8 (length 1) [ 96.079511][ T5764] FAULT_INJECTION: forcing a failure. [ 96.079511][ T5764] name failslab, interval 1, probability 0, space 0, times 0 [ 96.104966][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.120586][ T5764] CPU: 1 UID: 0 PID: 5764 Comm: syz.4.674 Not tainted syzkaller #0 PREEMPT(full) [ 96.120614][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.120626][ T5764] Call Trace: [ 96.120632][ T5764] [ 96.120680][ T5764] __dump_stack+0x1d/0x30 [ 96.120733][ T5764] dump_stack_lvl+0x95/0xd0 [ 96.120752][ T5764] dump_stack+0x15/0x1b [ 96.120787][ T5764] should_fail_ex+0x263/0x280 [ 96.120810][ T5764] should_failslab+0x8c/0xb0 [ 96.120836][ T5764] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 96.120954][ T5764] ? __d_alloc+0x37/0x340 [ 96.120999][ T5764] __d_alloc+0x37/0x340 [ 96.121023][ T5764] d_alloc_parallel+0x54/0xce0 [ 96.121048][ T5764] ? __rcu_read_unlock+0x4e/0x70 [ 96.121069][ T5764] ? __d_lookup+0x316/0x340 [ 96.121173][ T5764] path_openat+0x8b9/0x2050 [ 96.121258][ T5764] do_file_open+0x16c/0x290 [ 96.121297][ T5764] do_sys_openat2+0x94/0x130 [ 96.121363][ T5764] __x64_sys_creat+0x65/0x90 [ 96.121387][ T5764] x64_sys_call+0x2ea0/0x3020 [ 96.121411][ T5764] do_syscall_64+0x12c/0x3b0 [ 96.121503][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.121521][ T5764] RIP: 0033:0x7fb97621cdd9 [ 96.121535][ T5764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.121596][ T5764] RSP: 002b:00007fb974c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 96.121617][ T5764] RAX: ffffffffffffffda RBX: 00007fb976495fa0 RCX: 00007fb97621cdd9 [ 96.121632][ T5764] RDX: 0000000000000000 RSI: d931d3864d39dcca RDI: 0000200000000000 [ 96.121644][ T5764] RBP: 00007fb974c77090 R08: 0000000000000000 R09: 0000000000000000 [ 96.121656][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.121749][ T5764] R13: 00007fb976496038 R14: 00007fb976495fa0 R15: 00007ffd24e1ed58 [ 96.121767][ T5764] [ 96.395638][ T5769] loop5: detected capacity change from 0 to 128 [ 96.406822][ T5770] loop4: detected capacity change from 0 to 512 [ 96.420832][ T5769] vfat: Unknown parameter '' [ 96.519222][ T5770] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 96.531283][ T5770] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 96.551545][ T5770] EXT4-fs (loop4): group descriptors corrupted! [ 96.771626][ T5781] __nla_validate_parse: 22 callbacks suppressed [ 96.771640][ T5781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 96.820522][ T5784] tmpfs: Bad value for 'size' [ 96.870625][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 96.870638][ T28] audit: type=1400 audit(1778606769.828:15925): avc: denied { write } for pid=5786 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.919256][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 96.993016][ T5790] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 97.131128][ T5802] xfrm0 speed is unknown, defaulting to 1000 [ 97.165192][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 97.212852][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 97.222783][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 97.232105][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 97.241152][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 97.730471][ T5813] loop4: detected capacity change from 0 to 2048 [ 97.756300][ T5815] FAULT_INJECTION: forcing a failure. [ 97.756300][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 97.773908][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.0.690 Not tainted syzkaller #0 PREEMPT(full) [ 97.773931][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.773963][ T5815] Call Trace: [ 97.773969][ T5815] [ 97.774027][ T5815] __dump_stack+0x1d/0x30 [ 97.774049][ T5815] dump_stack_lvl+0x95/0xd0 [ 97.774083][ T5815] dump_stack+0x15/0x1b [ 97.774099][ T5815] should_fail_ex+0x263/0x280 [ 97.774121][ T5815] should_failslab+0x8c/0xb0 [ 97.774148][ T5815] __kmalloc_noprof+0xb8/0x4d0 [ 97.774283][ T5815] ? vmalloc_info_show+0x3f/0x860 [ 97.774313][ T5815] vmalloc_info_show+0x3f/0x860 [ 97.774341][ T5815] ? __kvmalloc_node_noprof+0x41c/0x640 [ 97.774361][ T5815] ? traverse+0xa2/0x3a0 [ 97.774384][ T5815] traverse+0x149/0x3a0 [ 97.774455][ T5815] seq_read_iter+0x85f/0x940 [ 97.774476][ T5815] ? _parse_integer+0x27/0x40 [ 97.774493][ T5815] ? kstrtoull+0x111/0x140 [ 97.774513][ T5815] proc_reg_read_iter+0x110/0x180 [ 97.774592][ T5815] do_iter_readv_writev+0x4fd/0x5a0 [ 97.774754][ T5815] vfs_readv+0x1f4/0x6e0 [ 97.774777][ T5815] __x64_sys_preadv+0xfd/0x1c0 [ 97.774805][ T5815] x64_sys_call+0x2915/0x3020 [ 97.774823][ T5815] do_syscall_64+0x12c/0x3b0 [ 97.774879][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.774963][ T5815] RIP: 0033:0x7fdcabb0cdd9 [ 97.774977][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.774992][ T5815] RSP: 002b:00007fdcaa55f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 97.775009][ T5815] RAX: ffffffffffffffda RBX: 00007fdcabd85fa0 RCX: 00007fdcabb0cdd9 [ 97.775020][ T5815] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 97.775031][ T5815] RBP: 00007fdcaa55f090 R08: 0000000000000002 R09: 0000000000000000 [ 97.775070][ T5815] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 97.775080][ T5815] R13: 00007fdcabd86038 R14: 00007fdcabd85fa0 R15: 00007ffed4f00d78 [ 97.775097][ T5815] [ 98.004653][ T5822] tap0: tun_chr_ioctl cmd 1000000 [ 98.010099][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.019321][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.035868][ T5813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.056211][ T5813] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.4.689: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 98.077883][ T28] audit: type=1400 audit(1778606771.008:15926): avc: denied { write } for pid=5812 comm="syz.4.689" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.078500][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.126766][ T5813] EXT4-fs error (device loop4) in ext4_delete_entry:2744: Corrupt filesystem [ 98.139016][ T28] audit: type=1400 audit(1778606771.008:15927): avc: denied { write } for pid=5812 comm="syz.4.689" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.146533][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.204282][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.467367][ T5839] tmpfs: Bad value for 'size' [ 98.493440][ T5843] loop3: detected capacity change from 0 to 128 [ 98.507400][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.696'. [ 98.517153][ T5843] vfat: Unknown parameter '' [ 98.540625][ T5840] loop5: detected capacity change from 0 to 1024 [ 98.553534][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.576386][ T28] audit: type=1400 audit(1778606771.528:15928): avc: denied { write } for pid=5836 comm="syz.5.696" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.577527][ T5840] ext4: Unknown parameter '' [ 98.607575][ T28] audit: type=1400 audit(1778606771.528:15929): avc: denied { remount } for pid=5836 comm="syz.5.696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.676419][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.685424][ T28] audit: type=1400 audit(1778606771.628:15930): avc: denied { nlmsg_read } for pid=5850 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.773305][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.798729][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 98.827853][ T28] audit: type=1326 audit(1778606771.778:15931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcabb0cdd9 code=0x0 [ 98.941814][ T5879] loop2: detected capacity change from 0 to 128 [ 98.958448][ T5879] vfat: Unknown parameter '' [ 99.007198][ T5883] loop5: detected capacity change from 0 to 512 [ 99.039926][ T5883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.057254][ T5887] loop2: detected capacity change from 0 to 512 [ 99.064095][ T5887] EXT4-fs: Ignoring removed oldalloc option [ 99.070194][ T5887] EXT4-fs: Ignoring removed nobh option [ 99.076155][ T5883] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 99.084116][ T5887] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.713: iget: bad extra_isize 90 (inode size 256) [ 99.099135][ T5887] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.099550][ T5887] EXT4-fs (loop2): Remounting filesystem read-only [ 99.115226][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 99.115245][ C1] EXT4-fs (loop2): initial error at time 1778606772: ext4_xattr_inode_iget:441: inode 11 [ 99.115282][ C1] EXT4-fs (loop2): last error at time 1778606772: ext4_xattr_inode_iget:441: inode 11 [ 99.234976][ T5887] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 99.252755][ T5889] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 99.269091][ T5889] EXT4-fs (loop3): mount failed [ 99.275323][ T5883] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.355185][ T5883] ext4 filesystem being remounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.396539][ T5894] tmpfs: Bad value for 'size' [ 99.402180][ T5887] EXT4-fs (loop2): 1 orphan inode deleted [ 99.411999][ T5887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.467641][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.581198][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.832083][ T3288] ================================================================== [ 100.840174][ T3288] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 100.848390][ T3288] [ 100.850689][ T3288] read to 0xffff88810295d788 of 2 bytes by interrupt on cpu 1: [ 100.858203][ T3288] virtqueue_disable_cb+0x4c/0x2c0 [ 100.863292][ T3288] skb_xmit_done+0x67/0x1a0 [ 100.867774][ T3288] vring_interrupt+0x2d7/0x310 [ 100.872515][ T3288] __handle_irq_event_percpu+0x8b/0x480 [ 100.878038][ T3288] handle_irq_event+0x64/0xf0 [ 100.882694][ T3288] handle_edge_irq+0x154/0x450 [ 100.887432][ T3288] __common_interrupt+0x60/0xb0 [ 100.892260][ T3288] common_interrupt+0x7e/0x90 [ 100.896918][ T3288] asm_common_interrupt+0x26/0x40 [ 100.901925][ T3288] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 100.907540][ T3288] __unix_dgram_recvmsg+0x3a7/0x870 [ 100.912720][ T3288] unix_dgram_recvmsg+0x7e/0x90 [ 100.917542][ T3288] sock_recvmsg_nosec+0xc2/0xf0 [ 100.922370][ T3288] ____sys_recvmsg+0x26f/0x280 [ 100.927112][ T3288] ___sys_recvmsg+0x11f/0x3b0 [ 100.931765][ T3288] do_recvmmsg+0x1ef/0x560 [ 100.936159][ T3288] __x64_sys_recvmmsg+0xe5/0x170 [ 100.941071][ T3288] x64_sys_call+0x80f/0x3020 [ 100.945641][ T3288] do_syscall_64+0x12c/0x3b0 [ 100.950211][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.956080][ T3288] [ 100.958379][ T3288] write to 0xffff88810295d788 of 2 bytes by task 3288 on cpu 0: [ 100.965980][ T3288] virtqueue_disable_cb+0x75/0x2c0 [ 100.971069][ T3288] start_xmit+0x107/0x1a60 [ 100.975459][ T3288] dev_hard_start_xmit+0x12a/0x3a0 [ 100.980554][ T3288] sch_direct_xmit+0x192/0x550 [ 100.985295][ T3288] __dev_queue_xmit+0xdb9/0x1ec0 [ 100.990208][ T3288] ip_finish_output2+0x705/0x8c0 [ 100.995121][ T3288] ip_finish_output+0x112/0x290 [ 100.999962][ T3288] ip_output+0xbd/0x1c0 [ 101.004110][ T3288] __ip_queue_xmit+0xb68/0xba0 [ 101.008855][ T3288] ip_queue_xmit+0x39/0x50 [ 101.013264][ T3288] __tcp_transmit_skb+0x1c2a/0x20b0 [ 101.018440][ T3288] __tcp_send_ack+0x288/0x3b0 [ 101.023097][ T3288] tcp_send_ack+0x29/0x30 [ 101.027403][ T3288] __tcp_cleanup_rbuf+0x15a/0x290 [ 101.032401][ T3288] tcp_recvmsg_locked+0x1c41/0x2160 [ 101.037576][ T3288] tcp_recvmsg+0x12a/0x460 [ 101.041968][ T3288] inet_recvmsg+0x8d/0x210 [ 101.046367][ T3288] sock_recvmsg+0xda/0x120 [ 101.050778][ T3288] sock_read_iter+0x169/0x1b0 [ 101.055433][ T3288] vfs_read+0x6c0/0x7f0 [ 101.059567][ T3288] ksys_read+0xdc/0x1a0 [ 101.063711][ T3288] __x64_sys_read+0x40/0x50 [ 101.068192][ T3288] x64_sys_call+0x2886/0x3020 [ 101.072845][ T3288] do_syscall_64+0x12c/0x3b0 [ 101.077414][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.083282][ T3288] [ 101.085582][ T3288] value changed: 0x0000 -> 0x0001 [ 101.090574][ T3288] [ 101.092872][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 101.098999][ T3288] CPU: 0 UID: 0 PID: 3288 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.108441][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.118473][ T3288] ================================================================== [ 101.208634][ T5930] set_capacity_and_notify: 1 callbacks suppressed [ 101.208661][ T5930] loop3: detected capacity change from 0 to 512 [ 101.239505][ T5929] loop2: detected capacity change from 0 to 1024 [ 101.259984][ T5930] ext4: Unknown parameter 'noacl' [ 101.348652][ T28] audit: type=1400 audit(1778606774.288:15932): avc: denied { write } for pid=5912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.386409][ T28] audit: type=1400 audit(1778606774.338:15933): avc: denied { write } for pid=5932 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.410035][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.422456][ T5929] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.448200][ T28] audit: type=1400 audit(1778606774.398:15934): avc: denied { write } for pid=5926 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.478361][ T5929] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.719: lblock 8 mapped to illegal pblock 8 (length 1) [ 101.492767][ T5929] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.719: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 101.511505][ T5929] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 8: comm syz.2.719: lblock 8 mapped to illegal pblock 8 (length 1) [ 101.565765][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.