last executing test programs: 2m21.460815073s ago: executing program 3 (id=105): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x760, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x69}, 0x11ece8, 0x1224, 0xfffffffb, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="29000000001900000000000d0000000000000000c8e31555c1605c9f0a8c6a5de5502d64afb81c53de91cf441860220820c163554ebe773a3a9b02c436e88fac20a6310a1b6235e31907752f3c544bd9e29ed69794acfb39f96dd3b097ae817e42f8ad80b893a092ec4d2b8771aef965d5fdff28e726cac25d496677b15cc308b7f50f7ac70423c9cee0491e039da6bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000240)="89221bbac1bd4c686f5d4741f7f3a962a695c091db8c07c95a757695422782033f6d7a98fca9bf45671b17384193af016c7a17d03cf04ee01c12c88a13b9b006005656e630d6efa18e137b35776a694f42d81d0a307fd9df3fc0fdc3632af248625165a53db06b0315bbeabeb04f15ab1b5c30c22504daf13efe3b2a1f045a4659f3b19adf3f8ecf39468340af26216deccd5be83d26790d745fb7e66c3af672bb3c22fbbfdc8ec2c3", &(0x7f0000000300)=""/119}, 0x20) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000400000001000000090000003c0003800800030000000000140002007663616e300000000000000000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1db3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-010d \x00'}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r12, r12}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x1, 0x3, 0xb, 0xfffffffffffffff8, 0x10}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f00000003c0)='GPL\x00', 0x8001, 0xc3, &(0x7f0000000400)=""/195, 0x41100, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x9f, 0x100}, 0x10, r7, 0x0, 0x7, &(0x7f0000000a00)=[r0, r3, r3, r10, r3, r0, r11, r12, r3, r3], &(0x7f0000000a40)=[{0x1, 0x1, 0x6, 0x7}, {0x4, 0x4, 0x7, 0x64ecadcc9f3b9ebb}, {0x2, 0x2, 0x4, 0x8}, {0x0, 0x1, 0x10, 0x1}, {0x4, 0x2, 0x2, 0x8}, {0x1, 0x4, 0x1, 0x6}, {0x5, 0x3, 0x8, 0x8}], 0x10, 0x1}, 0x94) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2m21.378847914s ago: executing program 3 (id=108): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m21.331692576s ago: executing program 3 (id=110): io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r7) socket$inet(0x2, 0x2, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x6, 0x0) 2m20.393449236s ago: executing program 3 (id=116): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d"], 0xfe33) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x401}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5a}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x4, 0x2}, {0xa, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc011}, 0x4000010) sendmsg$inet(r1, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @private=0xa010100}}}, @ip_ttl={{0xfffffffffffffe1a, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x555}}], 0x80}, 0x404080d) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m19.912048616s ago: executing program 3 (id=124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x12, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e21, 0x80, 0x1, 0x0, 0xa, 0xe0, 0x80, 0xff}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m18.870015178s ago: executing program 3 (id=131): socket$inet(0x2, 0x3, 0x4) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r1, 0x10, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x67, 0x0, 0x0, 0xb5, 0x80020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20044840) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1216a93272c3b490}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) 2m18.846167469s ago: executing program 32 (id=131): socket$inet(0x2, 0x3, 0x4) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r1, 0x10, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x67, 0x0, 0x0, 0xb5, 0x80020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20044840) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1216a93272c3b490}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) 3.671167881s ago: executing program 4 (id=975): r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, @perf_config_ext={0x101, 0x88f}, 0x90, 0x0, 0xb2f, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000001c0)={{0x7}, 0x79}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x880) io_uring_setup(0xd3f, &(0x7f0000000080)={0x0, 0x8a8, 0x80, 0x2, 0x11a}) syz_clone(0x1000000, &(0x7f0000000000), 0x0, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206010800000000000000000000000a0c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) 3.498848325s ago: executing program 4 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000200) r1 = inotify_init1(0x80800) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10188, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4100000000, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2024, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, &(0x7f0000000c80)={0xc, 0x5, 0x3ff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) flock(0xffffffffffffffff, 0xc) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10102, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x44e8, &(0x7f0000000180), 0x2, 0x78a, &(0x7f0000001740)="$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") ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000001c0)={r4, &(0x7f0000000000)='ext4\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0xfffffff9, 0x6f]}, {0x200, 0x8, 0xc2, 0x9}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x7}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) r6 = getpid() ptrace$setregs(0xd, r6, 0x10001, &(0x7f0000001340)) prlimit64(r6, 0xb, 0x0, 0x0) 2.239464142s ago: executing program 4 (id=985): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x0, 0x8000005}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 2.041255436s ago: executing program 2 (id=988): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0xa866, 0x800a}, {0xeb4, 0xa207}, 0x10000004, 0x7}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x849f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00060000000000000200000000", 0x58}], 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0xffffffffffffffff, &(0x7f00000000c0)) 1.670663404s ago: executing program 1 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x2000000, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 1.598709805s ago: executing program 1 (id=990): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000006c0)={0xa28, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x36c, 0x8, 0x0, 0x1, [{0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x6a0, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df915201e2311f9ba239c654d62088d86d75fd0f8fda94c6416b98b573bc428b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xbb4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb513}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @local, 0x1}}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "49bfb81ca738b2bc60f4e1235784c036f95f8a11720c5e506dfb05c77c864316"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd74}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "902a64010b0d86855157f5a56d8d579ea84a6e53a0b1a9fb9c7a012fcd1209e3"}]}, {0x4f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3d4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b9b0729c5b2f8d57fc06281b82274674c2331cb02a66cb0b5a227b8f7d65e1c5"}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xa28}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) 1.593366745s ago: executing program 1 (id=991): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x401f, 0x285e0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x5accd6c9, 0x2}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) preadv(r0, 0x0, 0x0, 0x2de, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000680)=""/263, 0x107}], 0x1, &(0x7f0000000280)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0xfa}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x7, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.592699085s ago: executing program 2 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000d000300686173a5ad04c974000000000500010006000000050005000200000005000100000000000000020073797a310000000014000782080013400000000408000640000001250345ea7a11ba7a85a9a244cb365421dbf966bf4335988e98a3794b99c6818439f1de83dfeecfd61fb4e2c668d15dba96eba542b588c14bda2b3bfd9ac59242c05cbf429cb701598c6397f1b21def059ca605d93fa2e21237db77f1411884ab8f032afc981ac4eafb5c7913114edd8f1c75e994d6774959d4e31956461532e1d059fd9d5f55cf5c81b7201a8152231e905abffcec2760c67160ada42c2e040d340d0020c64ee29585b92e12f6b2e6660d5e04dbea77fa30c6df800eb579748c067cf8dd61dc58255440612cf19cf37e9f243dfe54a5755cb802934d2ee5e5ef5f1dac08e8fd42f263f6ddc24aae254dcd3b"], 0x5c}}, 0xc000) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0) fcntl$setlease(r9, 0x406, 0x3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x2b, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x1026c0, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0x82000008, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.536835717s ago: executing program 5 (id=994): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 1.536570137s ago: executing program 4 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000300", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1.502040978s ago: executing program 5 (id=996): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800b5d7acc10bd58c27df251c14"], 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 1.468780178s ago: executing program 2 (id=998): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) sendfile(r1, r0, 0x0, 0xbc44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x4, 0x3, 0x3, 0x5, 0x333, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x361, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x204, 0x10, 0xce1, 0x400}]}, 0x58) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x40}}, 0x1) 1.334715561s ago: executing program 5 (id=999): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0x2c982) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x17, r3, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") get_mempolicy(&(0x7f00000000c0), &(0x7f0000000200), 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.048650337s ago: executing program 5 (id=1005): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x133142, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000002000/0x5000)=nil, 0x5000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000001840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x6c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9000}, 0x20000844) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x21, &(0x7f0000001880)=ANY=[@ANYBLOB="1800ea0000000000001600000000000024c90e66dee3a1696b39ff69d907fee495d412e4fc5ea20000000000000000cb19bb84e6687aae2524ac", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff85000000060000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005a030000850000000600000018370000050000000000000000000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd25, 0x25dfdc01, {0xa, 0x0, 0x80, 0x5, 0x69, 0x0, 0x0, 0x0, 0x10002}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c814}, 0x20004004) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x3ec, 0x200, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x4000004) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xc, 0x0, 0x4, 0x1000000000000}) 718.463664ms ago: executing program 1 (id=1010): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x11, 0x148, 0x260, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) 642.653536ms ago: executing program 5 (id=1012): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000006c0)={0xa28, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x36c, 0x8, 0x0, 0x1, [{0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x6a0, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df915201e2311f9ba239c654d62088d86d75fd0f8fda94c6416b98b573bc428b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xbb4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb513}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @local, 0x1}}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "49bfb81ca738b2bc60f4e1235784c036f95f8a11720c5e506dfb05c77c864316"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd74}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "902a64010b0d86855157f5a56d8d579ea84a6e53a0b1a9fb9c7a012fcd1209e3"}]}, {0x4f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3d4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b9b0729c5b2f8d57fc06281b82274674c2331cb02a66cb0b5a227b8f7d65e1c5"}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xa28}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) 631.699536ms ago: executing program 0 (id=1013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x760, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x69}, 0x11ece8, 0x1224, 0xfffffffb, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 627.026437ms ago: executing program 1 (id=1014): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x35, 0x6, 0x8, 0x6, 0x6, 0x2400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x8dffffffffffffff) 571.160578ms ago: executing program 2 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000300", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 567.633548ms ago: executing program 1 (id=1016): io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r7) socket$inet(0x2, 0x2, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x6, 0x0) 567.307508ms ago: executing program 5 (id=1017): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x80ffffff, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x2c000010) 406.363701ms ago: executing program 0 (id=1018): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 404.247561ms ago: executing program 4 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x4800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc, 0x75}, 0x0, 0x0, 0x0, 0x3, 0xffc, 0x8001, 0x8000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x1a0, 0xfeffffff, 0x1a0, 0x248, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0x7fff}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x7}, {0x9, 0x3}, {0x1, 0x3}]}]}}, &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x9, 0x32e}, 0x28) 403.874621ms ago: executing program 0 (id=1020): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000000180000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x204c000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x18, 0x1000) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xfb) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x23}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r5}, @clear_death, @decrefs={0x40046307, 0x1}, @release, @register_looper, @dead_binder_done, @request_death={0x400c630e, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f0000000580)="0eeccbb4167d49791c9b55668faa78572815c5f3a7c5c0f392f5474e8a47486e4b9821fef57eb164f03b23d13bb5ad312b183fc811b2436f577a4b2921b6315756"}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0xd, 0x1, 0x43, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x786, 0x8000, 0x80000000, 0xf}}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30000001}, 0x4080) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000033000701fcffffff0000000001"], 0x28}, 0x1, 0x0, 0x0, 0x24008895}, 0x404c010) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 188.539006ms ago: executing program 0 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800b5d7acc10bd58c27df251c14"], 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 150.253906ms ago: executing program 0 (id=1022): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000000180000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x204c000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x18, 0x1000) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xfb) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x23}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r5}, @clear_death, @decrefs={0x40046307, 0x1}, @release, @register_looper, @dead_binder_done, @request_death={0x400c630e, 0x3}, @enter_looper], 0x41, 0x0, &(0x7f0000000580)="0eeccbb4167d49791c9b55668faa78572815c5f3a7c5c0f392f5474e8a47486e4b9821fef57eb164f03b23d13bb5ad312b183fc811b2436f577a4b2921b6315756"}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0xd, 0x1, 0x43, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x786, 0x8000, 0x80000000, 0xf}}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30000001}, 0x4080) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000033000701fcffffff0000000001"], 0x28}, 0x1, 0x0, 0x0, 0x24008895}, 0x404c010) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 0s ago: executing program 0 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000000000000) kernel console output (not intermixed with test programs): [ 103.260029][ T5035] EXT4-fs (loop2): inodes count not valid: 76 vs 32 [ 103.980822][ T28] audit: type=1400 audit(3930723734.071:542): avc: denied { append } for pid=5037 comm="syz.0.401" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.039399][ T5038] vlan2: entered promiscuous mode [ 104.054359][ T5038] macvlan0: entered promiscuous mode [ 104.138581][ T5051] netlink: 104 bytes leftover after parsing attributes in process `syz.5.407'. [ 104.233664][ T5064] loop2: detected capacity change from 0 to 764 [ 104.256239][ T5064] rock: directory entry would overflow storage [ 104.267126][ T5064] rock: sig=0x5245, size=8, remaining=5 [ 104.313973][ T5067] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 104.313973][ T5067] Please contact the netfilter-devel mailing list or update your nftables rules. [ 104.384354][ T5069] FAULT_INJECTION: forcing a failure. [ 104.384354][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.450311][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.5.412 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 104.450391][ T5069] Tainted: [W]=WARN [ 104.450399][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.450414][ T5069] Call Trace: [ 104.450422][ T5069] [ 104.450504][ T5069] __dump_stack+0x1d/0x30 [ 104.450532][ T5069] dump_stack_lvl+0x95/0xd0 [ 104.450606][ T5069] dump_stack+0x15/0x1b [ 104.450625][ T5069] should_fail_ex+0x25e/0x270 [ 104.450655][ T5069] should_fail+0xb/0x20 [ 104.450743][ T5069] should_fail_usercopy+0x1a/0x20 [ 104.450778][ T5069] _copy_from_user+0x1c/0xb0 [ 104.450849][ T5069] ___sys_sendmsg+0xc1/0x1e0 [ 104.450887][ T5069] __x64_sys_sendmsg+0xd4/0x160 [ 104.450924][ T5069] x64_sys_call+0x194c/0x3020 [ 104.450965][ T5069] do_syscall_64+0x136/0x3c0 [ 104.450996][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.451021][ T5069] RIP: 0033:0x7fb5ca77de59 [ 104.451039][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.451087][ T5069] RSP: 002b:00007fb5c91d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.451110][ T5069] RAX: ffffffffffffffda RBX: 00007fb5caa05fa0 RCX: 00007fb5ca77de59 [ 104.451127][ T5069] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 104.451140][ T5069] RBP: 00007fb5c91d7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.451153][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.451165][ T5069] R13: 00007fb5caa06038 R14: 00007fb5caa05fa0 R15: 00007fff5fe445e8 [ 104.451183][ T5069] [ 104.657982][ T5075] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 104.910618][ T28] audit: type=1400 audit(3930723735.001:543): avc: denied { execute } for pid=5080 comm="syz.0.415" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 104.936782][ T28] audit: type=1400 audit(3930723735.001:544): avc: denied { connect } for pid=5080 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.985990][ T28] audit: type=1400 audit(3930723735.001:545): avc: denied { read } for pid=5080 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.755529][ T28] audit: type=1400 audit(3930723735.851:546): avc: denied { getopt } for pid=5080 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.791013][ T28] audit: type=1400 audit(3930723736.881:547): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.871255][ T5091] loop2: detected capacity change from 0 to 512 [ 107.033193][ T5094] program syz.0.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.309824][ T5091] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.416: ea_inode file size=458758 entry size=16777216 [ 108.337538][ T5105] loop5: detected capacity change from 0 to 8192 [ 108.360934][ T5105] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.421056][ T5105] vfat filesystem being mounted at /51/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 108.436864][ T5091] EXT4-fs (loop2): 1 orphan inode deleted [ 108.550439][ T5091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.724242][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.751445][ T5112] syzkaller0: entered promiscuous mode [ 108.771067][ T5112] syzkaller0: entered allmulticast mode [ 109.054089][ T5125] loop4: detected capacity change from 0 to 764 [ 109.073203][ T5125] rock: directory entry would overflow storage [ 109.083609][ T5125] rock: sig=0x5245, size=8, remaining=5 [ 109.191945][ T28] audit: type=1400 audit(3930723739.281:548): avc: denied { setopt } for pid=5126 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.466511][ T28] audit: type=1400 audit(3930723739.561:549): avc: denied { create } for pid=5129 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 111.464053][ T5159] loop4: detected capacity change from 0 to 8192 [ 111.832538][ T5159] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.884535][ T5159] vfat filesystem being mounted at /56/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 112.051743][ T5172] syzkaller0: entered promiscuous mode [ 112.057423][ T5172] syzkaller0: entered allmulticast mode [ 112.076881][ T5172] FAULT_INJECTION: forcing a failure. [ 112.076881][ T5172] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 112.099038][ T5172] CPU: 0 UID: 0 PID: 5172 Comm: syz.1.437 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 112.099162][ T5172] Tainted: [W]=WARN [ 112.099171][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.099186][ T5172] Call Trace: [ 112.099192][ T5172] [ 112.099201][ T5172] __dump_stack+0x1d/0x30 [ 112.099227][ T5172] dump_stack_lvl+0x95/0xd0 [ 112.099284][ T5172] dump_stack+0x15/0x1b [ 112.099380][ T5172] should_fail_ex+0x25e/0x270 [ 112.099412][ T5172] should_fail_alloc_page+0xf2/0x100 [ 112.099441][ T5172] __alloc_frozen_pages_noprof+0x108/0x350 [ 112.099602][ T5172] alloc_pages_mpol+0xa9/0x1d0 [ 112.099645][ T5172] alloc_pages_noprof+0x8f/0x140 [ 112.099679][ T5172] alloc_skb_with_frags+0x1c9/0x3d0 [ 112.099713][ T5172] sock_alloc_send_pskb+0x44d/0x500 [ 112.099795][ T5172] ? __rcu_read_unlock+0x4e/0x70 [ 112.099894][ T5172] packet_sendmsg+0xd37/0x3210 [ 112.099928][ T5172] ? avc_has_perm_noaudit+0xa3/0x120 [ 112.100001][ T5172] ? avc_has_perm+0x101/0x190 [ 112.100028][ T5172] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 112.100060][ T5172] ? __pfx_packet_sendmsg+0x10/0x10 [ 112.100092][ T5172] ____sys_sendmsg+0x532/0x580 [ 112.100186][ T5172] ___sys_sendmsg+0x195/0x1e0 [ 112.100229][ T5172] __x64_sys_sendmsg+0xd4/0x160 [ 112.100298][ T5172] x64_sys_call+0x194c/0x3020 [ 112.100326][ T5172] do_syscall_64+0x136/0x3c0 [ 112.100364][ T5172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.100394][ T5172] RIP: 0033:0x7f133fe8de59 [ 112.100418][ T5172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.100438][ T5172] RSP: 002b:00007f133e8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.100457][ T5172] RAX: ffffffffffffffda RBX: 00007f1340115fa0 RCX: 00007f133fe8de59 [ 112.100471][ T5172] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 112.100484][ T5172] RBP: 00007f133e8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.100497][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.100537][ T5172] R13: 00007f1340116038 R14: 00007f1340115fa0 R15: 00007ffd315e54c8 [ 112.100560][ T5172] [ 112.693607][ T5168] usb usb8: usbfs: process 5168 (syz.0.435) did not claim interface 0 before use [ 112.717554][ T28] audit: type=1400 audit(3930723742.801:550): avc: denied { accept } for pid=5163 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.902503][ T28] audit: type=1400 audit(3930723742.991:551): avc: denied { create } for pid=5181 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.924400][ T5188] pim6reg: entered allmulticast mode [ 112.934330][ T5190] pim6reg: left allmulticast mode [ 113.023121][ T5188] loop2: detected capacity change from 0 to 256 [ 113.059708][ T28] audit: type=1400 audit(3930723743.121:552): avc: denied { remount } for pid=5187 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.108354][ T28] audit: type=1400 audit(3930723743.191:553): avc: denied { execute } for pid=5187 comm="syz.2.443" path="/110/file1" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.170305][ T5188] loop2: detected capacity change from 0 to 512 [ 113.194061][ T5195] loop0: detected capacity change from 0 to 512 [ 113.214788][ T5195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.236436][ T5195] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.445: corrupted xattr entries [ 113.254194][ T5195] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.254325][ T5195] EXT4-fs (loop0): Remounting filesystem read-only [ 113.263505][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 113.263541][ C1] EXT4-fs (loop0): initial error at time 3930723743: xattr_find_entry:337: inode 15 [ 113.263575][ C1] EXT4-fs (loop0): last error at time 3930723743: xattr_find_entry:337: inode 15 [ 113.296941][ T5195] EXT4-fs (loop0): 1 truncate cleaned up [ 113.300215][ T5188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.303295][ T5195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.319895][ T5188] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.338020][ T28] audit: type=1400 audit(3930723743.421:554): avc: denied { create } for pid=5200 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.431850][ T5203] loop5: detected capacity change from 0 to 512 [ 113.446793][ T5203] EXT4-fs: Ignoring removed nobh option [ 113.467328][ T5203] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.485902][ T5203] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.447: EA inode hash validation failed [ 113.498858][ T5203] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.513229][ T5203] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.447: corrupted inode contents [ 113.525714][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.525954][ T5203] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.447: mark_inode_dirty error [ 113.535218][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 113.535241][ C0] EXT4-fs (loop5): initial error at time 3930723743: ext4_do_update_inode:5742: inode 15 [ 113.535277][ C0] EXT4-fs (loop5): last error at time 3930723743: ext4_do_update_inode:5742: inode 15 [ 113.573064][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.576794][ T5203] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.447: corrupted inode contents [ 113.599433][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.600147][ T5203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.447: mark_inode_dirty error [ 113.621091][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.621246][ T5203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.447: mark inode dirty (error -117) [ 113.642758][ T5203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.644119][ T5203] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 113.662330][ T5203] EXT4-fs (loop5): 1 orphan inode deleted [ 113.668359][ T5203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.681634][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.719019][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.742144][ T5212] loop1: detected capacity change from 0 to 256 [ 113.766353][ T5212] vfat filesystem being mounted at /103/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 113.780466][ T5210] loop0: detected capacity change from 0 to 8192 [ 113.788560][ T5210] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.799785][ T5210] vfat filesystem being mounted at /95/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 113.925283][ T5221] netlink: 'syz.0.454': attribute type 5 has an invalid length. [ 113.935410][ T5221] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 113.944784][ T5221] team0: Failed to send options change via netlink (err -105) [ 113.952407][ T5221] team0: Port device dummy0 added [ 113.958090][ T5221] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 113.966390][ T5221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.018836][ T28] audit: type=1400 audit(3930723744.031:555): avc: denied { getopt } for pid=5220 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.333129][ T5222] xt_l2tp: invalid flags combination: 0 [ 114.442305][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.456424][ T5221] team0: Failed to send options change via netlink (err -105) [ 114.466798][ T5221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.476004][ T5221] team0: Port device dummy0 removed [ 114.487310][ T28] audit: type=1400 audit(3930723744.581:556): avc: denied { ioctl } for pid=5229 comm="syz.4.457" path="socket:[9849]" dev="sockfs" ino=9849 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.489331][ T5221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.520657][ T28] audit: type=1400 audit(3930723744.601:557): avc: denied { map } for pid=5229 comm="syz.4.457" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 114.544843][ T28] audit: type=1400 audit(3930723744.601:558): avc: denied { create } for pid=5229 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.573729][ T28] audit: type=1400 audit(3930723744.601:559): avc: denied { getopt } for pid=5229 comm="syz.4.457" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.604216][ T5236] loop2: detected capacity change from 0 to 512 [ 114.611514][ T5236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.623610][ T5236] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.459: corrupted xattr entries [ 114.635091][ T5236] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.635276][ T5236] EXT4-fs (loop2): Remounting filesystem read-only [ 114.644432][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 114.644454][ C0] EXT4-fs (loop2): initial error at time 3930723744: xattr_find_entry:337: inode 15 [ 114.644479][ C0] EXT4-fs (loop2): last error at time 3930723744: xattr_find_entry:337: inode 15 [ 114.681740][ T5236] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.694998][ T5236] EXT4-fs (loop2): 1 truncate cleaned up [ 114.711217][ T5236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.323459][ T5247] loop4: detected capacity change from 0 to 164 [ 115.404837][ T5247] rock: directory entry would overflow storage [ 115.411760][ T5247] rock: sig=0x4f50, size=4, remaining=3 [ 115.418377][ T5247] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 115.753417][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.838891][ T5259] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 115.864158][ T5257] pim6reg: entered allmulticast mode [ 115.885489][ T5255] syzkaller0: entered promiscuous mode [ 115.891029][ T5255] syzkaller0: entered allmulticast mode [ 115.911961][ T5260] pim6reg: left allmulticast mode [ 115.967072][ T5257] loop5: detected capacity change from 0 to 256 [ 116.778069][ T5257] loop5: detected capacity change from 0 to 512 [ 116.818660][ T5273] loop1: detected capacity change from 0 to 512 [ 117.010454][ T5273] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.020294][ T5273] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 117.030645][ T5273] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.470: inode #15: comm syz.1.470: iget: illegal inode # [ 117.033557][ T5272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.045386][ T5273] loop1: lost filesystem error report for type 5 error -117 [ 117.049864][ T5273] EXT4-fs (loop1): Remounting filesystem read-only [ 117.057277][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 117.057294][ C0] EXT4-fs (loop1): initial error at time 3930723747: ext4_orphan_get:1399 [ 117.057319][ C0] EXT4-fs (loop1): last error at time 3930723747: ext4_orphan_get:1399 [ 117.093126][ T5272] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.104598][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.130636][ T5272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.138275][ T5257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.171471][ T5257] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.213431][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.263771][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.289269][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.322422][ T5272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.347182][ T5272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.360044][ T5272] veth1_vlan: left promiscuous mode [ 117.366101][ T5272] veth0_vlan: left promiscuous mode [ 117.373097][ T5272] veth0_vlan: entered promiscuous mode [ 117.379957][ T5272] veth1_vlan: entered promiscuous mode [ 117.389743][ T5272] veth1_macvtap: left promiscuous mode [ 117.395975][ T5272] veth0_macvtap: left promiscuous mode [ 117.402155][ T5272] veth0_macvtap: entered promiscuous mode [ 117.408814][ T5272] veth1_macvtap: entered promiscuous mode [ 117.419673][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.428417][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.436824][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.445663][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.462115][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.469278][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.503447][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.510543][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.539877][ T3432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.548870][ T3432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.559435][ T3432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.568675][ T3432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.862093][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.949817][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 117.949831][ T28] audit: type=1400 audit(3930723748.041:566): avc: denied { write } for pid=5281 comm="syz.2.474" lport=42694 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 118.106140][ T5295] loop4: detected capacity change from 0 to 256 [ 118.129871][ T5295] vfat filesystem being mounted at /63/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 119.206578][ T28] audit: type=1326 audit(3930723749.301:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 119.449428][ T28] audit: type=1326 audit(3930723749.311:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.228173][ T28] audit: type=1326 audit(3930723749.321:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.520223][ T28] audit: type=1326 audit(3930723749.321:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.545768][ T28] audit: type=1326 audit(3930723749.321:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.709372][ T28] audit: type=1326 audit(3930723749.321:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.734735][ T28] audit: type=1326 audit(3930723749.321:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.760066][ T28] audit: type=1326 audit(3930723749.321:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 120.793541][ T28] audit: type=1326 audit(3930723749.321:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f198198de59 code=0x7ffc0000 [ 121.119142][ T5340] xt_l2tp: invalid flags combination: 0 [ 121.740199][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 121.881691][ T5362] loop2: detected capacity change from 0 to 764 [ 121.948042][ T5362] rock: directory entry would overflow storage [ 121.957639][ T5362] rock: sig=0x5245, size=8, remaining=5 [ 124.877014][ T5376] loop5: detected capacity change from 0 to 512 [ 124.889443][ T5374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.499'. [ 124.903231][ T5376] EXT4-fs: inline encryption not supported [ 124.992895][ T5376] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.019273][ T5376] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 125.049380][ T5376] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349) [ 125.060509][ T5376] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.500: Invalid inode table block 1 in block_group 0 [ 125.085386][ T5376] loop5: lost filesystem error report for type 5 error -117 [ 125.102819][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.116632][ C0] EXT4-fs (loop5): initial error at time 3930723755: __ext4_get_inode_loc:4886 [ 125.125627][ C0] EXT4-fs (loop5): last error at time 3930723755: __ext4_get_inode_loc:4886 [ 125.138883][ T5376] EXT4-fs (loop5): get root inode failed [ 125.146137][ T5376] EXT4-fs (loop5): mount failed [ 125.211360][ T5394] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 125.225057][ T5394] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 125.232735][ T5394] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.244929][ T5389] xt_l2tp: invalid flags combination: 0 [ 125.412971][ T5403] loop2: detected capacity change from 0 to 7 [ 126.999326][ T5420] netlink: 'syz.5.514': attribute type 58 has an invalid length. [ 127.350551][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.514'. [ 127.498542][ T5424] loop4: detected capacity change from 0 to 128 [ 127.582032][ T5424] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.631234][ T5424] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.682040][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 127.682063][ T28] audit: type=1400 audit(3930723757.771:637): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.759493][ T5422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.515'. [ 127.807604][ T28] audit: type=1400 audit(3930723757.821:638): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.854781][ T5422] can: request_module (can-proto-0) failed. [ 127.899033][ T28] audit: type=1400 audit(3930723757.831:639): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.985309][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.003008][ T28] audit: type=1400 audit(3930723757.831:640): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.082476][ T5435] loop4: detected capacity change from 0 to 764 [ 128.105442][ T28] audit: type=1400 audit(3930723757.831:641): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.133164][ T5435] rock: directory entry would overflow storage [ 128.145710][ T5435] rock: sig=0x5245, size=8, remaining=5 [ 128.178718][ T28] audit: type=1400 audit(3930723757.841:642): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.227903][ T28] audit: type=1400 audit(3930723757.841:643): avc: denied { write } for pid=5421 comm="syz.4.515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.274129][ T28] audit: type=1400 audit(3930723757.841:644): avc: denied { remove_name } for pid=5421 comm="syz.4.515" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.364539][ T28] audit: type=1326 audit(3930723758.151:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.0.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 128.424433][ T28] audit: type=1326 audit(3930723758.151:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.0.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 128.635160][ T5441] loop2: detected capacity change from 0 to 512 [ 128.665615][ T5441] EXT4-fs: inline encryption not supported [ 128.726411][ T5447] loop4: detected capacity change from 0 to 512 [ 128.767158][ T5441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.825784][ T5441] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 128.848982][ T5441] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (28928!=33349) [ 129.821109][ T5441] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.519: Invalid inode table block 1 in block_group 0 [ 129.834290][ T5441] loop2: lost filesystem error report for type 5 error -117 [ 129.834483][ T5441] EXT4-fs (loop2): get root inode failed [ 129.847440][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 129.847466][ C0] EXT4-fs (loop2): initial error at time 3930723759: __ext4_get_inode_loc:4886 [ 129.847502][ C0] EXT4-fs (loop2): last error at time 3930723759: __ext4_get_inode_loc:4886 [ 130.044255][ T5441] EXT4-fs (loop2): mount failed [ 130.869088][ T5463] loop1: detected capacity change from 0 to 128 [ 131.106600][ T5463] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.845876][ T5463] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.880257][ T5475] xt_l2tp: missing protocol rule (udp|l2tpip) [ 131.967008][ T5463] netlink: 44 bytes leftover after parsing attributes in process `syz.1.527'. [ 132.012768][ T5463] can: request_module (can-proto-0) failed. [ 132.600413][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.842898][ T5487] loop4: detected capacity change from 0 to 8192 [ 132.873211][ T5487] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.941686][ T5487] vfat filesystem being mounted at /80/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 133.036628][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 133.036643][ T28] audit: type=1326 audit(3930723763.131:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 133.266402][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.439590][ T5487] FAT-fs (loop4): Filesystem has been set read-only [ 133.745197][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.808533][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.863611][ T28] audit: type=1326 audit(3930723763.131:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 133.889488][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.900527][ T28] audit: type=1326 audit(3930723763.131:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 134.027898][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 134.041760][ T28] audit: type=1326 audit(3930723763.131:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 134.884316][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 134.911227][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 134.986819][ T28] audit: type=1326 audit(3930723763.131:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 135.012173][ T28] audit: type=1326 audit(3930723763.131:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 135.887632][ T28] audit: type=1326 audit(3930723763.131:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 135.913138][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 136.133662][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 136.264722][ T28] audit: type=1326 audit(3930723763.131:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 136.298682][ T28] audit: type=1326 audit(3930723763.131:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 136.298738][ T28] audit: type=1326 audit(3930723763.131:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 136.480995][ T5531] netlink: 'syz.4.542': attribute type 58 has an invalid length. [ 136.481011][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 136.495189][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.495352][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.529449][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.531032][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.635705][ T5427] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.650656][ T5427] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.668929][ T3432] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.677989][ T3432] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.055566][ T5551] xt_hashlimit: size too large, truncated to 1048576 [ 137.115209][ T5528] xt_CT: No such helper "syz1" [ 137.242454][ T5556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=5556 comm=syz.1.550 [ 137.261245][ T5545] xt_hashlimit: size too large, truncated to 1048576 [ 137.287727][ T5556] loop1: detected capacity change from 0 to 256 [ 137.326915][ T5556] vfat filesystem being mounted at /121/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 137.476462][ T5567] loop4: detected capacity change from 0 to 1764 [ 137.855758][ T5577] raw_sendmsg: syz.0.557 forgot to set AF_INET. Fix it! [ 138.046981][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.054922][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.379674][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.398464][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.492648][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.505342][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.518561][ T5581] FAULT_INJECTION: forcing a failure. [ 138.518561][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 138.524067][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.554921][ T5581] CPU: 1 UID: 0 PID: 5581 Comm: syz.1.559 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 138.554958][ T5581] Tainted: [W]=WARN [ 138.554966][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.554991][ T5581] Call Trace: [ 138.554999][ T5581] [ 138.555052][ T5581] __dump_stack+0x1d/0x30 [ 138.555077][ T5581] dump_stack_lvl+0x95/0xd0 [ 138.555103][ T5581] dump_stack+0x15/0x1b [ 138.555125][ T5581] should_fail_ex+0x25e/0x270 [ 138.555190][ T5581] should_failslab+0x8c/0xb0 [ 138.555213][ T5581] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 138.555241][ T5581] ? __alloc_skb+0x2db/0x6f0 [ 138.555384][ T5581] ? __alloc_skb+0x2db/0x6f0 [ 138.555409][ T5581] __alloc_skb+0x2db/0x6f0 [ 138.555435][ T5581] ? __alloc_skb+0x205/0x6f0 [ 138.555527][ T5581] netlink_alloc_large_skb+0xbf/0xf0 [ 138.555637][ T5581] netlink_sendmsg+0x40c/0x6f0 [ 138.555666][ T5581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.555774][ T5581] ____sys_sendmsg+0x532/0x580 [ 138.555812][ T5581] ___sys_sendmsg+0x195/0x1e0 [ 138.555969][ T5581] __x64_sys_sendmsg+0xd4/0x160 [ 138.556005][ T5581] x64_sys_call+0x194c/0x3020 [ 138.556037][ T5581] do_syscall_64+0x136/0x3c0 [ 138.556075][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.556178][ T5581] RIP: 0033:0x7f133fe8de59 [ 138.556197][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.556217][ T5581] RSP: 002b:00007f133e8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.556237][ T5581] RAX: ffffffffffffffda RBX: 00007f1340115fa0 RCX: 00007f133fe8de59 [ 138.556255][ T5581] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 138.556270][ T5581] RBP: 00007f133e8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.556286][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.556301][ T5581] R13: 00007f1340116038 R14: 00007f1340115fa0 R15: 00007ffd315e54c8 [ 138.556323][ T5581] [ 138.557991][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.982045][ T5590] loop5: detected capacity change from 0 to 512 [ 139.068270][ T5590] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.076292][ T5590] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.558: ea_inode with extended attributes [ 139.089137][ T5590] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 139.091116][ T5590] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.558: error while reading EA inode 11 err=-117 [ 139.100598][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 139.100637][ C1] EXT4-fs (loop5): initial error at time 3930723769: ext4_xattr_inode_iget:441: inode 11 [ 139.100708][ C1] EXT4-fs (loop5): last error at time 3930723769: ext4_xattr_inode_iget:441: inode 11 [ 139.139987][ T5590] loop5: lost filesystem error report for type 5 error -117 [ 139.164738][ T5590] EXT4-fs (loop5): 1 orphan inode deleted [ 139.181834][ T5590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.315202][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 139.439325][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.503123][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 139.503153][ T28] audit: type=1326 audit(3930723769.561:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.577029][ T28] audit: type=1326 audit(3930723769.561:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.632002][ T28] audit: type=1326 audit(3930723769.561:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.663856][ T28] audit: type=1326 audit(3930723769.561:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.691005][ T28] audit: type=1326 audit(3930723769.561:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.716589][ T28] audit: type=1326 audit(3930723769.561:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.742349][ T28] audit: type=1326 audit(3930723769.561:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.778759][ T28] audit: type=1326 audit(3930723769.561:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.803958][ T28] audit: type=1326 audit(3930723769.561:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 139.829177][ T28] audit: type=1326 audit(3930723769.561:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133fe8de59 code=0x7ffc0000 [ 140.708165][ T5626] loop5: detected capacity change from 0 to 512 [ 140.716689][ T5628] x_tables: duplicate underflow at hook 1 [ 140.728284][ T5626] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 140.749238][ T5626] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.575: corrupted in-inode xattr: e_value size too large [ 140.811379][ T5626] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.812183][ T5626] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.575: couldn't read orphan inode 15 (err -117) [ 140.821386][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 140.821408][ C1] EXT4-fs (loop5): initial error at time 3930723770: ext4_iget_extra_inode:5180: inode 15 [ 140.821462][ C1] EXT4-fs (loop5): last error at time 3930723770: ext4_iget_extra_inode:5180: inode 15 [ 140.884420][ T5634] loop1: detected capacity change from 0 to 1024 [ 140.904966][ T5626] loop5: lost filesystem error report for type 5 error -117 [ 140.905542][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.934072][ T5634] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.577: Failed to acquire dquot type 0 [ 140.945229][ T5634] loop1: lost filesystem error report for type 5 error -5 [ 140.946928][ T5639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'. [ 140.969794][ T5634] EXT4-fs (loop1): 1 truncate cleaned up [ 140.975915][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 140.975953][ C1] EXT4-fs (loop1): initial error at time 3930723771: ext4_acquire_dquot:7041 [ 140.976015][ C1] EXT4-fs (loop1): last error at time 3930723771: ext4_acquire_dquot:7041 [ 141.013710][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.024986][ T5634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.103112][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.239422][ T5649] loop0: detected capacity change from 0 to 128 [ 141.263010][ T5649] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.278084][ T5649] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.317684][ T5662] netlink: 'syz.5.588': attribute type 1 has an invalid length. [ 141.334863][ T5649] lo speed is unknown, defaulting to 1000 [ 141.341783][ T5649] lo speed is unknown, defaulting to 1000 [ 141.348081][ T5649] lo speed is unknown, defaulting to 1000 [ 141.410822][ T5649] infiniband sz1: set down [ 141.415744][ T5649] infiniband sz1: added lo [ 141.425839][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.438039][ T5649] RDS/IB: sz1: added [ 141.442190][ T5649] smc: adding ib device sz1 with port count 1 [ 141.448493][ T5649] smc: ib device sz1 port 1 has no pnetid [ 141.458311][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.465729][ T5662] bond2: entered promiscuous mode [ 141.476075][ T5662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.488577][ T5662] loop5: detected capacity change from 0 to 512 [ 141.498469][ T5662] EXT4-fs: inline encryption not supported [ 141.507815][ T5674] ipvlan2: entered allmulticast mode [ 141.513496][ T5674] bond2: entered allmulticast mode [ 141.518859][ T932] lo speed is unknown, defaulting to 1000 [ 141.533821][ T5662] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.573694][ T5662] EXT4-fs (loop5): 1 truncate cleaned up [ 141.587127][ T5662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.611604][ T5662] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6455: inode #15: comm syz.5.588: bad extra_isize 62 (inode size 256) [ 141.633765][ T5662] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6455: inode #15: comm syz.5.588: bad extra_isize 62 (inode size 256) [ 141.645654][ T5665] mmap: syz.4.590 (5665): VmData 17711104 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 141.669520][ T5649] lo speed is unknown, defaulting to 1000 [ 141.853851][ T5649] lo speed is unknown, defaulting to 1000 [ 142.034087][ T5649] lo speed is unknown, defaulting to 1000 [ 142.217321][ T5649] lo speed is unknown, defaulting to 1000 [ 142.396766][ T5649] lo speed is unknown, defaulting to 1000 [ 142.614040][ T5662] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6455: inode #15: comm syz.5.588: bad extra_isize 62 (inode size 256) [ 142.642554][ T3388] lo speed is unknown, defaulting to 1000 [ 142.667972][ T5674] EXT4-fs (loop5): shut down requested (1) [ 142.762457][ T5688] mmap: syz.1.593 (5688) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.793955][ T5662] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6455: inode #15: comm syz.5.588: bad extra_isize 62 (inode size 256) [ 142.908804][ T5674] bond2: (slave bridge1): making interface the new active one [ 142.929254][ T5674] bridge1: entered promiscuous mode [ 142.941884][ T5674] bridge1: entered allmulticast mode [ 142.951673][ T5674] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 142.978188][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.300694][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.446367][ T5698] xt_hashlimit: size too large, truncated to 1048576 [ 143.591655][ T5700] loop5: detected capacity change from 0 to 8192 [ 143.608942][ T5700] vfat filesystem being mounted at /86/bus supports timestamps until 2107-12-31 (0x10391447e) [ 143.675496][ T5711] loop1: detected capacity change from 0 to 512 [ 144.476963][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 144.476980][ T28] audit: type=1326 audit(3930723774.571:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.550700][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 144.606461][ T28] audit: type=1326 audit(3930723774.601:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.633960][ T5731] loop4: detected capacity change from 0 to 512 [ 144.658079][ T5732] loop2: detected capacity change from 0 to 128 [ 144.689722][ T5732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.689900][ T5732] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.756292][ T5732] rdma_rxe: rxe_newlink: failed to add lo [ 144.762371][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.762564][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.802374][ T28] audit: type=1326 audit(3930723774.611:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.802454][ T28] audit: type=1326 audit(3930723774.611:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.802538][ T28] audit: type=1326 audit(3930723774.611:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.802569][ T28] audit: type=1326 audit(3930723774.611:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.802646][ T28] audit: type=1326 audit(3930723774.611:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.802713][ T28] audit: type=1326 audit(3930723774.621:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.803131][ T28] audit: type=1326 audit(3930723774.621:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.803158][ T28] audit: type=1326 audit(3930723774.621:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd0913e68e code=0x7ffc0000 [ 144.810815][ T5731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.810879][ T5731] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.021786][ T5725] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.606: corrupted inode contents [ 145.052353][ T5725] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.606: mark_inode_dirty error [ 145.058838][ T5725] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.606: corrupted inode contents [ 145.064142][ T5725] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.606: mark_inode_dirty error [ 145.203496][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.396645][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.560389][ T5759] bridge_slave_0: left allmulticast mode [ 145.572828][ T5759] bridge_slave_0: left promiscuous mode [ 145.579180][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.580289][ T5761] loop4: detected capacity change from 0 to 1024 [ 145.593150][ T5761] EXT4-fs: Ignoring removed bh option [ 145.600656][ T5759] bridge_slave_1: left allmulticast mode [ 145.606454][ T5759] bridge_slave_1: left promiscuous mode [ 145.613513][ T5761] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 145.659190][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.452469][ T5775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5775 comm=syz.2.616 [ 146.504001][ T5759] bond0: (slave bond_slave_0): Releasing backup interface [ 146.523505][ T5759] bond0: (slave bond_slave_1): Releasing backup interface [ 146.570359][ T5759] team0: Port device team_slave_0 removed [ 146.636744][ T5759] team0: Port device team_slave_1 removed [ 146.654037][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.666604][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.684330][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.692005][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.702033][ T5759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.718745][ T5764] team0: Mode changed to "broadcast" [ 146.733915][ T5765] vlan0: entered promiscuous mode [ 146.759377][ T5765] team0: Port device vlan0 added [ 147.075168][ T5794] netlink: 52 bytes leftover after parsing attributes in process `syz.2.626'. [ 147.089097][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.096409][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.119062][ T5794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.626'. [ 147.218642][ T5790] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.603386][ T5813] lo speed is unknown, defaulting to 1000 [ 147.786859][ T5823] netlink: '&:^/#': attribute type 10 has an invalid length. [ 147.831509][ T5822] loop2: detected capacity change from 0 to 512 [ 147.862745][ T5823] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.886287][ T5822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.074460][ T5822] EXT4-fs (loop2): 1 truncate cleaned up [ 148.147969][ T5822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.197995][ T5833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.635'. [ 148.590888][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.756593][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.774118][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.800409][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.849266][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.871297][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.902452][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 149.716139][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 149.716170][ T28] audit: type=1400 audit(3930723779.811:982): avc: denied { unlink } for pid=3294 comm="syz-executor" name="file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.032752][ T5854] loop0: detected capacity change from 0 to 8192 [ 150.129514][ T5854] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.177623][ T5854] vfat filesystem being mounted at /130/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 150.214266][ T5854] FAULT_INJECTION: forcing a failure. [ 150.214266][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 150.253427][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.0.642 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 150.253466][ T5854] Tainted: [W]=WARN [ 150.253474][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.253486][ T5854] Call Trace: [ 150.253493][ T5854] [ 150.253502][ T5854] __dump_stack+0x1d/0x30 [ 150.253553][ T5854] dump_stack_lvl+0x95/0xd0 [ 150.253578][ T5854] dump_stack+0x15/0x1b [ 150.253601][ T5854] should_fail_ex+0x25e/0x270 [ 150.253645][ T5854] should_failslab+0x8c/0xb0 [ 150.253722][ T5854] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 150.253903][ T5854] ? __d_alloc+0x34/0x320 [ 150.253930][ T5854] ? __d_alloc+0x34/0x320 [ 150.253958][ T5854] __d_alloc+0x34/0x320 [ 150.254048][ T5854] d_alloc_parallel+0x4f/0xcd0 [ 150.254080][ T5854] ? __d_lookup_rcu_op_compare+0x236/0x270 [ 150.254125][ T5854] ? lockref_get_not_dead+0x120/0x1c0 [ 150.254197][ T5854] ? __rcu_read_unlock+0x4e/0x70 [ 150.254222][ T5854] ? try_to_unlazy+0x39b/0x580 [ 150.254256][ T5854] __lookup_slow+0x51/0x200 [ 150.254359][ T5854] lookup_slow+0x3c/0x60 [ 150.254462][ T5854] path_lookupat+0x2b2/0x4c0 [ 150.254556][ T5854] filename_lookup+0x18f/0x390 [ 150.254633][ T5854] user_statfs+0x5d/0x120 [ 150.254668][ T5854] __x64_sys_statfs+0x65/0xf0 [ 150.254694][ T5854] ? fput+0x8f/0xc0 [ 150.254723][ T5854] ? ksys_write+0x194/0x1a0 [ 150.254762][ T5854] x64_sys_call+0x29ba/0x3020 [ 150.254827][ T5854] do_syscall_64+0x136/0x3c0 [ 150.254866][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.254888][ T5854] RIP: 0033:0x7fafe5e1de59 [ 150.254904][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.254923][ T5854] RSP: 002b:00007fafe4877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 150.255017][ T5854] RAX: ffffffffffffffda RBX: 00007fafe60a5fa0 RCX: 00007fafe5e1de59 [ 150.255033][ T5854] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000140 [ 150.255050][ T5854] RBP: 00007fafe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 150.255131][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.255146][ T5854] R13: 00007fafe60a6038 R14: 00007fafe60a5fa0 R15: 00007ffe7f4f0ad8 [ 150.255169][ T5854] [ 151.018965][ T28] audit: type=1400 audit(3930723781.111:983): avc: denied { append } for pid=5862 comm="syz.0.644" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.191560][ T5871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.375224][ T5873] lo speed is unknown, defaulting to 1000 [ 151.386043][ T5882] loop4: detected capacity change from 0 to 512 [ 151.906720][ T5882] EXT4-fs (loop4): Invalid log block size: 16777215 [ 152.409391][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.436726][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.475248][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.735160][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.193879][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.715604][ T5893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.748817][ T5893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.903630][ T5893] veth1_vlan: left promiscuous mode [ 155.910316][ T5893] veth0_vlan: left promiscuous mode [ 155.919591][ T5893] veth0_vlan: entered promiscuous mode [ 155.926256][ T5893] veth1_vlan: entered promiscuous mode [ 155.934729][ T5893] veth1_macvtap: left promiscuous mode [ 155.940823][ T5893] veth0_macvtap: left promiscuous mode [ 155.946803][ T5893] veth0_macvtap: entered promiscuous mode [ 155.953267][ T5893] veth1_macvtap: entered promiscuous mode [ 155.962402][ T5893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.976901][ T5893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.004056][ T5893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.015384][ T5893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.044630][ T5804] lo speed is unknown, defaulting to 1000 [ 156.053414][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.060484][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.069445][ T5804] sz1: Port: 1 Link ACTIVE [ 156.084547][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.091768][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.134644][ T3432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.143536][ T3432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.153790][ T5804] lo speed is unknown, defaulting to 1000 [ 156.160907][ T3432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.170101][ T3432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.265829][ T5927] loop4: detected capacity change from 0 to 512 [ 156.278644][ T5918] loop2: detected capacity change from 0 to 512 [ 156.779894][ T5927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.812627][ T5918] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 156.900019][ T5918] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.661: corrupted in-inode xattr: e_value size too large [ 156.931102][ T5927] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.131508][ T5918] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.133507][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 157.149077][ C0] EXT4-fs (loop2): initial error at time 3930724043: ext4_iget_extra_inode:5180: inode 15 [ 157.158983][ C0] EXT4-fs (loop2): last error at time 3930724043: ext4_iget_extra_inode:5180: inode 15 [ 157.186365][ T5931] capability: warning: `syz.1.665' uses 32-bit capabilities (legacy support in use) [ 157.223474][ T28] audit: type=1400 audit(3930724043.320:984): avc: denied { write } for pid=5926 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.888202][ T5918] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.661: couldn't read orphan inode 15 (err -117) [ 157.902328][ T5918] loop2: lost filesystem error report for type 5 error -117 [ 157.906459][ T5918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.913525][ T28] audit: type=1400 audit(3930724044.000:985): avc: denied { setattr } for pid=5926 comm="syz.4.666" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.994606][ T28] audit: type=1400 audit(3930724044.060:986): avc: denied { write } for pid=5917 comm="syz.2.661" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.036823][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.087086][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.128557][ T5961] loop1: detected capacity change from 0 to 512 [ 158.320592][ T5965] xt_l2tp: invalid flags combination: 0 [ 158.350059][ T5972] loop5: detected capacity change from 0 to 8192 [ 158.358943][ T5972] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.369457][ T5972] vfat filesystem being mounted at /96/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 158.380685][ T5972] FAULT_INJECTION: forcing a failure. [ 158.380685][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 158.393293][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.5.678 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 158.393314][ T5972] Tainted: [W]=WARN [ 158.393318][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.393326][ T5972] Call Trace: [ 158.393331][ T5972] [ 158.393338][ T5972] __dump_stack+0x1d/0x30 [ 158.393354][ T5972] dump_stack_lvl+0x95/0xd0 [ 158.393367][ T5972] dump_stack+0x15/0x1b [ 158.393378][ T5972] should_fail_ex+0x25e/0x270 [ 158.393395][ T5972] should_failslab+0x8c/0xb0 [ 158.393408][ T5972] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 158.393422][ T5972] ? mas_alloc_nodes+0x1a2/0x210 [ 158.393441][ T5972] ? mas_alloc_nodes+0x1a2/0x210 [ 158.393460][ T5972] mas_alloc_nodes+0x1a2/0x210 [ 158.393482][ T5972] mas_preallocate+0x2ca/0x500 [ 158.393503][ T5972] mmap_region+0x13a0/0x20c0 [ 158.393537][ T5972] do_mmap+0x970/0xbc0 [ 158.393553][ T5972] ? selinux_mmap_file+0x5d/0x70 [ 158.393573][ T5972] vm_mmap_pgoff+0x183/0x2d0 [ 158.393595][ T5972] ksys_mmap_pgoff+0x250/0x310 [ 158.393611][ T5972] x64_sys_call+0x14df/0x3020 [ 158.393626][ T5972] do_syscall_64+0x136/0x3c0 [ 158.393646][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.393659][ T5972] RIP: 0033:0x7fb5ca77de59 [ 158.393670][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.393681][ T5972] RSP: 002b:00007fb5c91d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.393694][ T5972] RAX: ffffffffffffffda RBX: 00007fb5caa05fa0 RCX: 00007fb5ca77de59 [ 158.393702][ T5972] RDX: 000000000100000b RSI: 0000000000002000 RDI: 0000000000000000 [ 158.393710][ T5972] RBP: 00007fb5c91d7090 R08: 0000000000000005 R09: 0000000000000000 [ 158.393718][ T5972] R10: 0000000000002013 R11: 0000000000000246 R12: 0000000000000001 [ 158.393725][ T5972] R13: 00007fb5caa06038 R14: 00007fb5caa05fa0 R15: 00007fff5fe445e8 [ 158.393737][ T5972] [ 158.829481][ T5977] netlink: 'syz.5.679': attribute type 4 has an invalid length. [ 158.868721][ T5980] loop1: detected capacity change from 0 to 8192 [ 158.884452][ T5980] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.901378][ T5980] vfat filesystem being mounted at /146/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 158.924898][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 158.934065][ T5980] FAT-fs (loop1): Filesystem has been set read-only [ 158.947010][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 158.960154][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 158.970373][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 158.980672][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.001884][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.016533][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.082201][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.091076][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.109619][ T5980] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.240257][ T6003] __nla_validate_parse: 3 callbacks suppressed [ 159.240274][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 159.264691][ T6003] 8021q: VLANs not supported on ip_vti0 [ 159.513734][ T6011] vlan3: entered allmulticast mode [ 159.605540][ T6011] bond_slave_0: entered allmulticast mode [ 160.532545][ T6015] loop5: detected capacity change from 0 to 512 [ 160.899544][ T6024] xt_l2tp: invalid flags combination: 0 [ 161.147068][ T6026] futex_wake_op: syz.4.694 tries to shift op by 144; fix this program [ 161.215275][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.696'. [ 161.328434][ T28] audit: type=1400 audit(3930724047.350:987): avc: denied { relabelfrom } for pid=6034 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.364042][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 161.373104][ T28] audit: type=1400 audit(3930724047.350:988): avc: denied { relabelto } for pid=6034 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.392686][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 161.486087][ T28] audit: type=1400 audit(3930724047.580:989): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 161.492070][ T6050] loop1: detected capacity change from 0 to 512 [ 161.561830][ T6052] loop4: detected capacity change from 0 to 512 [ 161.600899][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.601872][ T28] audit: type=1400 audit(3930724047.690:990): avc: denied { read write } for pid=6055 comm="syz.5.708" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 161.626502][ T6050] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.698802][ T28] audit: type=1400 audit(3930724047.690:991): avc: denied { open } for pid=6055 comm="syz.5.708" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 161.721988][ T28] audit: type=1400 audit(3930724047.740:992): avc: denied { write } for pid=6049 comm="syz.1.705" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.750354][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.877031][ T6073] loop0: detected capacity change from 0 to 8192 [ 161.878906][ T6075] xt_recent: Unsupported userspace flags (000000b1) [ 161.884604][ T6073] vfat filesystem being mounted at /151/bus supports timestamps until 2107-12-31 (0x10391447e) [ 162.190062][ T6072] loop1: detected capacity change from 0 to 8192 [ 162.287181][ T6072] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.348282][ T6072] vfat filesystem being mounted at /154/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 162.469566][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.522385][ T6072] FAT-fs (loop1): Filesystem has been set read-only [ 162.561850][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.625840][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.652209][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.775261][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.796756][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.814555][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.833680][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.934945][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.982959][ T6072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.656300][ T6114] loop7: detected capacity change from 0 to 16384 [ 163.855852][ T6116] loop7: detected capacity change from 16384 to 16383 [ 164.060774][ T6119] loop5: detected capacity change from 0 to 512 [ 164.917140][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.002517][ T6129] bridge_slave_0 (unregistering): left allmulticast mode [ 165.037878][ T6129] bridge_slave_0 (unregistering): left promiscuous mode [ 165.134387][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.296082][ T6147] loop2: detected capacity change from 0 to 1024 [ 165.315521][ T6147] EXT4-fs: Ignoring removed bh option [ 165.349676][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.412229][ T6159] loop5: detected capacity change from 0 to 512 [ 165.467220][ T28] audit: type=1400 audit(3930724051.560:993): avc: denied { write } for pid=6146 comm="syz.2.735" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.547439][ T6147] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.735: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 165.552949][ T28] audit: type=1400 audit(3930724051.640:994): avc: denied { write } for pid=6146 comm="syz.2.735" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.698667][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.922761][ T6176] loop2: detected capacity change from 0 to 512 [ 165.975864][ T6176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.003079][ T6176] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.112887][ T28] audit: type=1400 audit(3930724052.110:995): avc: denied { write } for pid=6175 comm="syz.2.743" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.027685][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.072451][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 169.382023][ T28] audit: type=1400 audit(3930724055.470:996): avc: denied { append } for pid=6198 comm="syz.5.751" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.382569][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.415006][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.444042][ T6204] loop4: detected capacity change from 0 to 164 [ 169.451729][ T6204] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 169.468311][ T6204] netlink: 'syz.4.752': attribute type 62 has an invalid length. [ 169.479019][ T6204] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 169.490424][ T6204] syz.4.752: attempt to access beyond end of device [ 169.490424][ T6204] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 169.504571][ T6204] syz.4.752: attempt to access beyond end of device [ 169.504571][ T6204] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.552538][ T6204] sctp: [Deprecated]: syz.4.752 (pid 6204) Use of int in max_burst socket option. [ 169.552538][ T6204] Use struct sctp_assoc_value instead [ 169.570979][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 170.010193][ T6220] bond1 (unregistering): Released all slaves [ 170.395527][ T6224] xt_l2tp: invalid flags combination: 0 [ 170.457369][ T6229] loop4: detected capacity change from 0 to 512 [ 170.744214][ T6227] loop0: detected capacity change from 0 to 512 [ 170.755094][ T6227] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.764344][ T6227] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 170.834234][ T6227] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 170.844291][ T6227] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 170.852512][ T6227] System zones: 0-2, 18-18, 34-35 [ 170.861229][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.653537][ T6244] --map-set only usable from mangle table [ 171.664718][ T932] IPVS: starting estimator thread 0... [ 171.691145][ T28] audit: type=1400 audit(3930724057.780:997): avc: denied { mount } for pid=6242 comm="syz.1.764" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 171.793976][ T6246] IPVS: using max 2256 ests per chain, 112800 per kthread [ 171.943131][ T6249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 172.048170][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.127478][ T6253] loop1: detected capacity change from 0 to 128 [ 172.174044][ T6253] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 172.199846][ T6253] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #2: comm syz.1.768: corrupted xattr block 5: invalid header [ 172.228017][ T6253] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 172.246738][ T6253] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.485766][ T6260] loop1: detected capacity change from 0 to 512 [ 172.514858][ T6266] FAULT_INJECTION: forcing a failure. [ 172.514858][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 172.577594][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.0.772 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 172.577628][ T6266] Tainted: [W]=WARN [ 172.577635][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.577649][ T6266] Call Trace: [ 172.577657][ T6266] [ 172.577665][ T6266] __dump_stack+0x1d/0x30 [ 172.577724][ T6266] dump_stack_lvl+0x95/0xd0 [ 172.577750][ T6266] dump_stack+0x15/0x1b [ 172.577770][ T6266] should_fail_ex+0x25e/0x270 [ 172.577846][ T6266] should_failslab+0x8c/0xb0 [ 172.577930][ T6266] __kmalloc_noprof+0xd4/0x4a0 [ 172.577957][ T6266] ? bpf_test_init+0x86/0x130 [ 172.577981][ T6266] ? bpf_test_init+0x86/0x130 [ 172.578003][ T6266] bpf_test_init+0x86/0x130 [ 172.578066][ T6266] bpf_prog_test_run_xdp+0x303/0x9e0 [ 172.578153][ T6266] ? __rcu_read_unlock+0x4e/0x70 [ 172.578184][ T6266] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.578210][ T6266] bpf_prog_test_run+0x208/0x340 [ 172.578284][ T6266] __sys_bpf+0x8da/0xc30 [ 172.578384][ T6266] ? vfs_write+0x770/0x990 [ 172.578418][ T6266] __x64_sys_bpf+0x69/0x80 [ 172.578450][ T6266] x64_sys_call+0x10cb/0x3020 [ 172.578478][ T6266] do_syscall_64+0x136/0x3c0 [ 172.578549][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.578579][ T6266] RIP: 0033:0x7fafe5e1de59 [ 172.578598][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.578620][ T6266] RSP: 002b:00007fafe4877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.578644][ T6266] RAX: ffffffffffffffda RBX: 00007fafe60a5fa0 RCX: 00007fafe5e1de59 [ 172.578723][ T6266] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 172.578737][ T6266] RBP: 00007fafe4877090 R08: 0000000000000000 R09: 0000000000000000 [ 172.578750][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.578763][ T6266] R13: 00007fafe60a6038 R14: 00007fafe60a5fa0 R15: 00007ffe7f4f0ad8 [ 172.578786][ T6266] [ 172.838407][ T6271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'. [ 172.889628][ T28] audit: type=1326 audit(3930724058.980:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 172.891857][ T6276] FAULT_INJECTION: forcing a failure. [ 172.891857][ T6276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.915297][ T28] audit: type=1326 audit(3930724059.010:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 172.956340][ T28] audit: type=1326 audit(3930724059.050:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 172.982056][ T28] audit: type=1326 audit(3930724059.050:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 172.984364][ T6274] program syz.0.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.007842][ T28] audit: type=1326 audit(3930724059.050:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 173.016801][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.1.778 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 173.016905][ T6276] Tainted: [W]=WARN [ 173.016912][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.016926][ T6276] Call Trace: [ 173.016934][ T6276] [ 173.016943][ T6276] __dump_stack+0x1d/0x30 [ 173.016969][ T6276] dump_stack_lvl+0x95/0xd0 [ 173.017011][ T6276] dump_stack+0x15/0x1b [ 173.017032][ T6276] should_fail_ex+0x25e/0x270 [ 173.017063][ T6276] should_fail+0xb/0x20 [ 173.017090][ T6276] should_fail_usercopy+0x1a/0x20 [ 173.017204][ T6276] _copy_from_user+0x1c/0xb0 [ 173.017288][ T6276] ___sys_sendmsg+0xc1/0x1e0 [ 173.017333][ T6276] __x64_sys_sendmsg+0xd4/0x160 [ 173.017366][ T6276] x64_sys_call+0x194c/0x3020 [ 173.017421][ T6276] do_syscall_64+0x136/0x3c0 [ 173.017456][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.017481][ T6276] RIP: 0033:0x7f133fe8de59 [ 173.017499][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.017594][ T6276] RSP: 002b:00007f133e8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.017672][ T6276] RAX: ffffffffffffffda RBX: 00007f1340115fa0 RCX: 00007f133fe8de59 [ 173.017710][ T6276] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 173.017725][ T6276] RBP: 00007f133e8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.017739][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.017752][ T6276] R13: 00007f1340116038 R14: 00007f1340115fa0 R15: 00007ffd315e54c8 [ 173.017772][ T6276] [ 173.128146][ T6282] loop0: detected capacity change from 0 to 512 [ 173.154253][ T28] audit: type=1326 audit(3930724059.050:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 173.261166][ T28] audit: type=1326 audit(3930724059.050:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 173.292417][ T6282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.308353][ T6282] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.321589][ T28] audit: type=1326 audit(3930724059.050:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 173.351765][ T28] audit: type=1326 audit(3930724059.050:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe5e1de59 code=0x7ffc0000 [ 174.109337][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.589416][ T6317] loop0: detected capacity change from 0 to 1024 [ 174.610152][ T6317] EXT4-fs: inline encryption not supported [ 175.249725][ T6329] FAULT_INJECTION: forcing a failure. [ 175.249725][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 175.333052][ T6330] loop4: detected capacity change from 0 to 128 [ 175.354841][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.2.796 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.354879][ T6329] Tainted: [W]=WARN [ 175.354943][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.355028][ T6329] Call Trace: [ 175.355034][ T6329] [ 175.355042][ T6329] __dump_stack+0x1d/0x30 [ 175.355069][ T6329] dump_stack_lvl+0x95/0xd0 [ 175.355091][ T6329] dump_stack+0x15/0x1b [ 175.355111][ T6329] should_fail_ex+0x25e/0x270 [ 175.355204][ T6329] should_failslab+0x8c/0xb0 [ 175.355226][ T6329] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 175.355249][ T6329] ? __alloc_skb+0x2db/0x6f0 [ 175.355325][ T6329] ? __alloc_skb+0x2db/0x6f0 [ 175.355350][ T6329] __alloc_skb+0x2db/0x6f0 [ 175.355378][ T6329] ? __alloc_skb+0x205/0x6f0 [ 175.355407][ T6329] netlink_alloc_large_skb+0xbf/0xf0 [ 175.355533][ T6329] netlink_sendmsg+0x40c/0x6f0 [ 175.355565][ T6329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.355588][ T6329] ____sys_sendmsg+0x532/0x580 [ 175.355622][ T6329] ___sys_sendmsg+0x195/0x1e0 [ 175.355719][ T6329] __x64_sys_sendmsg+0xd4/0x160 [ 175.355758][ T6329] x64_sys_call+0x194c/0x3020 [ 175.355811][ T6329] do_syscall_64+0x136/0x3c0 [ 175.355906][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.355928][ T6329] RIP: 0033:0x7fdd0917de59 [ 175.355943][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.355964][ T6329] RSP: 002b:00007fdd07bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.356049][ T6329] RAX: ffffffffffffffda RBX: 00007fdd09405fa0 RCX: 00007fdd0917de59 [ 175.356064][ T6329] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 175.356078][ T6329] RBP: 00007fdd07bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.356128][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.356143][ T6329] R13: 00007fdd09406038 R14: 00007fdd09405fa0 R15: 00007fffcfd02fa8 [ 175.356164][ T6329] [ 175.652758][ T6317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.702568][ T6317] EXT4-fs (loop0): 1 truncate cleaned up [ 175.725956][ T6317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.824168][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.043833][ T6339] loop0: detected capacity change from 0 to 8192 [ 176.108288][ T6339] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.148051][ T6339] vfat filesystem being mounted at /168/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 176.214339][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.234935][ T6339] FAT-fs (loop0): Filesystem has been set read-only [ 176.250190][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.311949][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.345651][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.384159][ T6346] loop4: detected capacity change from 0 to 512 [ 176.396726][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.434713][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.477790][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.502948][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.520573][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.530260][ T6339] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 176.746250][ T6358] FAULT_INJECTION: forcing a failure. [ 176.746250][ T6358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.776254][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.2.808 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.776294][ T6358] Tainted: [W]=WARN [ 176.776301][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.776313][ T6358] Call Trace: [ 176.776320][ T6358] [ 176.776328][ T6358] __dump_stack+0x1d/0x30 [ 176.776352][ T6358] dump_stack_lvl+0x95/0xd0 [ 176.776389][ T6358] dump_stack+0x15/0x1b [ 176.776453][ T6358] should_fail_ex+0x25e/0x270 [ 176.776481][ T6358] should_fail+0xb/0x20 [ 176.776510][ T6358] should_fail_usercopy+0x1a/0x20 [ 176.776606][ T6358] _copy_from_user+0x1c/0xb0 [ 176.776628][ T6358] ___sys_sendmsg+0xc1/0x1e0 [ 176.776667][ T6358] __x64_sys_sendmsg+0xd4/0x160 [ 176.776710][ T6358] x64_sys_call+0x194c/0x3020 [ 176.776740][ T6358] do_syscall_64+0x136/0x3c0 [ 176.776776][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.776800][ T6358] RIP: 0033:0x7fdd0917de59 [ 176.776823][ T6358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.776842][ T6358] RSP: 002b:00007fdd07bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.776863][ T6358] RAX: ffffffffffffffda RBX: 00007fdd09405fa0 RCX: 00007fdd0917de59 [ 176.776880][ T6358] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000005 [ 176.776933][ T6358] RBP: 00007fdd07bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.776949][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.777029][ T6358] R13: 00007fdd09406038 R14: 00007fdd09405fa0 R15: 00007fffcfd02fa8 [ 176.777052][ T6358] [ 179.094575][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.129110][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.268668][ T6385] loop1: detected capacity change from 0 to 512 [ 179.278752][ T6385] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.287964][ T6385] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 179.314324][ T6385] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 179.324308][ T6385] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 179.332557][ T6385] System zones: 0-2, 18-18, 34-35 [ 179.340914][ T6385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.978209][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 179.978244][ T28] audit: type=1400 audit(3930724066.070:1051): avc: denied { bind } for pid=6399 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.010574][ T6393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 180.110751][ T28] audit: type=1400 audit(3930724066.200:1052): avc: denied { ioctl } for pid=6411 comm="syz.2.825" path="socket:[13818]" dev="sockfs" ino=13818 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.209347][ T6415] loop0: detected capacity change from 0 to 512 [ 180.287953][ T6415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.387011][ T28] audit: type=1400 audit(3930724066.230:1053): avc: denied { create } for pid=6411 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 180.484527][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.535848][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.545773][ T6428] loop2: detected capacity change from 0 to 512 [ 180.558719][ T6415] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.615220][ T28] audit: type=1400 audit(3930724066.710:1054): avc: denied { listen } for pid=6413 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.716084][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.790924][ T6439] syzkaller0: entered promiscuous mode [ 180.804653][ T6439] syzkaller0: entered allmulticast mode [ 181.039925][ T6459] loop0: detected capacity change from 0 to 1024 [ 181.052750][ T6459] EXT4-fs: inline encryption not supported [ 181.095886][ T6459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.118366][ T28] audit: type=1400 audit(3930724067.210:1055): avc: denied { write } for pid=6458 comm="syz.0.842" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.227063][ T6459] bond0: (slave dummy0): Releasing backup interface [ 181.265091][ T6459] batman_adv: batadv0: Adding interface: dummy0 [ 181.275862][ T6459] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.350363][ T6459] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 181.367281][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.846'. [ 181.424083][ T6478] netlink: 'syz.4.849': attribute type 27 has an invalid length. [ 181.483642][ T6480] loop4: detected capacity change from 0 to 8192 [ 181.528997][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.539914][ T6480] loop4: p1 p2 p3 p4 [ 181.559335][ T6480] loop4: p3 start 117772289 is beyond EOD, truncated [ 181.575386][ T6480] loop4: p4 size 32769 extends beyond EOD, truncated [ 181.582316][ T6482] loop2: detected capacity change from 0 to 512 [ 181.588961][ T6482] EXT4-fs: Ignoring removed i_version option [ 181.595031][ T6482] EXT4-fs: Ignoring removed bh option [ 181.616219][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.630265][ T6482] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.700127][ T6495] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.848: iget: bad i_size value: 2533274857506816 [ 181.724055][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 181.802220][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 181.804119][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 181.823031][ T6101] udevd[6101]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 182.378315][ T6508] --map-set only usable from mangle table [ 182.448002][ T5804] IPVS: starting estimator thread 0... [ 182.455926][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.472537][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.859'. [ 182.486094][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.661633][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.702969][ T6510] IPVS: using max 2352 ests per chain, 117600 per kthread [ 182.717774][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.857'. [ 182.747390][ T28] audit: type=1326 audit(3930724068.830:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0917de59 code=0x7ffc0000 [ 182.816637][ T6524] loop1: detected capacity change from 0 to 512 [ 182.829230][ T6524] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.862: bg 0: block 127: padding at end of block bitmap is not set [ 182.843479][ T6524] loop1: lost filesystem error report for type 5 error -117 [ 182.847329][ T6524] EXT4-fs (loop1): Remounting filesystem read-only [ 182.854655][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 182.854673][ C0] EXT4-fs (loop1): initial error at time 3930724068: ext4_validate_block_bitmap:441 [ 182.854703][ C0] EXT4-fs (loop1): last error at time 3930724068: ext4_validate_block_bitmap:441 [ 182.886416][ T6524] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.1.862: cleanup dec ref error -28 [ 182.899303][ T6524] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 182.909483][ T6524] EXT4-fs (loop1): 1 orphan inode deleted [ 182.915819][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.950459][ T6518] netlink: 'syz.4.861': attribute type 5 has an invalid length. [ 183.010777][ T28] audit: type=1326 audit(3930724068.830:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0917de59 code=0x7ffc0000 [ 183.081695][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.155264][ T28] audit: type=1326 audit(3930724068.830:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0917de59 code=0x7ffc0000 [ 183.217124][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'. [ 183.311816][ T28] audit: type=1326 audit(3930724068.830:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdd0917de59 code=0x7ffc0000 [ 183.383832][ T6541] loop2: detected capacity change from 0 to 256 [ 183.402306][ T6545] loop4: detected capacity change from 0 to 512 [ 183.439884][ T6541] vfat filesystem being mounted at /186/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 183.455975][ T28] audit: type=1326 audit(3930724068.830:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0917de59 code=0x7ffc0000 [ 183.458151][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.872'. [ 183.490619][ T6499] loop5: detected capacity change from 0 to 8192 [ 183.502142][ T6499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.517119][ T6499] vfat filesystem being mounted at /140/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 183.532629][ T6545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.558710][ T6545] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.603580][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.704605][ T6567] lo speed is unknown, defaulting to 1000 [ 183.997963][ T6572] loop6: detected capacity change from 0 to 8 [ 184.771360][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 184.779734][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 184.781661][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.964848][ T6583] syzkaller0: entered promiscuous mode [ 185.982304][ T6583] syzkaller0: entered allmulticast mode [ 186.707166][ T6572] loop6: unable to read partition table [ 186.713066][ T6572] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 186.735384][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 186.745596][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.754076][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.764593][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.779671][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.789913][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.801450][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.811678][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.820723][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.830951][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.840700][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.850924][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.929006][ T6594] loop2: detected capacity change from 0 to 128 [ 186.944840][ T6594] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.968184][ T6594] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.979627][ T6591] loop4: detected capacity change from 0 to 1756 [ 186.987868][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.887'. [ 187.012272][ T6591] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 187.013674][ T6594] vfat filesystem being mounted at /189/bus supports timestamps until 2107-12-31 (0x10391447e) [ 187.138291][ T6605] netlink: 68 bytes leftover after parsing attributes in process `syz.5.890'. [ 187.178784][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 187.183673][ T6605] netlink: 132 bytes leftover after parsing attributes in process `syz.5.890'. [ 187.284333][ T6611] xt_hashlimit: size too large, truncated to 1048576 [ 187.338059][ T3421] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.598494][ T6592] loop4: detected capacity change from 0 to 512 [ 188.501596][ T6592] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.731496][ T6592] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 188.849101][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.899'. [ 188.875539][ T6592] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 188.979827][ T6592] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 189.029483][ T6592] System zones: 0-2, 18-18, 34-35 [ 189.085679][ T6644] loop1: detected capacity change from 0 to 512 [ 189.098216][ T6592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.160427][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.200113][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 189.200207][ T28] audit: type=1400 audit(3930724075.290:1142): avc: denied { write } for pid=6590 comm="syz.4.886" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.261770][ T6644] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.273187][ T6655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.906'. [ 189.290003][ T6646] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 189.327566][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.906'. [ 189.341450][ T28] audit: type=1400 audit(3930724075.410:1143): avc: denied { write } for pid=6642 comm="syz.1.904" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.415911][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.433392][ T6660] loop5: detected capacity change from 0 to 512 [ 189.462310][ T28] audit: type=1400 audit(3930724075.410:1144): avc: denied { append } for pid=6642 comm="syz.1.904" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.494466][ T6660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.566206][ T6660] EXT4-fs (loop5): 1 truncate cleaned up [ 189.649790][ T6660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.694979][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.930594][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.987430][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.158341][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.169247][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.342623][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.354193][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.414979][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.423981][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.445559][ T6700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.921'. [ 191.467422][ T6700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.921'. [ 191.502556][ T6698] loop1: detected capacity change from 0 to 512 [ 191.637619][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.657652][ T6716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.670476][ T28] audit: type=1400 audit(3930724333.754:1145): avc: denied { write } for pid=6697 comm="syz.1.917" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.984118][ T6726] loop0: detected capacity change from 0 to 512 [ 192.000820][ T6719] lo speed is unknown, defaulting to 1000 [ 192.128154][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.539967][ T6733] veth1_to_bond: entered allmulticast mode [ 192.554391][ T6733] veth1_to_bond: entered promiscuous mode [ 192.629231][ T28] audit: type=1400 audit(3930724334.064:1146): avc: denied { map } for pid=6690 comm="syz.2.918" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.665453][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'. [ 192.687285][ T6732] veth1_to_bond: left promiscuous mode [ 192.696379][ T6732] veth1_to_bond: left allmulticast mode [ 192.710775][ T28] audit: type=1400 audit(3930724334.794:1147): avc: denied { create } for pid=6738 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 192.971433][ T6747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.933'. [ 192.980426][ T28] audit: type=1400 audit(3930724335.054:1148): avc: denied { nlmsg_read } for pid=6746 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.509151][ T28] audit: type=1400 audit(3930724335.594:1149): avc: denied { getopt } for pid=6749 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.025135][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 194.035808][ T6775] loop0: detected capacity change from 0 to 512 [ 194.062289][ T6773] netlink: 'syz.1.943': attribute type 7 has an invalid length. [ 194.080575][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.099539][ T6773] netlink: 'syz.1.943': attribute type 8 has an invalid length. [ 194.120578][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 194.131950][ T6775] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.162500][ T6773] team0: entered promiscuous mode [ 194.185957][ T28] audit: type=1400 audit(3930724336.264:1150): avc: denied { write } for pid=6774 comm="syz.0.941" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.217556][ T6773] team_slave_0: entered promiscuous mode [ 194.228020][ T6761] loop5: detected capacity change from 0 to 1024 [ 194.238279][ T6773] team_slave_1: entered promiscuous mode [ 194.254933][ T6773] bond0: entered promiscuous mode [ 194.275633][ T6761] EXT4-fs: Ignoring removed bh option [ 194.291768][ T6773] bond_slave_0: entered promiscuous mode [ 194.304772][ T6773] bond_slave_1: entered promiscuous mode [ 194.329097][ T6761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.330637][ T6773] team0: left promiscuous mode [ 194.372114][ T28] audit: type=1400 audit(3930724592.456:1151): avc: denied { write } for pid=6760 comm="syz.5.937" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.395738][ T6773] team_slave_0: left promiscuous mode [ 194.411835][ T6773] team_slave_1: left promiscuous mode [ 194.419772][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 194.444930][ T6773] bond0: left promiscuous mode [ 194.457719][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.468501][ T6773] bond_slave_0: left promiscuous mode [ 194.480052][ T6773] bond_slave_1: left promiscuous mode [ 194.537638][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.5.945'. [ 194.602952][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.706165][ T28] audit: type=1400 audit(3930724592.796:1152): avc: denied { name_bind } for pid=6802 comm="syz.1.949" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 195.524287][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.5.955'. [ 195.622558][ T6824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.956'. [ 195.670902][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.5.957'. [ 196.020614][ T6846] netlink: 'syz.0.966': attribute type 10 has an invalid length. [ 196.900828][ T6875] loop5: detected capacity change from 0 to 512 [ 197.067073][ T6875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.085727][ T28] audit: type=1400 audit(3930724595.176:1153): avc: denied { write } for pid=6874 comm="syz.5.973" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.149696][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.402633][ T6881] netlink: 463 bytes leftover after parsing attributes in process `syz.5.974'. [ 197.740794][ T6889] loop5: detected capacity change from 0 to 512 [ 198.107766][ T6889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.187093][ T28] audit: type=1400 audit(3930724596.276:1154): avc: denied { write } for pid=6888 comm="syz.5.977" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.214749][ T6905] loop4: detected capacity change from 0 to 2048 [ 198.661340][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.914999][ T28] audit: type=1326 audit(3930724597.006:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ca77de59 code=0x7ffc0000 [ 198.942138][ T28] audit: type=1326 audit(3930724597.036:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ca77de59 code=0x7ffc0000 [ 198.970642][ T28] audit: type=1326 audit(3930724597.036:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ca77de59 code=0x7ffc0000 [ 199.050803][ T28] audit: type=1326 audit(3930724597.036:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb5ca77dbc2 code=0x7ffc0000 [ 199.105138][ T28] audit: type=1326 audit(3930724597.036:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb5ca77dc57 code=0x7ffc0000 [ 199.160233][ T28] audit: type=1326 audit(3930724597.036:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.5.987" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb5ca73ab51 code=0x7ffc0000 [ 199.509562][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.992'. [ 199.567367][ T6950] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 199.578696][ T6950] ip6gretap2: entered promiscuous mode [ 199.608080][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 199.608097][ T28] audit: type=1400 audit(3930724597.696:1199): avc: denied { watch watch_reads } for pid=6958 comm="syz.2.998" path="/205/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.638662][ T28] audit: type=1400 audit(3930724597.726:1200): avc: denied { execute_no_trans } for pid=6958 comm="syz.2.998" path="/205/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.665383][ T28] audit: type=1400 audit(3930724597.726:1201): avc: denied { ioctl } for pid=6954 comm="syz.0.997" path="socket:[15992]" dev="sockfs" ino=15992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.692925][ T28] audit: type=1400 audit(3930724597.726:1202): avc: denied { getopt } for pid=6954 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.782748][ T6975] loop2: detected capacity change from 0 to 1024 [ 199.793631][ T6975] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.808049][ T6975] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1002: Invalid block bitmap block 0 in block_group 0 [ 199.825335][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 199.825463][ T6975] Quota error (device loop2): write_blk: dquota write failed [ 199.832821][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 199.832839][ C1] EXT4-fs (loop2): initial error at time 3930724597: ext4_read_block_bitmap_nowait:483 [ 199.832865][ C1] EXT4-fs (loop2): last error at time 3930724597: ext4_read_block_bitmap_nowait:483 [ 199.866310][ T6975] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 199.876541][ T6975] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1002: Failed to acquire dquot type 0 [ 199.887987][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 199.889399][ T6975] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1002: Freeing blocks not in datazone - block = 0, count = 4096 [ 199.910400][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 199.910629][ T6975] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1002: Invalid inode bitmap blk 0 in block_group 0 [ 199.911769][ T6983] FAULT_INJECTION: forcing a failure. [ 199.911769][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.918060][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 199.944168][ T68] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 199.944684][ T6975] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 199.953421][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 199.960398][ T6975] loop2: lost filesystem error report for type 5 error -117 [ 199.969154][ T6982] loop4: detected capacity change from 0 to 512 [ 199.986696][ T68] loop2: lost filesystem error report for type 5 error -117 [ 199.987809][ T6975] EXT4-fs (loop2): 1 orphan inode deleted [ 200.013810][ T6982] EXT4-fs: Ignoring removed nobh option [ 200.018080][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.0.1003 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.018117][ T6983] Tainted: [W]=WARN [ 200.018125][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.018139][ T6983] Call Trace: [ 200.018157][ T6983] [ 200.018165][ T6983] __dump_stack+0x1d/0x30 [ 200.018191][ T6983] dump_stack_lvl+0x95/0xd0 [ 200.018215][ T6983] dump_stack+0x15/0x1b [ 200.018236][ T6983] should_fail_ex+0x25e/0x270 [ 200.018276][ T6983] should_fail+0xb/0x20 [ 200.018304][ T6983] should_fail_usercopy+0x1a/0x20 [ 200.018336][ T6983] _copy_from_iter+0xcc/0xe70 [ 200.018370][ T6983] ? __alloc_skb+0x511/0x6f0 [ 200.018420][ T6983] ? __alloc_skb+0x205/0x6f0 [ 200.018448][ T6983] netlink_sendmsg+0x4a4/0x6f0 [ 200.018475][ T6983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.018569][ T6983] ____sys_sendmsg+0x532/0x580 [ 200.018603][ T6983] ___sys_sendmsg+0x195/0x1e0 [ 200.018645][ T6983] __x64_sys_sendmsg+0xd4/0x160 [ 200.018730][ T6983] x64_sys_call+0x194c/0x3020 [ 200.018867][ T6983] do_syscall_64+0x136/0x3c0 [ 200.018947][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.018973][ T6983] RIP: 0033:0x7fafe5e1de59 [ 200.018995][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.019090][ T6983] RSP: 002b:00007fafe4856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.019112][ T6983] RAX: ffffffffffffffda RBX: 00007fafe60a6090 RCX: 00007fafe5e1de59 [ 200.019128][ T6983] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 200.019167][ T6983] RBP: 00007fafe4856090 R08: 0000000000000000 R09: 0000000000000000 [ 200.019182][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.019196][ T6983] R13: 00007fafe60a6128 R14: 00007fafe60a6090 R15: 00007ffe7f4f0ad8 [ 200.019217][ T6983] [ 200.159047][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.167673][ T6993] loop5: detected capacity change from 0 to 512 [ 200.195170][ T6982] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 200.215278][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.251923][ T6993] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.252132][ T6982] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.1004: inode has both inline data and extents flags [ 200.269156][ T28] audit: type=1400 audit(3930724598.356:1203): avc: denied { write } for pid=6984 comm="syz.5.1005" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.276681][ T6982] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 200.299706][ T6982] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1004: couldn't read orphan inode 13 (err -117) [ 200.312816][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 200.327593][ C0] EXT4-fs (loop4): initial error at time 3930724598: ext4_orphan_get:1399: inode 13 [ 200.337039][ C0] EXT4-fs (loop4): last error at time 3930724598: ext4_orphan_get:1399: inode 13 [ 200.361277][ T28] audit: type=1400 audit(3930724598.396:1204): avc: denied { read write } for pid=6984 comm="syz.5.1005" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.384057][ T28] audit: type=1400 audit(3930724598.396:1205): avc: denied { open } for pid=6984 comm="syz.5.1005" path="/175/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.385493][ T6982] loop4: lost filesystem error report for type 5 error -117 [ 200.417722][ T3982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.450140][ T6982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.465708][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.509440][ T7009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 200.519796][ T7009] ip6gretap1: entered promiscuous mode [ 200.567052][ T6982] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 200.579293][ T6982] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 200.648716][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.686779][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 200.990063][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 201.622188][ T3396] ================================================================== [ 201.630351][ T3396] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 201.638536][ T3396] [ 201.640861][ T3396] read-write to 0xffff88810048f778 of 8 bytes by task 3299 on cpu 0: [ 201.648917][ T3396] __filemap_remove_folio+0x218/0x2e0 [ 201.654288][ T3396] __remove_mapping+0x396/0x4c0 [ 201.659132][ T3396] remove_mapping+0x22/0x90 [ 201.663626][ T3396] mapping_try_invalidate+0x293/0x430 [ 201.668992][ T3396] invalidate_mapping_pages+0x27/0x40 [ 201.674365][ T3396] invalidate_bdev+0x58/0x70 [ 201.680252][ T3396] ext4_put_super+0x614/0x7c0 [ 201.684936][ T3396] generic_shutdown_super+0xee/0x220 [ 201.690220][ T3396] kill_block_super+0x2a/0x70 [ 201.694886][ T3396] ext4_kill_sb+0x42/0x80 [ 201.699253][ T3396] deactivate_locked_super+0x75/0x1c0 [ 201.704622][ T3396] deactivate_super+0x97/0xa0 [ 201.709296][ T3396] cleanup_mnt+0x2c3/0x340 [ 201.713708][ T3396] __cleanup_mnt+0x19/0x20 [ 201.718118][ T3396] task_work_run+0x130/0x1a0 [ 201.722699][ T3396] exit_to_user_mode_loop+0x1e4/0x8c0 [ 201.728065][ T3396] do_syscall_64+0x23c/0x3c0 [ 201.732658][ T3396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.738555][ T3396] [ 201.740869][ T3396] read to 0xffff88810048f778 of 8 bytes by task 3396 on cpu 1: [ 201.748397][ T3396] nr_blockdev_pages+0x7e/0xd0 [ 201.753165][ T3396] si_meminfo+0x87/0xd0 [ 201.757329][ T3396] update_defense_level+0x44/0x5c0 [ 201.762453][ T3396] defense_work_handler+0x1f/0x80 [ 201.767480][ T3396] process_scheduled_works+0x4d4/0x9a0 [ 201.772937][ T3396] worker_thread+0x569/0x750 [ 201.777521][ T3396] kthread+0x221/0x270 [ 201.781577][ T3396] ret_from_fork+0x146/0x330 [ 201.786163][ T3396] ret_from_fork_asm+0x1a/0x30 [ 201.790922][ T3396] [ 201.793229][ T3396] value changed: 0x0000000000000004 -> 0x0000000000000003 [ 201.800318][ T3396] [ 201.802624][ T3396] Reported by Kernel Concurrency Sanitizer on: [ 201.808761][ T3396] CPU: 1 UID: 0 PID: 3396 Comm: kworker/1:6 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 201.819691][ T3396] Tainted: [W]=WARN [ 201.823480][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.833524][ T3396] Workqueue: events_long defense_work_handler [ 201.839597][ T3396] ==================================================================