last executing test programs: 2m37.461397193s ago: executing program 1 (id=425): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff42, 0xffffffffffffffff, &(0x7f0000000340)="17", 0x1, 0x100000001}]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r5, 0x200, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x440d0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40000001, 0x4, @perf_bp={0x0, 0x9}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x80000, 0x0, 0xfac}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getpgid(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000240)={{0x1, 0x1, 0x6, 0x0, 0x7}, 0x8, 0x0, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700200025bd700000000000e000000100000000000000000000000000000000ff000000ffffffff000000000000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000004e210000000000000a00001c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001ff010000000000000000000000000001000000004e2100000a00a0203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000062fc0000000000000000000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000000800000004000000000000002000000000000d60000000000000000000000ffffffff6863771a00000000f9ffffff380000000900000000000000"], 0x128}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) 2m37.378707299s ago: executing program 1 (id=426): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m37.286062873s ago: executing program 1 (id=428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x8000000000000, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x330, 0x4) 2m36.955018483s ago: executing program 1 (id=437): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x1c039}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x4040) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x0, 0xb6}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x3, 0x0, 0x7, r3, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000a40)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000780)={0x3, 0x6, 0x8, 0x2, 0x9, "1d0dc5678a464bad2354c71e3585b76e4d7dc8"}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='async\x00', 0x0, 0x0) 2m36.907930696s ago: executing program 1 (id=440): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x2}, 0x10}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4d37, 0x14}, 0xc) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000001380)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)}}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x4800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x2, 0x10001, 0x3, 0x20010, 0xffffffffffffffff, 0x29, '\x00', 0x0, r0, 0x2, 0x3}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x0, 0x90001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r10, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r10, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x29, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x4, 0x9, 0x9, 0x2, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000180)='syzkaller\x00', 0xa5e, 0xe0, &(0x7f00000002c0)=""/224, 0x41100, 0x18, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x6, 0x718, 0xb}, 0x10, r5, r1, 0x5, &(0x7f00000007c0)=[0x1, r6, r7, r8, r9, r10], &(0x7f0000000800)=[{0x0, 0x2, 0xb}, {0x4, 0x2, 0x2, 0x2}, {0x3, 0x3, 0xc, 0x5}, {0x4, 0x2, 0xb, 0x5}, {0x2, 0x4, 0xc, 0x2}], 0x10, 0x98}, 0x94) 2m36.814284181s ago: executing program 1 (id=442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x5, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240480c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0xeb83, 0x1, @mcast2, @loopback, 0x7800, 0x20, 0xe, 0xffff}}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@getsadinfo={0x2a0, 0x23, 0x8, 0x70bd2c, 0x25dfdbfe, 0x0, [@algo_crypt={0x5c, 0x2, {{'cbc-camellia-aesni\x00'}, 0xa0, "ab981ae948da2def3095aeee4b9fd76ec54fab88"}}, @algo_crypt={0x102, 0x2, {{'ctr(cast6)\x00'}, 0x5d0, "0f1a050bb8fdebb9010c841939e0e3f0ec4ad552eaa57b4b3eaaa0ee2715fd35f32ed1fd439fb98caedc6d6bf33e2d2decd59ab1cbb2254499ef615c459b8639656883190b42daf8283807db4d3a78d990185b916511c03dadbe2f0901fce1fc3e7d716b479e2c0e1ab24876edc33981030796b125ed2627ffd8c9b5fa9f0b9d299433b1746dc3ff41ad8ff9476eb626af8887bc7e2e8b78e9b691547a14bc21cf196c47bdd7e37a5ade4bfa98dc3926031238b38ae413f8cf33"}}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@mcast1, 0x4e24, 0x3a, 0x4e22, 0xade, 0xa, 0x20, 0x0, 0xc, r4, r5}, {@in6=@empty, 0x4d3}, @in=@loopback, {0x8, 0x8, 0xf32, 0x7, 0x1, 0x8, 0xb, 0x7fffffff}, {0x0, 0x100, 0x5, 0x1}, {0x3a0ee753, 0xfffffff5, 0x42}, 0x70bd2a, 0x3506, 0xa, 0x0, 0x1, 0x100}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @XFRMA_SET_MARK={0x8}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m21.826508566s ago: executing program 32 (id=442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x5, 0x9}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240480c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0xeb83, 0x1, @mcast2, @loopback, 0x7800, 0x20, 0xe, 0xffff}}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@getsadinfo={0x2a0, 0x23, 0x8, 0x70bd2c, 0x25dfdbfe, 0x0, [@algo_crypt={0x5c, 0x2, {{'cbc-camellia-aesni\x00'}, 0xa0, "ab981ae948da2def3095aeee4b9fd76ec54fab88"}}, @algo_crypt={0x102, 0x2, {{'ctr(cast6)\x00'}, 0x5d0, "0f1a050bb8fdebb9010c841939e0e3f0ec4ad552eaa57b4b3eaaa0ee2715fd35f32ed1fd439fb98caedc6d6bf33e2d2decd59ab1cbb2254499ef615c459b8639656883190b42daf8283807db4d3a78d990185b916511c03dadbe2f0901fce1fc3e7d716b479e2c0e1ab24876edc33981030796b125ed2627ffd8c9b5fa9f0b9d299433b1746dc3ff41ad8ff9476eb626af8887bc7e2e8b78e9b691547a14bc21cf196c47bdd7e37a5ade4bfa98dc3926031238b38ae413f8cf33"}}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@mcast1, 0x4e24, 0x3a, 0x4e22, 0xade, 0xa, 0x20, 0x0, 0xc, r4, r5}, {@in6=@empty, 0x4d3}, @in=@loopback, {0x8, 0x8, 0xf32, 0x7, 0x1, 0x8, 0xb, 0x7fffffff}, {0x0, 0x100, 0x5, 0x1}, {0x3a0ee753, 0xfffffff5, 0x42}, 0x70bd2a, 0x3506, 0xa, 0x0, 0x1, 0x100}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @XFRMA_SET_MARK={0x8}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m23.523210807s ago: executing program 0 (id=1449): fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m23.498196648s ago: executing program 0 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c000080", @ANYRES16=r1, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff010000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x8000) 1m21.58583138s ago: executing program 0 (id=1457): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x68442, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.816281224s ago: executing program 0 (id=1471): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@resgid}]}, 0x1, 0x527, &(0x7f0000000c00)="$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") r4 = openat(r0, &(0x7f00000007c0)='./bus\x00', 0x100, 0x44) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000502, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x0) shutdown(r5, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0x5}, {0xc, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x800}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="a6") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000100)=""/129) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 1m20.612297226s ago: executing program 0 (id=1476): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x1b4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') read$nci(r1, &(0x7f0000000280)=""/134, 0x86) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4004}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0xc}}, 0x5c5c01) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m20.514294122s ago: executing program 0 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)='4', 0x1}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100040000c3ff00000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 1m20.514135522s ago: executing program 33 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)='4', 0x1}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100040000c3ff00000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3.76302605s ago: executing program 6 (id=2613): recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.646134037s ago: executing program 6 (id=2616): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fcntl$setsig(r0, 0xa, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x68040200) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x2000000) 2.504333023s ago: executing program 2 (id=2629): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="d442e7", 0x3}], 0x1, 0x8) r5 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r5, r6, 0x0, 0x0, 0x1000) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1, 0x70, 0x0) 2.361098172s ago: executing program 2 (id=2632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) 2.336366863s ago: executing program 2 (id=2634): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000006a0000000700001684"], 0x50) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 2.312406214s ago: executing program 5 (id=2635): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @empty}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x3000, 0x7, 0x400, 0x7f, 0x7ff]}, &(0x7f0000000180)=0x54) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000ff23000000000000000500010046000db4"], 0x1c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="870180"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x4000}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x10) 1.746062598s ago: executing program 6 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xa01, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x76}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@errors_remount}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4ec, &(0x7f0000000a00)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') lseek(r1, 0x10001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8884}, 0x4) 1.504766542s ago: executing program 4 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtaction={0x230, 0x30, 0x1, 0x20, 0x80001, {}, [{0x21c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1e0, 0xc, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf3b9, 0xffff, 0x4, 0x9, 0x380000}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x2, 0x9, 0x6}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3833de58, 0x0, 0x10000006, 0x1, 0xfffff801}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x80f7, 0xa4d425b9f4466af6, 0x4006, 0x5}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6021, 0x8, 0x10000000, 0x200, 0x6}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x5, 0xc00, 0x3}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff1b, 0x1, 0x30000000, 0x7, 0x5}, 0x5d}}]}, {0xf0, 0x6, "6824b093a493b4ffa9b718ca023f6ca11d6f3d003be9ac3b1ab7adfa2d5d513bfd1647ae97edfcedc51319c88a47056be9683185e74815ad3a3b5b232498e29e41c684240dca9140d3e6af4dd6a57c1298a4cb36f4894d3e0ea6902cc9d7fee0071b66b50abfa84d8711f5e29ba9997a7b91125103f1e293a7f7e4e4c04879f44455cf48b933b622e784782d181b255ef7fe6ad017031edfaad62a99dd9be480335fbcd35f89a2a9202bb86f5ad230fdf83640825536a9b9efaf92a2e643f0da50a8ea08b6f6bf5167cee51a43e53c537a20906b69ace3134ef6693151856e0a81f106199ee93cf1e5c665e2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4008044}, 0x82) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00003f0007002abd7000fedbdf250000008008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a0001006d617463680000001c0002800800024000000000090001006463637000000000040003000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000000000a67654f57c900b38d49d330be138bfc01e723a17d557928c7a0038e"], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) eventfd2(0x2e431af, 0x80001) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xb}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0xa6a5}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x9}], 0x74) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x3, 0xfffc, 0xe651, 0x2, 0x0, 0x8, 0xff}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f0000000000)) r8 = openat(r6, &(0x7f00000000c0)='./file2\x00', 0x5a3e42, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYBLOB="5f0aa29a415fc73b911752483e171486885a810cb8a090affb01e3f0b83283b7c2"]) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac001e0052f4ba9c0ec58882e47467e97f35119c7df08960bfa708073eacc70b900c79458f4634951b441b01292ba89bc75e", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0007000000080001007063690011000200303030303a30303a31302e300000000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00afe20000"], 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x8881) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1.481985494s ago: executing program 6 (id=2641): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 1.394189778s ago: executing program 6 (id=2642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) personality(0x87bf5ac905ea0f7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x5, r1}) 1.357794591s ago: executing program 3 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.273839305s ago: executing program 5 (id=2645): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x10000, 0x8, 0x1, 0x100008, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x311, 0x7e, 0x9, 0x2, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000140)=0x9d) 1.273540285s ago: executing program 3 (id=2646): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x2, 0x0, 0x0, 0xfffffffc}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.089630226s ago: executing program 4 (id=2647): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xffe8}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket$pptp(0x18, 0x1, 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = dup2(r5, r5) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r10, 0x1}, 0x8) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0xa0000013}) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$vcsa(&(0x7f0000000840), 0x3, 0x408000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, r11, 0x7f, '\x00', 0x0, 0x0}, 0x50) r12 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000880)=ANY=[@ANYBLOB='overriderockperm,iocharset=macturkish,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharsturkish,iocharset=koi8-ru,\x00'], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 1.000646402s ago: executing program 2 (id=2648): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mount$cgroup2(0x0, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', &(0x7f0000000100), 0x8081, &(0x7f0000000500)=ANY=[@ANYBLOB='memory_localevents=']) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f0000000640)="2e7f2b0d", &(0x7f0000000540)=""/203}, 0x20) fchdir(r5) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r9 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r9, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 808.179223ms ago: executing program 3 (id=2649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005, 0x201}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x6000000000000, 0x4040855}, 0x40) 762.356705ms ago: executing program 2 (id=2650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xc7000, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1, 0x0, 0x0, 0x2c01}}], 0x1, 0x0) 756.945396ms ago: executing program 2 (id=2651): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x5, 0x0, 0x1534a1bca631fc4, 0xfc8, 0x20c202a1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x61c4, 0x2, 0x800003, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001380)={0x0, @empty, @local}, &(0x7f00000013c0)=0xc) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="b9b245b19630078138fd7b59e2754fb5928f758fe1d9d45fb0a7c01849ecf7bc2e53cea6f823147cdead3b0e0d0556d6adfe6124dc689626f0f071a7fbd637fbcb7cce0bb98917d76186118556d24bf0441ea79c401f44b2ffc6b5321ad40e940ae7df404a403087cf3732e5acf3b43f2f236ea2fb4979179d18b0f91a0dd99ecfa4b0bc86733cd9f51ef0a88bc70025cd057469272876f4bd2e129736c44aed8a97600e1c65bf5241cb", 0xaa}, {&(0x7f0000000200)="62c302f75ed63e92e95ef42f24d6b074b6585675fbd87e369dc6423211a718e536b0218f38b428a4a68c0f1e20", 0x2d}, {&(0x7f0000000340)="e435c87a3d65f3b0d79ab5360a4825ba8928e971ac9f455f6806042c62a76bcfde560badb6719b8401c557faac0beb04071849f8dd5c6eb392f1b417eccb9515bee6274b84c87f44c9c449aaef264ac934e3bfd1344624112f82ace4ecae2e45e019cd9ced625d42e7cbaa4277c6ef40e2c8ba5c90e3ebaa74d2a74eb6cc6fb59f2a1dc16f2a23460fc6060dedd798f0cfc1535de3b7cac20c9850e6b5e8a9be414639bc3a94576040734351b896a699021fe18cacc1e63827a6f28f6429602b3b11c3e3023f9db9d12524fed0910355522da086096b6cf9e971fa44b9ee53a9c988f89b472f1ef27a1e", 0xea}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="cb5c621c29db1596979e81a73322c0b8d0c279cc6a24ec874cbef636f409f76ebbd7e6eee44e88c49fdaab88220863df17bad17fd7d434426257b68342949f5e", 0x40}, {&(0x7f0000000580)="50ca5175c2f7e814e466ce5142f42ff0b731b9fa303d44fee0dc48b9bf374392b6ca86501280eba143a3389729cb78eb02", 0x31}, {&(0x7f0000000680)="016b58968d8d826da1427a1bb2f50ba4ca0faee50455bdad36fe0cfd1b6e77aece062184e88cf0a72c89b0eed78877fd21c3f5af1518f3381e5e71bff7666433c35f927cd1feeb5d5bb77a7050fe0779a1e98033762c55e28b9f7fbdfe8325eab403abd863e637876549b6ac2a704131779e9b475d08b71b", 0x78}], 0x7, &(0x7f0000000780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}], 0x18}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x77a}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000940)="b8a9627e4ff26aed84f21b77601f36c5a219b22f5515661ea05686db59f30855b69674f18898d6043c105b4b89bb90490c90b1eb29a67b30be5fe871d17fe2cc4aade10bb635a5068b6c68c44356f7ce27c94df5590496ab99baf6e9f87e4fcaf74e51ee09c54f79b159f21884ec705faed68560c910f50c0c670cf76f5f256ccb2ba04275b642d6c1641966d418cf5568a75e25ed519be070836c63ab4f09d6c8e2b4e0", 0xa4}, {&(0x7f0000000800)="9e205d94edc40daf", 0x8}, {&(0x7f0000001dc0)="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", 0xfe8}, {&(0x7f0000000a00)="5e10837cb0bd8a57acd0014cf3a6b09b8ac14524748bbda2c861a5aadc0d3c4044244a5468b881e520e15e738cbb2e918862aaedfd18f47e4793dd53", 0x3c}, {&(0x7f0000000840)="4230677d0b84dd61ec0f11", 0xb}, {&(0x7f0000000a80)="f82d6962df858afe46ea2fc9c9a265df387df096f6ee74dc979fffea969a58ceabad3e44b27af62bb2cd4f4eb206ebe4ecc9d61d3b274d26b91ff09023f649bfd3555f2b103793b8f6c8355cd7f9d1ce5165c43cf7d7b75833bac7db7b", 0x5d}, {0x0}], 0x7, &(0x7f0000001080)=ANY=[@ANYBLOB="98000000000000002900000036000000670f0000000000000740000000020e070400050000000000000000040000000000000000000080000000000e000000000000002f0700000000000001020000071800000001047f060009000000000000000400000000000000040103c20400000003c910ff0100000000000000000000000000010502000700"], 0x98}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001140)="ea31c7f186695c8790cf839fb4b8dad661087fea324e732000e02cb762fd5905702f39c789836b8149050b2a7d5297ebd2bdb7eb72183ddf402d45f9542a124e61fdaeba7a8fc44ec943553baf7599051a3a781fd37c68cc19591904c2cd42fe83951f15fd903364704130ebf2b7202f07468a91a8adc1ee1530ae5a0e34d81fe2af532c3067e6370c01cb7ba40c0876be373e3badf6f6eeb927b02a4cbbe5f165ccbb6140a00c1f84", 0xa9}, {0x0}], 0x2, &(0x7f0000001800)=ANY=[@ANYBLOB="2400000000000000290000003200000000800040000000000000000000010000546ee8969539f1f3ec7410fb1d8fd985e5d81c8178cce71929b4f6c20864c69ad7619a581c366f86007d56123d0e2f4e0263fed7998aed61d46edb206b96c760cb39643c11813cd0e8272406bfc274dc713dcbd36f7354359ecbaf6d8558fbba9b84938d2d8b9225c8938bb9d8e0589c884d09df6fcc5e663daa4f524f29875ece46a15b60a2ed90ac7c24a69a136c923176233687ab8bb50cf8f5db6957e0500759c1510a5bfce40530ae9527e3eb5de9850649e6", @ANYRES32=r4, @ANYBLOB="00000000300000000000000029000000360000003c0200000000000007100000000002030a000100000000000000000000000000140000000000000029000000430000000000000000000000480000000000000029000000370000008705000000000000072800000003082d0600ff000000000000000600000000000000feffffffffffffff10000000000000000000000000001400000000000000290000000b00000000000008000000"], 0xd0}}, {{&(0x7f0000001500)={0xa, 0x4e23, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000001540)="24e10dc3ab5fed07cb0b2ec618e5cc1794e2bc8c7211b2868a1a18180a5c6f903663a7d1ec217690727ad56075b33fee297ba9f8c7e93dc117e0ea0a32e672fc47d8af84990b471250fa8fe0737f97610e062e1f9516e2389a5524d49ac0a7a203e8ca27a76e7f80ef5a1939483b8994a5872530beac3c3ec506a95c1b7f858f591e51c53a4bfe2b3d", 0x89}, {&(0x7f0000001600)="43143b0e4ade6627c8231d4c1a8f994d3ac89e8cc64b9a5e95f80e367f96a5f212fa1e269d4a25b5afc22081f74a79ee085c9d5aea", 0x35}], 0x2, &(0x7f0000001680)=[@rthdr={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x1, 0x3, 0x0, [@mcast1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0xff, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}], 0x60}}], 0x4, 0x40005) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 751.057816ms ago: executing program 6 (id=2652): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 350.170449ms ago: executing program 3 (id=2653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, 0x0) msgsnd(r2, &(0x7f0000000080)=ANY=[], 0x0, 0xe800) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3fffffffc, 0x200000000}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x19080c2, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}9\xc6\x0e\xd9\v\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\x8b\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000200400000000fcdbdf250000000000000000c6899dcd19831a24b10829d7d4c4f6d9a77ae27e71eb36ea11483e59d31d6eb5b77c25bca32bd18058ea39a915794fb504a8756433ad4267b5e8d6f86d5175517617e09b72ffc796ad2b1089273cdfe86a56b0343ffba9505d6011e4e96ed9911de9e3dcb7e811abc0bad71b911ffd23ba9dfe357457b6ee1d456004522bf42e2a2afa3baddd9ce0185931df7ac9d4ef75c1f77e2c333ea7d16bc034b239f75a24f04a87c6bc850b281660671ec26d8caf410bf0e533bbfa2e15bf11fc9b29b673d300a0d0ec425147036a80c549b97487bdaebf1f7d046974bef7918dea77f710bb6952d45b8fc9a4ae3a6b567310a4c54334e64a0f0ab830fe0c02bcdabc0305ed0a11279736a4e1506ea0cc7e40413dd42e805401071eabc5176e864d1237d3a4c876d17d80133d7079a9309ab7a72d02b654183c16ec97d45589f134042d4b36bed619e923cfbc22cdf65fbcff9781e42f08d0d0491d14e6d344e7f919aadc413790cc0f13c5d59a8ebf29e67417860b7a4022d54c77e0a59857e4ebeec8867e7fc52cdf5dd64c16ea7d2acff951e0da6f8918f843611622ee8f88747c083534415b92c7a490c8915aa2b638afcc4880ebf83112fd1d1c30a704b9f5d9510865f59162cb6f7a71960c732520aa2443edbc53985290edb9355c", @ANYRES32=r5, @ANYBLOB="890c0f000000000020001280080001006774d60b00000000000005731faf157e65dce3150d1751e80499ecb0f6bcd07e4ad4ee29a7137fe73d5e1d024e44de91eb9d807ac899a08cb1619b6f85"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x2, 0x20000001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xffe0}, {0xfff1, 0xfff1}}, ["", "", "", "", "", "", "", ""]}, 0x17}}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 337.43726ms ago: executing program 5 (id=2654): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffffb) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) 292.749392ms ago: executing program 5 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfff5}}], {0x14}}, 0x3c}}, 0x0) 220.383327ms ago: executing program 5 (id=2656): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff0000, 0x5, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) r2 = creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r4, 0x1b, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x20}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x37, 0x4, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4b8e22a3}, {@multicast1, 0x8}, {@empty, 0x7}, {@loopback, 0x401}]}, @generic={0x89, 0x11, "a47bc52a2f4a025cddbd46d0a903f2"}, @lsrr={0x83, 0x23, 0xf1, [@multicast2, @multicast1, @multicast1, @rand_addr=0x64010101, @private=0xa010100, @local, @local, @rand_addr=0x64010102]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "d46b79ea89108464"}]}, @cipso={0x86, 0x5c, 0xffffffffffffffff, [{0x5, 0xe, "4b0a933d0bfde76b19bdcf7b"}, {0x5, 0xd, "921b763e27cdb4f41ccc13"}, {0x6, 0xa, "807a22eaac095619"}, {0x6, 0x10, "8ec9152f546d37f91f22063c20a7"}, {0x0, 0x12, "da88b5e5d50640116b2a7bdd88f3ebb6"}, {0x0, 0xf, "b8d51bf8f8e4aa080d483f4d95"}]}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x116) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000480)=0x9, 0x4) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r8, 0x10c, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000000440), 0x4) (async) pipe(0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000001c0)="f39a9e8346ddfd46f5ba7fbc251c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec00"/65, 0x41}, {0x0}], 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 219.554667ms ago: executing program 4 (id=2657): syz_open_dev$sg(0x0, 0x8c, 0x5c200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) close_range(r2, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @map_fd, @jmp={0x5, 0x1, 0x6, 0x2, 0xa, 0xfffffffffffffff4, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x2}, @generic={0x0, 0x9, 0x6, 0x7e, 0x5}, @alu={0x7, 0x1, 0x0, 0x2, 0x4, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) read$eventfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) 141.990582ms ago: executing program 4 (id=2658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x40000, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) 131.701792ms ago: executing program 4 (id=2659): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0xc1, 0x0, 0x0, 0xfe, 0x20110, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x880, 0x5, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x40) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x8000) (async, rerun: 32) shutdown(r2, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r4, &(0x7f00000000c0)=""/244, 0xf4, 0x0) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000e4000600000000000000000000000000d6a69915e6fea0c7058468830a176f142ad6af0558bfd970ccf16a18796f938ee705451baa2b7c79006fc323d40f91dbc5e28c047d4ce6ef2c9c3e385c6cbd400f0479cb0dde8542f790a1e8fd98e9fc233b2a1b778150b396a50ef813c4bd0ecd623291f062f342c5a3c9d07dcf2158950020d6ebdbb7855d9cadee9107795971bf8c61848fcbffa8e507dd2f605200b8dae8db937af8", @ANYRESDEC=r1, @ANYBLOB="03000000c010063731001280080001197369740020000280080003000a01010214000b00fc010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x400c040) 86.640364ms ago: executing program 4 (id=2660): r0 = socket$inet6(0xa, 0x3, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) pipe(&(0x7f0000000440)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1000000000000009, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) 6.302249ms ago: executing program 3 (id=2661): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 5.896689ms ago: executing program 5 (id=2662): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/70, 0x46, 0x2b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='b '], 0x54) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) (async) sendfile(r0, r0, 0x0, 0xe3aa6ea) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x3, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80a0) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x3, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80a0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x29ac, 0x10304, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfff, 0x90001}, 0xca04, 0x200, 0x672f9d46, 0x1, 0x2ca, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x29ac, 0x10304, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfff, 0x90001}, 0xca04, 0x200, 0x672f9d46, 0x1, 0x2ca, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r6, r6) (async) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) creat(&(0x7f0000000640)='./file1\x00', 0x90) 0s ago: executing program 3 (id=2663): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x7}, 0x100050, 0x10000, 0x80, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 [ 173.970559][ T9150] __dump_stack+0x1d/0x30 [ 173.970589][ T9150] dump_stack_lvl+0x95/0xd0 [ 173.970667][ T9150] dump_stack+0x15/0x1b [ 173.970689][ T9150] should_fail_ex+0x263/0x280 [ 173.970721][ T9150] should_failslab+0x8c/0xb0 [ 173.970786][ T9150] __kmalloc_cache_noprof+0x64/0x4a0 [ 173.970820][ T9150] ? __hw_addr_add_ex+0x15b/0x3b0 [ 173.970853][ T9150] __hw_addr_add_ex+0x15b/0x3b0 [ 173.970885][ T9150] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 173.970939][ T9150] dev_addr_init+0xb1/0x120 [ 173.970971][ T9150] alloc_netdev_mqs+0x1ca/0xa40 [ 173.971056][ T9150] rtnl_create_link+0x239/0x720 [ 173.971137][ T9150] rtnl_newlink_create+0x174/0x650 [ 173.971172][ T9150] rtnl_newlink+0x10a0/0x1330 [ 173.971205][ T9150] ? __rcu_read_unlock+0x4e/0x70 [ 173.971380][ T9150] ? css_rstat_updated+0xbb/0x280 [ 173.971414][ T9150] ? __account_obj_stock+0x211/0x350 [ 173.971515][ T9150] ? __rcu_read_unlock+0x4e/0x70 [ 173.971549][ T9150] ? avc_has_perm_noaudit+0xab/0x130 [ 173.971579][ T9150] ? cred_has_capability+0x224/0x2a0 [ 173.971605][ T9150] ? selinux_capable+0x31/0x40 [ 173.971687][ T9150] ? security_capable+0x7b/0x90 [ 173.971712][ T9150] ? ns_capable+0x7c/0xb0 [ 173.971778][ T9150] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.971803][ T9150] rtnetlink_rcv_msg+0x64b/0x720 [ 173.971828][ T9150] ? avc_has_perm_noaudit+0xab/0x130 [ 173.971922][ T9150] netlink_rcv_skb+0x123/0x220 [ 173.971956][ T9150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.971988][ T9150] rtnetlink_rcv+0x1c/0x30 [ 173.972015][ T9150] netlink_unicast+0x5c0/0x690 [ 173.972193][ T9150] netlink_sendmsg+0x5c8/0x6f0 [ 173.972232][ T9150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.972274][ T9150] ____sys_sendmsg+0x5af/0x600 [ 173.972335][ T9150] ___sys_sendmsg+0x195/0x1e0 [ 173.972385][ T9150] __x64_sys_sendmsg+0xd4/0x160 [ 173.972492][ T9150] x64_sys_call+0x194c/0x3020 [ 173.972564][ T9150] do_syscall_64+0x12c/0x370 [ 173.972599][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.972623][ T9150] RIP: 0033:0x7f1fba34bf79 [ 173.972642][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.972678][ T9150] RSP: 002b:00007f1fb8da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.972701][ T9150] RAX: ffffffffffffffda RBX: 00007f1fba5c5fa0 RCX: 00007f1fba34bf79 [ 173.972717][ T9150] RDX: 0000000000004044 RSI: 00002000000002c0 RDI: 0000000000000003 [ 173.972732][ T9150] RBP: 00007f1fb8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.972747][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.972789][ T9150] R13: 00007f1fba5c6038 R14: 00007f1fba5c5fa0 R15: 00007fff051f5d18 [ 173.972812][ T9150] [ 173.976839][ T9145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.400646][ T9161] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.1812: bit already cleared for inode 13 [ 174.422986][ T9164] loop4: detected capacity change from 0 to 512 [ 174.438901][ T9161] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 174.511898][ T9164] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1819: inode has both inline data and extents flags [ 174.525744][ T9164] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.525935][ T9164] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1819: couldn't read orphan inode 15 (err -117) [ 174.548372][ T9164] loop4: lost filesystem error report for type 5 error -117 [ 174.548825][ T9164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.588535][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.718716][ T9179] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1822'. [ 174.728181][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.735509][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.758003][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.026814][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.040744][ T9188] sctp: [Deprecated]: syz.6.1825 (pid 9188) Use of int in maxseg socket option. [ 175.040744][ T9188] Use struct sctp_assoc_value instead [ 175.055799][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 175.055816][ T28] audit: type=1400 audit(1770790205.943:2496): avc: denied { getopt } for pid=9187 comm="syz.6.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.082200][ T9188] 9p: Bad value for 'rfdno' [ 175.113139][ T9196] loop5: detected capacity change from 0 to 512 [ 175.133775][ T9196] EXT4-fs: Ignoring removed bh option [ 175.141033][ T9196] EXT4-fs: Ignoring removed oldalloc option [ 175.147329][ T9196] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.159354][ T9196] EXT4-fs (loop5): 1 truncate cleaned up [ 175.165788][ T9196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.171415][ T28] audit: type=1400 audit(1770790206.036:2497): avc: denied { write } for pid=9194 comm="syz.6.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.353027][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.401787][ T9207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.552652][ T9224] xt_hashlimit: size too large, truncated to 1048576 [ 175.591461][ T9216] lo speed is unknown, defaulting to 1000 [ 175.774268][ T9216] lo speed is unknown, defaulting to 1000 [ 175.905561][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 176.170495][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1848'. [ 176.341936][ T28] audit: type=1400 audit(1770790207.140:2498): avc: denied { setattr } for pid=9262 comm="syz.6.1849" name="NETLINK" dev="sockfs" ino=23916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.625570][ T9278] lo speed is unknown, defaulting to 1000 [ 176.661858][ T9278] lo speed is unknown, defaulting to 1000 [ 176.768953][ T9281] bridge0: port 3(gretap0) entered blocking state [ 176.776277][ T9281] bridge0: port 3(gretap0) entered disabled state [ 176.804921][ T9281] gretap0: entered allmulticast mode [ 176.830547][ T9281] gretap0: entered promiscuous mode [ 177.075308][ T9306] lo speed is unknown, defaulting to 1000 [ 177.095912][ T9313] netlink: 'syz.5.1868': attribute type 27 has an invalid length. [ 177.140413][ T9306] lo speed is unknown, defaulting to 1000 [ 177.292198][ T9319] loop3: detected capacity change from 0 to 512 [ 177.358400][ T9319] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 177.381290][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 177.403530][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 177.588834][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 177.989294][ T9345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9345 comm=syz.2.1877 [ 178.029607][ T9343] loop5: detected capacity change from 0 to 2048 [ 178.141938][ T9343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.157736][ T9354] loop3: detected capacity change from 0 to 512 [ 178.164520][ T28] audit: type=1400 audit(1770790208.843:2499): avc: denied { read } for pid=9355 comm="syz.2.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.266901][ T9359] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 178.456901][ T9354] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1879: inode has both inline data and extents flags [ 178.542191][ T9354] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.542977][ T9354] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1879: couldn't read orphan inode 15 (err -117) [ 178.667967][ T9354] loop3: lost filesystem error report for type 5 error -117 [ 178.671178][ T9354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.710709][ T9365] netlink: 'syz.2.1882': attribute type 32 has an invalid length. [ 178.718686][ T9365] __nla_validate_parse: 3 callbacks suppressed [ 178.718705][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 178.762313][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.855132][ T9377] lo speed is unknown, defaulting to 1000 [ 178.928628][ T9377] lo speed is unknown, defaulting to 1000 [ 179.226738][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.546987][ T9402] loop3: detected capacity change from 0 to 4096 [ 179.576968][ T9402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.843016][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.185012][ T9433] loop3: detected capacity change from 0 to 512 [ 180.216089][ T9433] journal_path: Lookup failure for './file0"errors=continue' [ 180.244908][ T9433] EXT4-fs: error: could not find journal device path [ 180.473947][ T28] audit: type=1400 audit(1770790211.003:2500): avc: denied { write } for pid=9441 comm="syz.5.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 180.519484][ T28] audit: type=1400 audit(1770790211.003:2501): avc: denied { mounton } for pid=9441 comm="syz.5.1914" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 180.538948][ T9453] loop5: detected capacity change from 0 to 128 [ 180.560729][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1913'. [ 180.567532][ T9453] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.588207][ T9453] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.603929][ T9450] sctp: [Deprecated]: syz.6.1913 (pid 9450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.603929][ T9450] Use struct sctp_sack_info instead [ 180.625660][ T28] audit: type=1326 audit(1770790211.153:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.5.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x0 [ 180.651993][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1920'. [ 180.834638][ T28] audit: type=1400 audit(1770790211.340:2503): avc: denied { connect } for pid=9479 comm="syz.4.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.016206][ T28] audit: type=1400 audit(1770790211.508:2504): avc: denied { ioctl } for pid=9483 comm="syz.6.1929" path="socket:[23376]" dev="sockfs" ino=23376 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.123267][ T9490] loop4: detected capacity change from 0 to 512 [ 181.131810][ T9490] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1931: inode has both inline data and extents flags [ 181.145400][ T9490] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.145570][ T9490] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1931: couldn't read orphan inode 15 (err -117) [ 181.176591][ T9490] loop4: lost filesystem error report for type 5 error -117 [ 181.177308][ T9490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.284622][ T9496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.441434][ T36] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.501577][ T9505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1937'. [ 181.554593][ T9508] Cannot find del_set index 2 as target [ 181.608780][ T9505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1937'. [ 181.635475][ T9505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1937'. [ 181.711575][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.790077][ T9522] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.845001][ T9529] loop3: detected capacity change from 0 to 512 [ 181.864960][ T9529] EXT4-fs: Ignoring removed nobh option [ 181.887738][ T9529] ------------[ cut here ]------------ [ 181.888329][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1944'. [ 181.893266][ T9529] EA inode 11 i_nlink=1026 [ 181.893340][ T9529] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.1948/9529 [ 181.917549][ T9529] Modules linked in: [ 181.921534][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.3.1948 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.932528][ T9529] Tainted: [W]=WARN [ 181.936368][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.941694][ T9534] netlink: 'syz.2.1950': attribute type 12 has an invalid length. [ 181.946602][ T9529] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 181.961498][ T9529] Code: d4 3b 9a ff 4c 8d 2d dd 9e 3d 05 49 8d 7e 40 e8 84 a4 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 9f b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff f1 d0 03 66 66 66 66 66 66 2e [ 181.981522][ T9529] RSP: 0018:ffffc9000214b5a8 EFLAGS: 00010246 [ 181.987781][ T9529] RAX: ffff88810b166be8 RBX: ffff88811a8e0a78 RCX: ffffffff81becc58 [ 181.996251][ T9529] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc6b20 [ 182.004340][ T9529] RBP: 000000000000000b R08: 000188811a8e0a2b R09: 0000000000000000 [ 182.012049][ T9534] netlink: 'syz.2.1950': attribute type 29 has an invalid length. [ 182.012380][ T9529] R10: ffffc9000214b4d8 R11: 0001c9000214b4d8 R12: ffff88811a8e0a28 [ 182.028624][ T9529] R13: ffffffff86fc6b20 R14: ffff88811a8e09e0 R15: 0000000000000001 [ 182.036690][ T9529] FS: 00007f650ec476c0(0000) GS:ffff8882aec4b000(0000) knlGS:0000000000000000 [ 182.037254][ T9534] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1950'. [ 182.045705][ T9529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.045732][ T9529] CR2: 00007f1fbb0f56b8 CR3: 000000011af48000 CR4: 00000000003506f0 [ 182.045754][ T9529] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.045771][ T9529] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 182.045790][ T9529] Call Trace: [ 182.056391][ T9536] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1944'. [ 182.061601][ T9529] [ 182.089020][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1944'. [ 182.098116][ T9529] ext4_xattr_set_entry+0x77c/0x1010 [ 182.116007][ T9529] ext4_xattr_ibody_set+0x184/0x3c0 [ 182.116044][ T9529] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 182.116084][ T9529] __ext4_expand_extra_isize+0x246/0x280 [ 182.116157][ T9529] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 182.116242][ T9529] ext4_evict_inode+0x7c3/0xd40 [ 182.116271][ T9529] ? __pfx_ext4_evict_inode+0x10/0x10 [ 182.116294][ T9529] evict+0x2af/0x510 [ 182.116323][ T9529] ? __dquot_initialize+0x146/0x7c0 [ 182.116383][ T9529] iput+0x41a/0x580 [ 182.116434][ T9529] ext4_process_orphan+0x1a9/0x1c0 [ 182.116474][ T9529] ext4_orphan_cleanup+0x6a8/0xa00 [ 182.116533][ T9529] ext4_fill_super+0x3476/0x3800 [ 182.116575][ T9529] ? set_blocksize+0x19e/0x2c0 [ 182.116611][ T9529] ? setup_bdev_super+0x30e/0x370 [ 182.116668][ T9529] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.116705][ T9529] get_tree_bdev_flags+0x291/0x300 [ 182.116769][ T9529] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.116807][ T9529] get_tree_bdev+0x1f/0x30 [ 182.116875][ T9529] ext4_get_tree+0x1c/0x30 [ 182.116909][ T9529] vfs_get_tree+0x57/0x1d0 [ 182.116942][ T9529] do_new_mount+0x288/0x8d0 [ 182.117025][ T9529] path_mount+0x4d0/0xbc0 [ 182.117070][ T9529] __se_sys_mount+0x28c/0x2e0 [ 182.117112][ T9529] __x64_sys_mount+0x67/0x80 [ 182.117226][ T9529] x64_sys_call+0x2d61/0x3020 [ 182.117260][ T9529] do_syscall_64+0x12c/0x370 [ 182.117301][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.117396][ T9529] RIP: 0033:0x7f65101ed20a [ 182.117417][ T9529] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.117449][ T9529] RSP: 002b:00007f650ec46e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.117494][ T9529] RAX: ffffffffffffffda RBX: 00007f650ec46ee0 RCX: 00007f65101ed20a [ 182.117512][ T9529] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f650ec46ea0 [ 182.117593][ T9529] RBP: 0000200000000180 R08: 00007f650ec46ee0 R09: 0000000000800718 [ 182.117612][ T9529] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 182.117627][ T9529] R13: 00007f650ec46ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 182.117664][ T9529] [ 182.117670][ T9529] ---[ end trace 0000000000000000 ]--- [ 182.154334][ T9529] EXT4-fs (loop3): 1 orphan inode deleted [ 182.154879][ T9529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.192634][ T9529] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.274128][ T9529] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.451300][ T28] audit: type=1400 audit(1770790212.818:2505): avc: denied { map } for pid=9549 comm="syz.6.1957" path="socket:[24526]" dev="sockfs" ino=24526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.494696][ T9552] loop5: detected capacity change from 0 to 8192 [ 182.561918][ T9529] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.656118][ T9569] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 182.669232][ T9529] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.741836][ T4196] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.760055][ T9575] FAULT_INJECTION: forcing a failure. [ 182.760055][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.770948][ T2115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.773840][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.4.1961 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.773945][ T9575] Tainted: [W]=WARN [ 182.773967][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.774029][ T9575] Call Trace: [ 182.774051][ T9575] [ 182.774074][ T9575] __dump_stack+0x1d/0x30 [ 182.774164][ T9575] dump_stack_lvl+0x95/0xd0 [ 182.774247][ T9575] dump_stack+0x15/0x1b [ 182.774320][ T9575] should_fail_ex+0x263/0x280 [ 182.774422][ T9575] should_fail+0xb/0x20 [ 182.774553][ T9575] should_fail_usercopy+0x1a/0x20 [ 182.774691][ T9575] _copy_from_user+0x1c/0xb0 [ 182.774835][ T9575] ___sys_sendmsg+0xc1/0x1e0 [ 182.775043][ T9575] __x64_sys_sendmsg+0xd4/0x160 [ 182.775156][ T9575] x64_sys_call+0x194c/0x3020 [ 182.775238][ T9575] do_syscall_64+0x12c/0x370 [ 182.775368][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.775443][ T9575] RIP: 0033:0x7f1fba34bf79 [ 182.775491][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.775553][ T9575] RSP: 002b:00007f1fb8da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.775623][ T9575] RAX: ffffffffffffffda RBX: 00007f1fba5c5fa0 RCX: 00007f1fba34bf79 [ 182.775668][ T9575] RDX: 0000000024000804 RSI: 0000200000000140 RDI: 0000000000000003 [ 182.775716][ T9575] RBP: 00007f1fb8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.775759][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.775800][ T9575] R13: 00007f1fba5c6038 R14: 00007f1fba5c5fa0 R15: 00007fff051f5d18 [ 182.775863][ T9575] [ 182.928827][ T9577] loop4: detected capacity change from 0 to 512 [ 182.955082][ T9577] ext4: Unknown parameter 'euid<00000000000000000000' [ 182.964556][ T4196] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.977095][ T2115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.023023][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.113182][ T28] audit: type=1326 audit(1770790213.473:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c59d9bf79 code=0x0 [ 183.269030][ T9592] FAULT_INJECTION: forcing a failure. [ 183.269030][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.290541][ T9590] lo speed is unknown, defaulting to 1000 [ 183.301755][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.5.1968 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.301913][ T9592] Tainted: [W]=WARN [ 183.301922][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.301940][ T9592] Call Trace: [ 183.301949][ T9592] [ 183.301959][ T9592] __dump_stack+0x1d/0x30 [ 183.301986][ T9592] dump_stack_lvl+0x95/0xd0 [ 183.302052][ T9592] dump_stack+0x15/0x1b [ 183.302079][ T9592] should_fail_ex+0x263/0x280 [ 183.302128][ T9592] should_fail+0xb/0x20 [ 183.302153][ T9592] should_fail_usercopy+0x1a/0x20 [ 183.302186][ T9592] _copy_from_user+0x1c/0xb0 [ 183.302299][ T9592] ___sys_sendmsg+0xc1/0x1e0 [ 183.302350][ T9592] __x64_sys_sendmsg+0xd4/0x160 [ 183.302455][ T9592] x64_sys_call+0x194c/0x3020 [ 183.302480][ T9592] do_syscall_64+0x12c/0x370 [ 183.302511][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.302538][ T9592] RIP: 0033:0x7f0cdc19bf79 [ 183.302558][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.302644][ T9592] RSP: 002b:00007f0cdabf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.302664][ T9592] RAX: ffffffffffffffda RBX: 00007f0cdc415fa0 RCX: 00007f0cdc19bf79 [ 183.302682][ T9592] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 000000000000000a [ 183.302700][ T9592] RBP: 00007f0cdabf7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.302772][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.302793][ T9592] R13: 00007f0cdc416038 R14: 00007f0cdc415fa0 R15: 00007ffeb1461eb8 [ 183.302819][ T9592] [ 183.615811][ T9590] lo speed is unknown, defaulting to 1000 [ 183.615927][ T9588] lo speed is unknown, defaulting to 1000 [ 183.726370][ T9606] v: renamed from ip6_vti0 [ 183.736876][ T9606] futex_wake_op: syz.4.1969 tries to shift op by 32; fix this program [ 183.795387][ T9596] lo speed is unknown, defaulting to 1000 [ 183.801694][ T9588] lo speed is unknown, defaulting to 1000 [ 183.879283][ T9615] loop3: detected capacity change from 0 to 128 [ 183.887056][ T9615] vfat: Unknown parameter 'Ÿë' [ 183.912879][ T9603] lo speed is unknown, defaulting to 1000 [ 183.950403][ T9603] lo speed is unknown, defaulting to 1000 [ 183.987708][ T9596] lo speed is unknown, defaulting to 1000 [ 184.104402][ T9620] netlink: 'syz.5.1977': attribute type 13 has an invalid length. [ 184.210358][ T9638] loop5: detected capacity change from 0 to 512 [ 184.217603][ T9638] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.230983][ T9638] EXT4-fs (loop5): 1 truncate cleaned up [ 184.237301][ T9638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.249870][ T9640] __nla_validate_parse: 6 callbacks suppressed [ 184.249888][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 184.293865][ T28] audit: type=1400 audit(1770790214.577:2507): avc: denied { rename } for pid=9637 comm="syz.5.1981" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.293905][ T9638] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.1981: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 184.346051][ T9638] EXT4-fs (loop5): Remounting filesystem read-only [ 184.352638][ T9638] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.1981: Deleting old file: nlink 4, error=-117 [ 184.367835][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 184.498460][ T28] audit: type=1326 audit(1770790214.773:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 184.533438][ T9660] IPv6: A: Disabled Multicast RS [ 184.560051][ T28] audit: type=1326 audit(1770790214.773:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 184.656292][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.822850][ T9673] loop5: detected capacity change from 0 to 8192 [ 184.869777][ T3302] loop5: p1 p3 p4 [ 184.873751][ T3302] loop5: p1 start 16777216 is beyond EOD, truncated [ 184.891429][ T3302] loop5: p4 start 16777223 is beyond EOD, truncated [ 184.923393][ T9673] loop5: p1 p3 p4 [ 184.927317][ T9673] loop5: p1 start 16777216 is beyond EOD, truncated [ 184.940614][ T9673] loop5: p4 start 16777223 is beyond EOD, truncated [ 185.068583][ T9692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.078419][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 185.102826][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 185.189756][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 185.286809][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2008'. [ 185.344935][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2008'. [ 185.390676][ T9707] gretap0: entered promiscuous mode [ 185.416737][ T9707] gretap0: left promiscuous mode [ 185.569577][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 185.611430][ T2115] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.611443][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 185.611646][ T2115] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.659706][ T9726] 9p: Bad value for 'rfdno' [ 185.663897][ T2115] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.683960][ T2115] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.941686][ T9736] loop4: detected capacity change from 0 to 256 [ 185.996958][ T9736] FAT-fs (loop4): Directory bread(block 64) failed [ 186.011121][ T9736] FAT-fs (loop4): Directory bread(block 65) failed [ 186.033491][ T9736] FAT-fs (loop4): Directory bread(block 66) failed [ 186.051463][ T9736] FAT-fs (loop4): Directory bread(block 67) failed [ 186.069113][ T9736] FAT-fs (loop4): Directory bread(block 68) failed [ 186.075717][ T9736] FAT-fs (loop4): Directory bread(block 69) failed [ 186.096605][ T9736] FAT-fs (loop4): Directory bread(block 70) failed [ 186.118330][ T9736] FAT-fs (loop4): Directory bread(block 71) failed [ 186.136093][ T9736] FAT-fs (loop4): Directory bread(block 72) failed [ 186.149498][ T9736] FAT-fs (loop4): Directory bread(block 73) failed [ 186.193476][ T9736] syz.4.2019: attempt to access beyond end of device [ 186.193476][ T9736] loop4: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 186.286773][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 186.286842][ T28] audit: type=1400 audit(1770790216.438:2531): avc: denied { ioctl } for pid=9739 comm="syz.5.2021" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 186.554828][ T9759] loop3: detected capacity change from 0 to 1024 [ 186.571539][ T9759] EXT4-fs: Ignoring removed bh option [ 186.590076][ T9751] erspan0: entered promiscuous mode [ 186.596132][ T9751] erspan0: entered allmulticast mode [ 186.655139][ T9759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.710051][ T9772] loop4: detected capacity change from 0 to 164 [ 186.725046][ T9759] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 186.758978][ T9759] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.2026: iget: bad extended attribute block 8 [ 186.809060][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.364155][ T9782] tipc: Failed to remove unknown binding: 66,0,0/0:2127859405/2127859406 [ 187.374376][ T9782] tipc: Failed to remove unknown binding: 66,0,0/0:2127859405/2127859406 [ 187.596776][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2038'. [ 187.685594][ T9800] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2040'. [ 187.740255][ T9803] netlink: 'syz.5.2040': attribute type 3 has an invalid length. [ 187.752295][ T9802] loop4: detected capacity change from 0 to 128 [ 187.782692][ T9803] netlink: 'syz.5.2040': attribute type 3 has an invalid length. [ 187.897267][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2040'. [ 187.907061][ T9802] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.933759][ T9802] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.955540][ T9803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=9803 comm=syz.5.2040 [ 187.998321][ T28] audit: type=1400 audit(1770790218.038:2532): avc: denied { ioctl } for pid=9801 comm="syz.4.2041" path="socket:[26033]" dev="sockfs" ino=26033 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.051731][ T28] audit: type=1400 audit(1770790218.038:2533): avc: denied { write } for pid=9801 comm="syz.4.2041" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 188.290078][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.370797][ T9823] lo speed is unknown, defaulting to 1000 [ 188.476567][ T9828] netlink: 'syz.6.2048': attribute type 1 has an invalid length. [ 188.557636][ T28] audit: type=1326 audit(1770790218.515:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.595146][ T9828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.604595][ T9824] loop4: detected capacity change from 0 to 256 [ 188.673813][ T28] audit: type=1326 audit(1770790218.524:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.698517][ T28] audit: type=1326 audit(1770790218.524:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.723018][ T28] audit: type=1326 audit(1770790218.524:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.747484][ T28] audit: type=1326 audit(1770790218.524:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.827105][ T9824] FAT-fs (loop4): Directory bread(block 64) failed [ 188.857971][ T9824] FAT-fs (loop4): Directory bread(block 65) failed [ 188.886262][ T9824] FAT-fs (loop4): Directory bread(block 66) failed [ 188.916452][ T28] audit: type=1326 audit(1770790218.524:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.935232][ T9823] lo speed is unknown, defaulting to 1000 [ 188.950428][ T9845] –: renamed from vxcan1 (while UP) [ 188.956974][ T9824] FAT-fs (loop4): Directory bread(block 67) failed [ 188.964192][ T9824] FAT-fs (loop4): Directory bread(block 68) failed [ 188.970969][ T28] audit: type=1326 audit(1770790218.524:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.5.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 188.999299][ T9824] FAT-fs (loop4): Directory bread(block 69) failed [ 189.006154][ T9824] FAT-fs (loop4): Directory bread(block 70) failed [ 189.013412][ T9824] FAT-fs (loop4): Directory bread(block 71) failed [ 189.040039][ T9824] FAT-fs (loop4): Directory bread(block 72) failed [ 189.046741][ T9824] FAT-fs (loop4): Directory bread(block 73) failed [ 189.232733][ T9852] loop5: detected capacity change from 0 to 7 [ 189.240392][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.258597][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.288296][ T9855] random: crng reseeded on system resumption [ 189.298556][ T3303] loop5: unable to read partition table [ 189.653408][ T9852] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.667006][ T9852] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.679633][ T9852] loop5: unable to read partition table [ 189.685750][ T9852] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 189.697818][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.706596][ T9823] syz.4.2045: attempt to access beyond end of device [ 189.706596][ T9823] loop4: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 189.707610][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.707741][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.707828][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.707921][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.708062][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.717731][ T9861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.788757][ T9862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.800684][ T9861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.809787][ T9861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.819372][ T9865] loop3: detected capacity change from 0 to 512 [ 189.826531][ T9861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.840662][ T9861] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 189.847309][ T9861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.856193][ T9861] vhci_hcd vhci_hcd.0: Device attached [ 189.864280][ T9865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.884011][ T9866] vhci_hcd: connection closed [ 189.884110][ T36] vhci_hcd vhci_hcd.5: stop threads [ 189.897758][ T9870] netlink: 'syz.4.2060': attribute type 39 has an invalid length. [ 189.906251][ T36] vhci_hcd vhci_hcd.5: release socket [ 189.911877][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 189.914952][ T9865] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.2059: casefold flag without casefold feature [ 190.119619][ T3309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 190.131369][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 190.131402][ T3309] Tainted: [W]=WARN [ 190.131410][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 190.131463][ T3309] Call Trace: [ 190.131472][ T3309] [ 190.131483][ T3309] __dump_stack+0x1d/0x30 [ 190.131515][ T3309] dump_stack_lvl+0x95/0xd0 [ 190.131551][ T3309] dump_stack+0x15/0x1b [ 190.131628][ T3309] dump_header+0x80/0x240 [ 190.131654][ T3309] oom_kill_process+0x295/0x350 [ 190.131693][ T3309] out_of_memory+0x97d/0xb80 [ 190.131812][ T3309] try_charge_memcg+0x62e/0xa10 [ 190.131932][ T3309] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 190.131967][ T3309] __read_swap_cache_async+0x17b/0x2d0 [ 190.132060][ T3309] swap_cluster_readahead+0x262/0x3c0 [ 190.132116][ T3309] swapin_readahead+0xde/0x840 [ 190.132142][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 190.132250][ T3309] ? __perf_event_task_sched_in+0xa65/0xad0 [ 190.132285][ T3309] ? __list_add_valid_or_report+0x38/0xe0 [ 190.132311][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 190.132348][ T3309] ? swap_cache_get_folio+0x26f/0x280 [ 190.132377][ T3309] do_swap_page+0x59b/0x2a50 [ 190.132404][ T3309] ? _raw_spin_unlock+0x9/0x30 [ 190.132456][ T3309] ? __rcu_read_lock+0x36/0x50 [ 190.132496][ T3309] ? __pfx_default_wake_function+0x10/0x10 [ 190.132534][ T3309] handle_mm_fault+0xb40/0x3030 [ 190.132598][ T3309] ? vma_start_read+0x1c7/0x2c0 [ 190.132652][ T3309] do_user_addr_fault+0x62f/0x1050 [ 190.132687][ T3309] exc_page_fault+0x62/0xa0 [ 190.132759][ T3309] asm_exc_page_fault+0x26/0x30 [ 190.132778][ T3309] RIP: 0033:0x7f8c59d57197 [ 190.132795][ T3309] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 190.132814][ T3309] RSP: 002b:00007ffdd1b5c250 EFLAGS: 00010202 [ 190.132833][ T3309] RAX: 0000000000000000 RBX: 000055558b7ad500 RCX: 00007f8c59d57197 [ 190.132848][ T3309] RDX: 00007ffdd1b5c290 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.132966][ T3309] RBP: 00007ffdd1b5c2fc R08: 0000000000000000 R09: 0000000000000000 [ 190.132983][ T3309] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 190.133004][ T3309] R13: 00000000000927c0 R14: 000000000002d676 R15: 00007ffdd1b5c350 [ 190.133031][ T3309] [ 190.133049][ T3309] memory: usage 294980kB, limit 307200kB, failcnt 947 [ 190.371770][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.492585][ T3309] memory+swap: usage 136984kB, limit 9007199254740988kB, failcnt 0 [ 190.505645][ T3309] kmem: usage 63008kB, limit 9007199254740988kB, failcnt 0 [ 190.523898][ T3309] Memory cgroup stats for /syz2: [ 190.524356][ T3309] cache 1048576 [ 190.550781][ T3309] rss 122880 [ 190.554171][ T3309] shmem 0 [ 190.557236][ T3309] mapped_file 45056 [ 190.568056][ T3309] dirty 45056 [ 190.577543][ T3309] writeback 28672 [ 190.593517][ T3309] workingset_refault_anon 3058 [ 190.617095][ T9884] loop3: detected capacity change from 0 to 512 [ 190.630225][ T9884] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2064: invalid indirect mapped block 256 (level 2) [ 190.653457][ T9884] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.653820][ T9884] EXT4-fs (loop3): 2 truncates cleaned up [ 190.672448][ T3309] workingset_refault_file 1724 [ 190.685509][ T9884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.709273][ T9884] 9p: Could not find request transport: ²Ú°AÉæ»un [ 190.717383][ T3309] swap 67723264 [ 190.721045][ T3309] swapcached 81920 [ 190.724867][ T3309] pgpgin 238051 [ 190.728742][ T3309] pgpgout 237753 [ 190.732575][ T3309] pgfault 151431 [ 190.736180][ T3309] pgmajfault 527 [ 190.740861][ T3309] inactive_anon 28672 [ 190.745062][ T3309] active_anon 143360 [ 190.749684][ T3309] inactive_file 0 [ 190.753484][ T3309] active_file 1048576 [ 190.757637][ T3309] unevictable 0 [ 190.761184][ T3309] hierarchical_memory_limit 314572800 [ 190.766705][ T3309] hierarchical_memsw_limit 9223372036854771712 [ 190.773385][ T3309] total_cache 1048576 [ 190.777535][ T3309] total_rss 122880 [ 190.781345][ T3309] total_shmem 0 [ 190.785058][ T3309] total_mapped_file 45056 [ 190.789479][ T3309] total_dirty 45056 [ 190.793348][ T3309] total_writeback 28672 [ 190.797672][ T3309] total_workingset_refault_anon 3058 [ 190.803147][ T3309] total_workingset_refault_file 1724 [ 190.809033][ T3309] total_swap 67723264 [ 190.813069][ T3309] total_swapcached 81920 [ 190.817693][ T3309] total_pgpgin 238051 [ 190.828233][ T3309] total_pgpgout 237753 [ 190.833449][ T3309] total_pgfault 151431 [ 190.837985][ T3309] total_pgmajfault 527 [ 190.842123][ T3309] total_inactive_anon 28672 [ 190.846997][ T3309] total_active_anon 143360 [ 190.851489][ T3309] total_inactive_file 0 [ 190.855788][ T3309] total_active_file 1048576 [ 190.860773][ T3309] total_unevictable 0 [ 190.864847][ T3309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.95,pid=3785,uid=0 [ 190.881619][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.891262][ T3309] Memory cgroup out of memory: Killed process 3785 (syz.2.95) total-vm:94024kB, anon-rss:1268kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 190.995572][ T9892] __nla_validate_parse: 1 callbacks suppressed [ 190.995593][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 191.015295][ T9892] ip6tnl1: entered promiscuous mode [ 191.044833][ T9896] netlink: 'syz.3.2066': attribute type 7 has an invalid length. [ 191.062203][ T9896] netlink: 'syz.3.2066': attribute type 8 has an invalid length. [ 191.144091][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 191.171417][ T9906] netlink: 'syz.3.2072': attribute type 6 has an invalid length. [ 191.237806][ T9914] loop5: detected capacity change from 0 to 512 [ 191.253396][ T9915] loop4: detected capacity change from 0 to 256 [ 191.260157][ T9915] vfat: Unknown parameter 'short' [ 191.279610][ T9914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 191.318463][ T9914] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 191.337680][ T9914] EXT4-fs (loop5): 1 truncate cleaned up [ 191.344025][ T9914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.359599][ T9904] sctp: [Deprecated]: syz.4.2069 (pid 9904) Use of int in maxseg socket option. [ 191.359599][ T9904] Use struct sctp_assoc_value instead [ 191.383172][ T9914] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.2076: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 191.451810][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.462438][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.476102][ T9914] EXT4-fs (loop5): Remounting filesystem read-only [ 191.629588][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.703114][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2081'. [ 191.983216][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2092'. [ 192.082624][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 192.082729][ T28] audit: type=1400 audit(1770790221.863:2574): avc: denied { create } for pid=9958 comm="syz.6.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 192.128853][ T9962] netlink: 'syz.2.2095': attribute type 21 has an invalid length. [ 192.137603][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2094'. [ 192.223646][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 192.346031][ T28] audit: type=1326 audit(1770790222.013:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.3.2096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65101ebf79 code=0x0 [ 192.552877][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 192.580925][ T9975] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9975 comm=syz.2.2100 [ 192.660132][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2104'. [ 192.729120][ T9996] IPv6: A: Disabled Multicast RS [ 192.789179][T10005] loop5: detected capacity change from 0 to 512 [ 192.848472][T10005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.876357][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2115'. [ 192.892667][T10005] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.917994][ T28] audit: type=1400 audit(1770790222.640:2576): avc: denied { write } for pid=10014 comm="syz.6.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.939066][T10005] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.2111: lblock 23 mapped to illegal pblock 18 (length 1) [ 192.954291][T10005] EXT4-fs (loop5): Remounting filesystem read-only [ 192.974299][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.995099][T10019] netlink: 15678 bytes leftover after parsing attributes in process `syz.6.2116'. [ 193.054829][T10025] netlink: 'syz.5.2120': attribute type 4 has an invalid length. [ 193.099428][ T28] audit: type=1326 audit(1770790222.808:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.168689][ T28] audit: type=1326 audit(1770790222.808:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.248539][T10036] lo speed is unknown, defaulting to 1000 [ 193.337301][ T28] audit: type=1326 audit(1770790222.808:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.372029][ T28] audit: type=1326 audit(1770790222.808:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.399769][ T28] audit: type=1326 audit(1770790222.808:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.442940][ T28] audit: type=1326 audit(1770790222.808:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.474756][T10035] lo speed is unknown, defaulting to 1000 [ 193.502534][T10036] lo speed is unknown, defaulting to 1000 [ 193.560808][ T28] audit: type=1326 audit(1770790222.808:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c59d9bf79 code=0x7ffc0000 [ 193.735652][T10035] lo speed is unknown, defaulting to 1000 [ 193.946293][T10076] loop5: detected capacity change from 0 to 512 [ 194.053522][T10076] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2137: inode has both inline data and extents flags [ 194.074055][T10076] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.077579][T10076] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2137: couldn't read orphan inode 15 (err -117) [ 194.118937][T10076] loop5: lost filesystem error report for type 5 error -117 [ 194.119435][T10076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.207054][T10085] loop4: detected capacity change from 0 to 512 [ 194.243611][T10085] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.255939][T10090] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 194.270090][T10076] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.278664][T10085] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 194.287363][T10085] EXT4-fs (loop4): 1 truncate cleaned up [ 194.306378][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.323123][T10085] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.2143: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 194.362926][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.379075][T10085] EXT4-fs (loop4): Remounting filesystem read-only [ 194.464039][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.504781][T10103] netlink: 'syz.5.2149': attribute type 21 has an invalid length. [ 194.513224][T10103] netlink: 'syz.5.2149': attribute type 5 has an invalid length. [ 194.559508][T10106] loop4: detected capacity change from 0 to 764 [ 194.619663][T10103] SELinux: failed to load policy [ 194.875466][T10122] loop5: detected capacity change from 0 to 1024 [ 194.898335][T10122] EXT4-fs: Ignoring removed nobh option [ 194.908485][T10122] EXT4-fs: Mount option(s) incompatible with ext2 [ 194.946297][T10139] loop4: detected capacity change from 0 to 512 [ 194.978227][T10139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.991874][T10139] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.018926][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.193479][T10163] lo speed is unknown, defaulting to 1000 [ 195.240696][T10163] lo speed is unknown, defaulting to 1000 [ 195.471644][T10175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.641039][T10162] lo speed is unknown, defaulting to 1000 [ 195.709425][T10188] loop3: detected capacity change from 0 to 512 [ 195.883546][T10188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 195.931512][T10191] loop5: detected capacity change from 0 to 128 [ 195.949526][T10188] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 195.970918][T10191] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 196.004170][T10191] FAT-fs (loop5): Filesystem has been set read-only [ 196.025681][T10188] EXT4-fs (loop3): 1 truncate cleaned up [ 196.034102][T10191] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 196.069879][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.120271][T10193] loop5: detected capacity change from 0 to 512 [ 196.138880][T10193] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 196.156941][T10188] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.2181: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 196.190902][ T4198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.203337][T10193] EXT4-fs (loop5): 1 truncate cleaned up [ 196.209487][T10193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.221782][T10162] lo speed is unknown, defaulting to 1000 [ 196.235180][T10193] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.2184: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 196.266330][T10188] EXT4-fs (loop3): Remounting filesystem read-only [ 196.281350][ T4198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.293559][T10193] EXT4-fs (loop5): Remounting filesystem read-only [ 196.300214][T10193] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.2184: Deleting old file: nlink 4, error=-117 [ 196.327692][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.383340][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.417163][ T4198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.472239][ T4198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.574918][T10205] lo speed is unknown, defaulting to 1000 [ 196.611291][T10213] tipc: Enabled bearer , priority 0 [ 196.633452][ T4198] bridge_slave_1: left allmulticast mode [ 196.646982][ T4198] bridge_slave_1: left promiscuous mode [ 196.657747][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.699324][ T4198] bridge_slave_0: left allmulticast mode [ 196.717715][ T4198] bridge_slave_0: left promiscuous mode [ 196.723439][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.818425][ T4198] team0: Port device geneve1 removed [ 196.923998][T10250] 9p: Invalid uid '0x00000000ffffffff' [ 196.929955][T10250] 9p: Bad value for 'rfdno' [ 196.962596][ T4198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.971938][ T4198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.992148][ T4198] bond0 (unregistering): Released all slaves [ 196.999620][T10213] syzkaller0: entered promiscuous mode [ 197.012790][T10213] syzkaller0: entered allmulticast mode [ 197.040137][ T4198] IPVS: stopping backup sync thread 4882 ... [ 197.047447][T10236] __nla_validate_parse: 7 callbacks suppressed [ 197.047464][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 197.088563][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 197.117759][T10205] lo speed is unknown, defaulting to 1000 [ 197.124425][T10244] tipc: Resetting bearer [ 197.142952][T10259] wireguard0: entered promiscuous mode [ 197.150214][T10259] wireguard0: entered allmulticast mode [ 197.214192][T10254] netlink: 'syz.6.2203': attribute type 13 has an invalid length. [ 197.249589][T10254] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.2203'. [ 197.281617][T10212] tipc: Resetting bearer [ 197.300419][T10212] tipc: Disabling bearer [ 197.329345][ T4198] hsr_slave_0: left promiscuous mode [ 197.353720][ T4198] hsr_slave_1: left promiscuous mode [ 197.367016][ T4198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.448474][ T4198] team0 (unregistering): Port device team_slave_1 removed [ 197.459147][ T4198] team0 (unregistering): Port device team_slave_0 removed [ 197.505488][T10276] smc: net device wg1 applied user defined pnetid SYZ2 [ 197.536900][T10282] loop3: detected capacity change from 0 to 512 [ 197.544231][T10282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.558037][T10282] EXT4-fs (loop3): 1 truncate cleaned up [ 197.564121][T10282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.592180][T10282] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.2208: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 197.613206][T10282] EXT4-fs (loop3): Remounting filesystem read-only [ 197.619773][T10282] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.2208: Deleting old file: nlink 4, error=-117 [ 197.719724][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 197.770759][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 197.770777][ T28] audit: type=1400 audit(1770790227.176:2630): avc: denied { write } for pid=10295 comm="syz.5.2212" name="file0" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.842455][ T28] audit: type=1400 audit(1770790227.214:2631): avc: denied { open } for pid=10295 comm="syz.5.2212" path="/328/file0" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.878490][T10301] 9p: Bad value for 'wfdno' [ 197.901813][ T28] audit: type=1400 audit(1770790227.214:2632): avc: denied { ioctl } for pid=10295 comm="syz.5.2212" path="/328/file0" dev="tmpfs" ino=1749 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.256834][ T28] audit: type=1400 audit(1770790227.625:2633): avc: denied { setattr } for pid=10325 comm="syz.5.2217" name="/" dev="configfs" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.563301][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.571951][T10340] netlink: 'syz.5.2219': attribute type 10 has an invalid length. [ 198.838206][T10358] loop3: detected capacity change from 0 to 512 [ 198.871191][T10340] žÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 198.891551][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.937753][T10365] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.953187][T10358] ext4 filesystem being mounted at /404/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.985067][T10365] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.048326][T10369] lo speed is unknown, defaulting to 1000 [ 199.132539][T10365] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.299806][T10365] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.707336][ T57] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.731865][ T57] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.770733][T10369] lo speed is unknown, defaulting to 1000 [ 199.787280][ T4198] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.815500][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.817243][ T4198] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.898338][T10409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=10409 comm=syz.6.2236 [ 199.948558][ T28] audit: type=1400 audit(1770790229.216:2634): avc: denied { connect } for pid=10415 comm="syz.3.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.019096][T10369] SELinux: Context @ is not valid (left unmapped). [ 200.032071][ T28] audit: type=1400 audit(1770790229.300:2635): avc: denied { relabelto } for pid=10368 comm="syz.5.2228" name="cgroup.stat" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 200.069793][ T28] audit: type=1400 audit(1770790229.300:2636): avc: denied { associate } for pid=10368 comm="syz.5.2228" name="cgroup.stat" dev="tmpfs" ino=1771 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 200.148687][T10437] netlink: 'syz.3.2239': attribute type 16 has an invalid length. [ 200.162860][T10437] netlink: 'syz.3.2239': attribute type 17 has an invalid length. [ 200.229557][ T28] audit: type=1400 audit(1770790229.477:2637): avc: denied { unlink } for pid=5479 comm="syz-executor" name="cgroup.stat" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 200.271026][T10437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.388919][ T28] audit: type=1400 audit(1770790229.627:2638): avc: denied { write } for pid=10448 comm="syz.3.2247" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.605867][T10455] SELinux: failed to load policy [ 200.755534][ T28] audit: type=1400 audit(1770790229.964:2639): avc: denied { lock } for pid=10457 comm="syz.4.2250" path="socket:[27147]" dev="sockfs" ino=27147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.445984][T10489] loop3: detected capacity change from 0 to 8192 [ 201.500022][T10489] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 201.510509][T10498] loop4: detected capacity change from 0 to 512 [ 201.518745][T10489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2260'. [ 201.528861][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2260'. [ 201.630849][T10498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.681434][T10498] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.698135][T10517] loop5: detected capacity change from 0 to 1024 [ 201.725592][T10517] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 201.746965][T10517] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 201.795444][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.814030][T10517] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 201.826996][T10517] EXT4-fs error (device loop5): ext4_get_journal_inode:5854: inode #32: comm syz.5.2268: iget: special inode unallocated [ 201.840527][T10517] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 201.840709][T10517] EXT4-fs (loop5): no journal found [ 201.859659][T10517] EXT4-fs (loop5): can't get journal size [ 201.867065][T10517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.895416][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.923967][T10527] netlink: 'syz.5.2272': attribute type 29 has an invalid length. [ 201.944650][T10527] netlink: 'syz.5.2272': attribute type 29 has an invalid length. [ 202.006870][T10534] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 202.006870][T10534] The task syz.4.2271 (10534) triggered the difference, watch for misbehavior. [ 202.085975][T10536] netlink: 'syz.5.2274': attribute type 7 has an invalid length. [ 202.095155][T10536] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2274'. [ 202.140665][T10538] loop5: detected capacity change from 0 to 128 [ 202.157836][T10538] syz.5.2276: attempt to access beyond end of device [ 202.157836][T10538] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 202.177836][T10538] syz.5.2276: attempt to access beyond end of device [ 202.177836][T10538] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 202.217598][T10538] syz.5.2276: attempt to access beyond end of device [ 202.217598][T10538] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 202.243290][T10538] buffer_io_error: 4 callbacks suppressed [ 202.243330][T10538] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 202.259405][T10538] syz.5.2276: attempt to access beyond end of device [ 202.259405][T10538] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 202.276381][T10538] syz.5.2276: attempt to access beyond end of device [ 202.276381][T10538] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 202.290788][T10538] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 202.304787][T10538] syz.5.2276: attempt to access beyond end of device [ 202.304787][T10538] loop5: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 202.319778][T10538] syz.5.2276: attempt to access beyond end of device [ 202.319778][T10538] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 202.334850][T10538] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 202.344390][T10538] syz.5.2276: attempt to access beyond end of device [ 202.344390][T10538] loop5: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 202.368360][T10538] syz.5.2276: attempt to access beyond end of device [ 202.368360][T10538] loop5: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 202.389879][T10538] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 202.404455][T10538] syz.5.2276: attempt to access beyond end of device [ 202.404455][T10538] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 202.423327][T10538] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 202.438885][T10538] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 202.449191][T10538] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 202.458743][T10538] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 202.467992][T10538] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 202.478610][T10538] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 202.489900][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'. [ 202.592186][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2281'. [ 202.659320][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 202.678937][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 202.724247][T10557] loop3: detected capacity change from 0 to 1024 [ 202.740406][T10557] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 202.942379][T10586] loop4: detected capacity change from 0 to 1024 [ 202.951526][T10587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2289'. [ 203.001579][T10586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.017525][T10586] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.039184][T10586] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.2292: lblock 3 mapped to illegal pblock 3 (length 3) [ 203.070451][T10586] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 203.083492][T10586] EXT4-fs (loop4): This should not happen!! Data will be lost [ 203.083492][T10586] [ 203.133600][ T57] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 203.160297][ T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 203.164026][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 203.172962][ T57] EXT4-fs (loop4): This should not happen!! Data will be lost [ 203.172962][ T57] [ 203.192417][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.267628][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 203.267648][ T28] audit: type=1326 audit(1770790232.321:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.309262][ T28] audit: type=1326 audit(1770790232.358:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.334054][ T28] audit: type=1326 audit(1770790232.358:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.357910][ T28] audit: type=1400 audit(1770790232.358:2707): avc: denied { execute } for pid=10602 comm="syz.5.2300" name="cgroup" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 203.381540][ T28] audit: type=1326 audit(1770790232.358:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.405754][ T28] audit: type=1326 audit(1770790232.358:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.433461][ T28] audit: type=1326 audit(1770790232.358:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.5.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 203.530618][T10614] loop5: detected capacity change from 0 to 164 [ 203.558016][T10617] loop3: detected capacity change from 0 to 512 [ 203.567693][T10617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.588921][T10614] rock: directory entry would overflow storage [ 203.597271][T10614] rock: sig=0x4543, size=28, remaining=18 [ 203.647667][T10617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 203.659083][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2306'. [ 203.694438][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2306'. [ 203.706779][T10617] EXT4-fs (loop3): 1 truncate cleaned up [ 203.712887][T10617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.780531][T10617] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.2304: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 203.830155][T10617] EXT4-fs (loop3): Remounting filesystem read-only [ 203.857901][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2311'. [ 203.886016][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.925622][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2314'. [ 204.018274][T10652] 9p: Bad value for 'rfdno' [ 204.241041][ T28] audit: type=1326 audit(1770790233.210:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 204.300046][ T28] audit: type=1326 audit(1770790233.210:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 204.681842][T10661] loop5: detected capacity change from 0 to 512 [ 204.699038][ T28] audit: type=1326 audit(1770790233.210:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19bf79 code=0x7ffc0000 [ 204.741387][T10661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.764916][T10661] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.936092][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.032583][T10670] loop5: detected capacity change from 0 to 512 [ 205.048349][T10670] EXT4-fs (loop5): orphan cleanup on readonly fs [ 205.061359][T10670] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 205.074986][T10670] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2323: invalid block [ 205.078563][T10672] No such timeout policy "syz1" [ 205.086497][T10670] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 205.091769][T10670] EXT4-fs (loop5): Remounting filesystem read-only [ 205.107812][T10670] EXT4-fs (loop5): 1 truncate cleaned up [ 205.109335][T10672] : renamed from veth0_to_bond (while UP) [ 205.114731][T10670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.171481][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.419375][T10689] loop5: detected capacity change from 0 to 512 [ 205.484793][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.493827][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.513086][T10689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.558060][T10689] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.668028][T10689] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.2329: corrupted inode contents [ 205.693669][T10689] EXT4-fs (loop5): Remounting filesystem read-only [ 205.734260][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.829066][T10706] loop5: detected capacity change from 0 to 512 [ 205.886698][T10706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.929939][T10706] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.047933][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.112866][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2315 sclass=netlink_route_socket pid=10719 comm=syz.2.2336 [ 206.268823][T10731] IPv6: A: Disabled Multicast RS [ 206.580158][T10764] loop5: detected capacity change from 0 to 1024 [ 206.597664][T10764] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.622092][T10764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.644563][T10764] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.668242][T10770] netlink: 'syz.6.2356': attribute type 1 has an invalid length. [ 206.683322][T10764] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.2353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 206.701416][T10770] netlink: 'syz.6.2356': attribute type 4 has an invalid length. [ 206.723084][T10764] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.723253][T10764] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2353: couldn't read orphan inode 11 (err -117) [ 206.747448][T10776] tc_dump_action: action bad kind [ 206.774654][T10764] loop5: lost filesystem error report for type 5 error -117 [ 206.775262][T10764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.807407][T10764] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2353: Invalid block bitmap block 0 in block_group 0 [ 206.823463][T10764] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.2353: Failed to acquire dquot type 0 [ 206.842973][T10764] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2353: Invalid inode bitmap blk 137438953472 in block_group 0 [ 206.879719][ T57] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 206.895214][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.244362][T10799] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.867546][T10827] __nla_validate_parse: 11 callbacks suppressed [ 207.867569][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2375'. [ 207.883609][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2375'. [ 207.898294][T10827] gretap0: entered promiscuous mode [ 207.909136][T10827] gretap0: left promiscuous mode [ 207.950070][T10831] loop5: detected capacity change from 0 to 512 [ 207.957207][T10831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.969589][T10831] EXT4-fs (loop5): 1 truncate cleaned up [ 207.975863][T10831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.006791][T10831] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.2377: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 208.027739][T10831] EXT4-fs (loop5): Remounting filesystem read-only [ 208.034397][T10831] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.2377: Deleting old file: nlink 4, error=-117 [ 208.099994][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.210516][T10839] bond3: Removing last ns target with arp_interval on [ 208.399560][T10857] netlink: 'syz.5.2385': attribute type 16 has an invalid length. [ 208.424331][T10857] netlink: 'syz.5.2385': attribute type 17 has an invalid length. [ 208.448910][T10857] lo: left allmulticast mode [ 208.468151][T10857] ..0ªî{X¹¦: left allmulticast mode [ 208.491669][T10857] bridge0: left allmulticast mode [ 208.519384][T10857] 8021q: adding VLAN 0 to HW filter on device 76žÿ [ 208.529502][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.546286][T10857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.564292][T10867] sit0: entered promiscuous mode [ 208.581319][T10867] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 208.595043][T10867] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2389'. [ 208.622393][T10870] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2390'. [ 208.741448][T10885] netlink: 'syz.3.2396': attribute type 1 has an invalid length. [ 208.903823][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 208.903846][ T28] audit: type=1400 audit(1770790237.597:2866): avc: denied { accept } for pid=10895 comm="syz.4.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.962795][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 209.006009][ T28] audit: type=1326 audit(1770790237.672:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.048871][ T28] audit: type=1326 audit(1770790237.672:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.091807][ T28] audit: type=1326 audit(1770790237.672:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.125781][ T28] audit: type=1326 audit(1770790237.672:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.151308][ T28] audit: type=1326 audit(1770790237.672:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.175342][ T28] audit: type=1326 audit(1770790237.672:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.212807][ T28] audit: type=1326 audit(1770790237.672:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.237285][ T28] audit: type=1326 audit(1770790237.672:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.261706][ T28] audit: type=1326 audit(1770790237.672:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.4.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 209.341685][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 209.663961][T10920] loop5: detected capacity change from 0 to 256 [ 209.685345][T10920] FAT-fs (loop5): Directory bread(block 64) failed [ 209.692018][T10920] FAT-fs (loop5): Directory bread(block 65) failed [ 209.699070][T10920] FAT-fs (loop5): Directory bread(block 66) failed [ 209.705922][T10920] FAT-fs (loop5): Directory bread(block 67) failed [ 209.712509][T10920] FAT-fs (loop5): Directory bread(block 68) failed [ 209.719389][T10920] FAT-fs (loop5): Directory bread(block 69) failed [ 209.727157][T10920] FAT-fs (loop5): Directory bread(block 70) failed [ 209.733718][T10920] FAT-fs (loop5): Directory bread(block 71) failed [ 209.741215][T10920] FAT-fs (loop5): Directory bread(block 72) failed [ 209.748347][T10920] FAT-fs (loop5): Directory bread(block 73) failed [ 209.771119][T10920] bio_check_eod: 18 callbacks suppressed [ 209.771137][T10920] syz.5.2407: attempt to access beyond end of device [ 209.771137][T10920] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 210.080337][T10932] vlan2: entered promiscuous mode [ 210.390957][T10947] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 210.407953][T10947] netlink: 'syz.5.2418': attribute type 21 has an invalid length. [ 210.420037][T10947] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2418'. [ 210.431197][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 211.073420][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.081939][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.233913][T10968] FAULT_INJECTION: forcing a failure. [ 211.233913][T10968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.256246][T10968] CPU: 1 UID: 0 PID: 10968 Comm: syz.3.2424 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.256293][T10968] Tainted: [W]=WARN [ 211.256300][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.256329][T10968] Call Trace: [ 211.256337][T10968] [ 211.256347][T10968] __dump_stack+0x1d/0x30 [ 211.256413][T10968] dump_stack_lvl+0x95/0xd0 [ 211.256443][T10968] dump_stack+0x15/0x1b [ 211.256469][T10968] should_fail_ex+0x263/0x280 [ 211.256519][T10968] should_fail+0xb/0x20 [ 211.256598][T10968] should_fail_usercopy+0x1a/0x20 [ 211.256627][T10968] _copy_from_user+0x1c/0xb0 [ 211.256664][T10968] ___sys_sendmsg+0xc1/0x1e0 [ 211.256728][T10968] ? path_openat+0x1b01/0x2050 [ 211.256780][T10968] __sys_sendmmsg+0x185/0x320 [ 211.256889][T10968] __x64_sys_sendmmsg+0x57/0x70 [ 211.256933][T10968] x64_sys_call+0x27aa/0x3020 [ 211.256967][T10968] do_syscall_64+0x12c/0x370 [ 211.257043][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.257073][T10968] RIP: 0033:0x7f65101ebf79 [ 211.257102][T10968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.257208][T10968] RSP: 002b:00007f650ec47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.257235][T10968] RAX: ffffffffffffffda RBX: 00007f6510465fa0 RCX: 00007f65101ebf79 [ 211.257254][T10968] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 211.257279][T10968] RBP: 00007f650ec47090 R08: 0000000000000000 R09: 0000000000000000 [ 211.257326][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.257419][T10968] R13: 00007f6510466038 R14: 00007f6510465fa0 R15: 00007fffd56e3498 [ 211.257442][T10968] [ 211.257753][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2425'. [ 211.446688][T10976] loop3: detected capacity change from 0 to 512 [ 211.453814][T10976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.479110][T10976] EXT4-fs (loop3): 1 truncate cleaned up [ 211.481909][T10970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=10970 comm=syz.2.2425 [ 211.486023][T10976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.512145][T10976] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.2426: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 211.533052][T10976] EXT4-fs (loop3): Remounting filesystem read-only [ 211.539719][T10976] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.2426: Deleting old file: nlink 4, error=-117 [ 211.590561][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.689698][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 211.700672][T10986] netlink: 'syz.2.2428': attribute type 7 has an invalid length. [ 211.709543][T10986] netlink: 'syz.2.2428': attribute type 8 has an invalid length. [ 212.625518][T11057] loop4: detected capacity change from 0 to 512 [ 212.637996][T11057] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2442: inode has both inline data and extents flags [ 212.658873][T11057] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.659017][T11057] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2442: couldn't read orphan inode 15 (err -117) [ 212.681288][T11057] loop4: lost filesystem error report for type 5 error -117 [ 212.681935][T11057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.993345][T11005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.046696][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.185515][T11111] ipvlan0: entered allmulticast mode [ 215.191226][T11111] dummy0: entered allmulticast mode [ 215.269793][T11112] lo speed is unknown, defaulting to 1000 [ 215.310885][T11112] lo speed is unknown, defaulting to 1000 [ 215.645523][T11112] xt_recent: Unsupported userspace flags (000000b1) [ 215.997423][T11115] loop5: detected capacity change from 0 to 512 [ 216.004613][T11115] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.037559][T11115] EXT4-fs (loop5): 1 truncate cleaned up [ 216.044251][T11115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.059331][T11115] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.2457: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 216.080345][T11115] EXT4-fs (loop5): Remounting filesystem read-only [ 216.087120][T11115] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.2457: Deleting old file: nlink 4, error=-117 [ 216.135834][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.200093][T11127] loop5: detected capacity change from 0 to 128 [ 216.214727][T11127] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.248001][T11127] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.669662][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 216.669705][ T28] audit: type=1400 audit(1770790244.855:2917): avc: denied { create } for pid=11144 comm="syz.3.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 216.742357][ T28] audit: type=1326 audit(1770790244.930:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.782913][ T28] audit: type=1326 audit(1770790244.930:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.821325][ T28] audit: type=1326 audit(1770790244.930:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.863368][ T28] audit: type=1326 audit(1770790244.930:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.904771][T11155] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 216.924529][ T28] audit: type=1326 audit(1770790244.930:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.955909][ T28] audit: type=1326 audit(1770790244.958:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.4.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fba34bf79 code=0x7ffc0000 [ 216.983972][ T28] audit: type=1326 audit(1770790244.958:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.6.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fd39bf79 code=0x7ffc0000 [ 217.008944][ T28] audit: type=1326 audit(1770790244.958:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.6.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64fd39bf79 code=0x7ffc0000 [ 217.025810][T11159] lo speed is unknown, defaulting to 1000 [ 217.033902][ T28] audit: type=1326 audit(1770790244.958:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.6.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fd39bf79 code=0x7ffc0000 [ 217.105905][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.114484][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.212310][T11159] lo speed is unknown, defaulting to 1000 [ 217.286728][T11174] loop4: detected capacity change from 0 to 512 [ 217.329090][T11174] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2476: inode has both inline data and extents flags [ 217.353201][T11174] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.353389][T11174] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2476: couldn't read orphan inode 15 (err -117) [ 217.443653][T11174] loop4: lost filesystem error report for type 5 error -117 [ 217.444343][T11174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.483332][T11186] __nla_validate_parse: 3 callbacks suppressed [ 217.483354][T11186] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.2478'. [ 217.545694][T11145] smc: adding net device bond0 with user defined pnetid SYZ2 [ 217.584969][T11145] smc: removing net device bond0 with user defined pnetid SYZ2 [ 217.593067][T11145] bond0 (unregistering): Released all slaves [ 217.709433][T11201] tipc: Enabling of bearer rejected, failed to enable media [ 217.914648][T11213] xt_TCPMSS: Only works on TCP SYN packets [ 217.934517][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.065747][T11234] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2495'. [ 218.091405][T11234] netlink: 'syz.2.2495': attribute type 21 has an invalid length. [ 218.110168][T11234] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2495'. [ 218.131784][T11234] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2495'. [ 218.224208][T11239] loop4: detected capacity change from 0 to 512 [ 218.342647][T11247] loop5: detected capacity change from 0 to 512 [ 218.368261][T11247] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2499: inode has both inline data and extents flags [ 218.381878][T11247] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.382042][T11247] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2499: couldn't read orphan inode 15 (err -117) [ 218.403534][T11247] loop5: lost filesystem error report for type 5 error -117 [ 218.406761][T11247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.642147][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.695078][T11258] lo speed is unknown, defaulting to 1000 [ 218.785678][T11258] lo speed is unknown, defaulting to 1000 [ 218.829821][T11265] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 218.982828][T11279] FAULT_INJECTION: forcing a failure. [ 218.982828][T11279] name failslab, interval 1, probability 0, space 0, times 0 [ 219.012136][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.5.2512 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.012177][T11279] Tainted: [W]=WARN [ 219.012186][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 219.012199][T11279] Call Trace: [ 219.012207][T11279] [ 219.012217][T11279] __dump_stack+0x1d/0x30 [ 219.012337][T11279] dump_stack_lvl+0x95/0xd0 [ 219.012431][T11279] dump_stack+0x15/0x1b [ 219.012452][T11279] should_fail_ex+0x263/0x280 [ 219.012488][T11279] should_failslab+0x8c/0xb0 [ 219.012521][T11279] kmem_cache_alloc_noprof+0x68/0x490 [ 219.012594][T11279] ? skb_clone+0x151/0x1f0 [ 219.012631][T11279] skb_clone+0x151/0x1f0 [ 219.012693][T11279] __netlink_deliver_tap+0x2c9/0x500 [ 219.012733][T11279] ? netlink_unicast+0x4c6/0x690 [ 219.012773][T11279] netlink_unicast+0x66b/0x690 [ 219.012878][T11279] netlink_sendmsg+0x5c8/0x6f0 [ 219.012913][T11279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.013020][T11279] ____sys_sendmsg+0x5af/0x600 [ 219.013068][T11279] ___sys_sendmsg+0x195/0x1e0 [ 219.013117][T11279] __x64_sys_sendmsg+0xd4/0x160 [ 219.013202][T11279] x64_sys_call+0x194c/0x3020 [ 219.013267][T11279] do_syscall_64+0x12c/0x370 [ 219.013318][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.013341][T11279] RIP: 0033:0x7f0cdc19bf79 [ 219.013357][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.013381][T11279] RSP: 002b:00007f0cdabf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.013471][T11279] RAX: ffffffffffffffda RBX: 00007f0cdc415fa0 RCX: 00007f0cdc19bf79 [ 219.013489][T11279] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 219.013565][T11279] RBP: 00007f0cdabf7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.013577][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.013590][T11279] R13: 00007f0cdc416038 R14: 00007f0cdc415fa0 R15: 00007ffeb1461eb8 [ 219.013679][T11279] [ 219.291855][T11286] netlink: 'syz.4.2515': attribute type 39 has an invalid length. [ 219.338465][T11286] hsr_slave_1 (unregistering): left promiscuous mode [ 219.373844][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2519'. [ 219.379480][T11292] lo speed is unknown, defaulting to 1000 [ 219.447267][T11292] lo speed is unknown, defaulting to 1000 [ 219.502338][T11308] Cannot find del_set index 2 as target [ 219.568324][T11319] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2527'. [ 219.585283][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2527'. [ 219.663628][T11332] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 219.743055][T11344] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2536'. [ 220.227017][T11369] process '/newroot/253/file0' started with executable stack [ 220.284711][T11380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.386576][T11380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.438625][T11387] 9p: Bad value for 'wfdno' [ 220.472256][T11380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.548739][T11380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.619722][ T4198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.645925][ T4198] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.672234][ T4198] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.700446][ T4198] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.861409][T11384] syz.4.2551 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 220.927219][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.4.2551 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.927320][T11384] Tainted: [W]=WARN [ 220.927330][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 220.927347][T11384] Call Trace: [ 220.927356][T11384] [ 220.927366][T11384] __dump_stack+0x1d/0x30 [ 220.927414][T11384] dump_stack_lvl+0x95/0xd0 [ 220.927443][T11384] dump_stack+0x15/0x1b [ 220.927530][T11384] dump_header+0x80/0x240 [ 220.927606][T11384] oom_kill_process+0x295/0x350 [ 220.927646][T11384] out_of_memory+0x97d/0xb80 [ 220.927731][T11384] try_charge_memcg+0x62e/0xa10 [ 220.927781][T11384] obj_cgroup_charge_pages+0x23/0xc0 [ 220.927809][T11384] __memcg_kmem_charge_page+0x9e/0x170 [ 220.927902][T11384] __alloc_frozen_pages_noprof+0x18a/0x350 [ 220.928007][T11384] alloc_pages_mpol+0xb3/0x260 [ 220.928037][T11384] alloc_pages_noprof+0x8f/0x130 [ 220.928065][T11384] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 220.928202][T11384] __kvmalloc_node_noprof+0x471/0x680 [ 220.928245][T11384] ? ip_set_alloc+0x24/0x30 [ 220.928302][T11384] ? ip_set_alloc+0x24/0x30 [ 220.928341][T11384] ip_set_alloc+0x24/0x30 [ 220.928379][T11384] hash_netiface_create+0x282/0x740 [ 220.928434][T11384] ? __pfx_hash_netiface_create+0x10/0x10 [ 220.928513][T11384] ip_set_create+0x3cf/0x970 [ 220.928572][T11384] ? __nla_parse+0x40/0x60 [ 220.928614][T11384] nfnetlink_rcv_msg+0x509/0x5d0 [ 220.928687][T11384] netlink_rcv_skb+0x123/0x220 [ 220.928726][T11384] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.928823][T11384] nfnetlink_rcv+0x167/0x1720 [ 220.928852][T11384] ? __rcu_read_unlock+0x4e/0x70 [ 220.928890][T11384] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 220.928926][T11384] ? __rcu_read_unlock+0x4e/0x70 [ 220.929040][T11384] ? sock_def_readable+0xaf/0x190 [ 220.929070][T11384] ? netlink_sendskb+0x104/0x150 [ 220.929180][T11384] ? netlink_unicast+0x2a2/0x690 [ 220.929213][T11384] ? tracing_gen_ctx_irq_test+0xe4/0x120 [ 220.929317][T11384] ? __rcu_read_unlock+0x4e/0x70 [ 220.929378][T11384] ? perf_tp_event+0x161f/0x1660 [ 220.929400][T11384] ? perf_trace_kmem_cache_free+0x55/0x160 [ 220.929427][T11384] ? skb_release_data+0x3a2/0x490 [ 220.929470][T11384] ? _raw_spin_lock_bh+0x56/0xb0 [ 220.929547][T11384] ? should_fail_ex+0x30/0x280 [ 220.929583][T11384] ? __netlink_lookup+0xfd/0x2b0 [ 220.929608][T11384] ? __rcu_read_unlock+0x33/0x70 [ 220.929643][T11384] ? __netlink_lookup+0x276/0x2b0 [ 220.929744][T11384] netlink_unicast+0x5c0/0x690 [ 220.929788][T11384] netlink_sendmsg+0x5c8/0x6f0 [ 220.929836][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.929893][T11384] ____sys_sendmsg+0x5af/0x600 [ 220.929953][T11384] ___sys_sendmsg+0x195/0x1e0 [ 220.930014][T11384] __x64_sys_sendmsg+0xd4/0x160 [ 220.930063][T11384] x64_sys_call+0x194c/0x3020 [ 220.930167][T11384] do_syscall_64+0x12c/0x370 [ 220.930203][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.930232][T11384] RIP: 0033:0x7f1fba34bf79 [ 220.930252][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.930277][T11384] RSP: 002b:00007f1fb8da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.930371][T11384] RAX: ffffffffffffffda RBX: 00007f1fba5c5fa0 RCX: 00007f1fba34bf79 [ 220.930390][T11384] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 220.930408][T11384] RBP: 00007f1fba3e27e0 R08: 0000000000000000 R09: 0000000000000000 [ 220.930425][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.930498][T11384] R13: 00007f1fba5c6038 R14: 00007f1fba5c5fa0 R15: 00007fff051f5d18 [ 220.930522][T11384] [ 221.314176][T11384] memory: usage 218520kB, limit 307200kB, failcnt 1835 [ 221.325919][T11384] memory+swap: usage 202468kB, limit 9007199254740988kB, failcnt 0 [ 221.345082][T11384] kmem: usage 168724kB, limit 9007199254740988kB, failcnt 0 [ 221.353236][T11384] Memory cgroup stats for /syz4: [ 221.353579][T11384] cache 524288 [ 221.411157][T11402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2558'. [ 221.455302][T11384] rss 61440 [ 221.458475][T11384] shmem 0 [ 221.461439][T11384] mapped_file 65536 [ 221.466380][T11384] dirty 0 [ 221.469505][T11384] writeback 0 [ 221.472873][T11384] workingset_refault_anon 47 [ 221.477910][T11384] workingset_refault_file 395 [ 221.488576][T11384] swap 569344 [ 221.491999][T11384] swapcached 98304 [ 221.496598][T11384] pgpgin 192804 [ 221.500253][T11384] pgpgout 192643 [ 221.503883][T11384] pgfault 149702 [ 221.508129][T11384] pgmajfault 31 [ 221.511955][T11384] inactive_anon 0 [ 221.515876][T11384] active_anon 126976 [ 221.521048][T11384] inactive_file 0 [ 221.525268][T11384] active_file 532480 [ 221.570027][T11384] unevictable 0 [ 221.574129][T11384] hierarchical_memory_limit 314572800 [ 221.579690][T11384] hierarchical_memsw_limit 9223372036854771712 [ 221.586328][T11384] total_cache 524288 [ 221.590297][T11384] total_rss 61440 [ 221.594249][T11384] total_shmem 0 [ 221.597789][T11384] total_mapped_file 65536 [ 221.602411][T11384] total_dirty 0 [ 221.605992][T11384] total_writeback 0 [ 221.609963][T11384] total_workingset_refault_anon 47 [ 221.638115][T11384] total_workingset_refault_file 395 [ 221.643426][T11384] total_swap 569344 [ 221.647854][T11384] total_swapcached 98304 [ 221.664978][T11384] total_pgpgin 192804 [ 221.675084][T11384] total_pgpgout 192643 [ 221.686429][T11384] total_pgfault 149702 [ 221.696436][T11384] total_pgmajfault 31 [ 221.712888][T11384] total_inactive_anon 0 [ 221.717139][T11384] total_active_anon 126976 [ 221.745475][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2559'. [ 221.762872][T11384] total_inactive_file 0 [ 221.769952][T11384] total_active_file 532480 [ 221.783979][T11384] total_unevictable 0 [ 221.788025][T11384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2024,pid=9761,uid=0 [ 221.833038][T11384] Memory cgroup out of memory: Killed process 9761 (syz.4.2024) total-vm:98524kB, anon-rss:1280kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 221.967870][T11433] siw: device registration error -23 [ 222.034846][T11439] netlink: 'syz.5.2576': attribute type 1 has an invalid length. [ 222.064293][T11439] loop5: detected capacity change from 0 to 512 [ 222.071134][T11439] EXT4-fs: Ignoring removed oldalloc option [ 222.105885][T11439] EXT4-fs (loop5): 1 truncate cleaned up [ 222.115498][T11439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.156252][T11439] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2576: invalid indirect mapped block 234881024 (level 0) [ 222.175468][T11439] EXT4-fs (loop5): Remounting filesystem read-only [ 222.201502][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.306752][T11458] loop5: detected capacity change from 0 to 512 [ 222.345216][T11460] FAULT_INJECTION: forcing a failure. [ 222.345216][T11460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.372379][T11460] CPU: 1 UID: 0 PID: 11460 Comm: syz.4.2583 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.372427][T11460] Tainted: [W]=WARN [ 222.372463][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 222.372488][T11460] Call Trace: [ 222.372498][T11460] [ 222.372509][T11460] __dump_stack+0x1d/0x30 [ 222.372542][T11460] dump_stack_lvl+0x95/0xd0 [ 222.372633][T11460] dump_stack+0x15/0x1b [ 222.372657][T11460] should_fail_ex+0x263/0x280 [ 222.372696][T11460] should_fail+0xb/0x20 [ 222.372728][T11460] should_fail_usercopy+0x1a/0x20 [ 222.372817][T11460] _copy_to_user+0x20/0xa0 [ 222.372862][T11460] simple_read_from_buffer+0xb5/0x130 [ 222.372962][T11460] proc_fail_nth_read+0x10e/0x150 [ 222.372985][T11460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.373005][T11460] vfs_read+0x1ab/0x7f0 [ 222.373045][T11460] ? sg_ioctl+0xb62/0x1350 [ 222.373096][T11460] ksys_read+0xdc/0x1a0 [ 222.373190][T11460] __x64_sys_read+0x40/0x50 [ 222.373221][T11460] x64_sys_call+0x2886/0x3020 [ 222.373257][T11460] do_syscall_64+0x12c/0x370 [ 222.373322][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.373345][T11460] RIP: 0033:0x7f1fba30c84e [ 222.373361][T11460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.373379][T11460] RSP: 002b:00007f1fb8da6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.373493][T11460] RAX: ffffffffffffffda RBX: 00007f1fb8da76c0 RCX: 00007f1fba30c84e [ 222.373516][T11460] RDX: 000000000000000f RSI: 00007f1fb8da70a0 RDI: 0000000000000004 [ 222.373531][T11460] RBP: 00007f1fb8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.373549][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.373565][T11460] R13: 00007f1fba5c6038 R14: 00007f1fba5c5fa0 R15: 00007fff051f5d18 [ 222.373635][T11460] [ 222.673882][T11467] loop5: detected capacity change from 0 to 512 [ 222.694696][T11467] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.715320][T11467] EXT4-fs (loop5): 1 truncate cleaned up [ 222.721445][T11467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.778433][T11467] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 222.801111][T11467] program syz.5.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.971911][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.470529][T11485] netlink: 'syz.6.2593': attribute type 5 has an invalid length. [ 223.735869][T11498] loop5: detected capacity change from 0 to 512 [ 223.790986][T11498] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2599: inode has both inline data and extents flags [ 223.848501][T11498] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.858255][T11498] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2599: couldn't read orphan inode 15 (err -117) [ 223.945704][T11498] loop5: lost filesystem error report for type 5 error -117 [ 223.946320][T11498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.974108][T11515] __nla_validate_parse: 1 callbacks suppressed [ 223.974129][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 224.051582][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 224.112298][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 224.112343][ T28] audit: type=1400 audit(1770790257.808:2977): avc: denied { mount } for pid=11522 comm="syz.6.2610" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 224.317970][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.387703][T11538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11538 comm=syz.2.2617 [ 224.433960][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2614'. [ 224.434168][T11538] batadv_slave_0: entered promiscuous mode [ 224.486954][T11540] netlink: 4532 bytes leftover after parsing attributes in process `syz.5.2614'. [ 224.563926][T11545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2315 sclass=netlink_route_socket pid=11545 comm=syz.5.2614 [ 224.769512][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2618'. [ 224.807953][T11547] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2618'. [ 224.850311][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2618'. [ 225.082627][ T8731] IPVS: starting estimator thread 0... [ 225.094826][T11555] loop5: detected capacity change from 0 to 512 [ 225.118080][T11555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.143646][T11555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.188293][T11555] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.205047][T11556] IPVS: using max 2448 ests per chain, 122400 per kthread [ 225.240021][T11555] EXT4-fs (loop5): shut down requested (2) [ 225.262877][T11537] batadv_slave_0: left promiscuous mode [ 225.445591][T11579] loop3: detected capacity change from 0 to 512 [ 225.472416][ T5479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.528864][ T28] audit: type=1400 audit(1770790259.146:2978): avc: denied { create } for pid=11582 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 225.701057][T11593] loop3: detected capacity change from 0 to 4096 [ 225.737772][T11593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.836846][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.991109][T11604] tmpfs: Bad value for 'mpol' [ 225.999054][T11604] loop4: detected capacity change from 0 to 128 [ 226.019566][T11605] lo speed is unknown, defaulting to 1000 [ 226.025614][T11604] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 226.060922][T11604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.074957][T11604] ext2 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.148886][T11605] lo speed is unknown, defaulting to 1000 [ 226.214422][ T3309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 226.225929][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 226.225972][ T3309] Tainted: [W]=WARN [ 226.225981][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 226.226061][ T3309] Call Trace: [ 226.226069][ T3309] [ 226.226077][ T3309] __dump_stack+0x1d/0x30 [ 226.226105][ T3309] dump_stack_lvl+0x95/0xd0 [ 226.226133][ T3309] dump_stack+0x15/0x1b [ 226.226211][ T3309] dump_header+0x80/0x240 [ 226.226239][ T3309] oom_kill_process+0x295/0x350 [ 226.226276][ T3309] out_of_memory+0x97d/0xb80 [ 226.226316][ T3309] try_charge_memcg+0x62e/0xa10 [ 226.226428][ T3309] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 226.226483][ T3309] __read_swap_cache_async+0x17b/0x2d0 [ 226.226512][ T3309] swap_cluster_readahead+0x262/0x3c0 [ 226.226543][ T3309] swapin_readahead+0xde/0x840 [ 226.226601][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 226.226727][ T3309] ? __perf_event_task_sched_in+0xa65/0xad0 [ 226.226767][ T3309] ? __list_add_valid_or_report+0x38/0xe0 [ 226.226788][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 226.226831][ T3309] ? swap_cache_get_folio+0x26f/0x280 [ 226.226856][ T3309] do_swap_page+0x59b/0x2a50 [ 226.226904][ T3309] ? _raw_spin_unlock+0x9/0x30 [ 226.227027][ T3309] ? __rcu_read_lock+0x36/0x50 [ 226.227066][ T3309] ? __pfx_default_wake_function+0x10/0x10 [ 226.227186][ T3309] handle_mm_fault+0xb40/0x3030 [ 226.227218][ T3309] ? vma_start_read+0x1c7/0x2c0 [ 226.227266][ T3309] do_user_addr_fault+0x62f/0x1050 [ 226.227355][ T3309] exc_page_fault+0x62/0xa0 [ 226.227385][ T3309] asm_exc_page_fault+0x26/0x30 [ 226.227570][ T3309] RIP: 0033:0x7f8c59d57197 [ 226.227591][ T3309] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 226.227616][ T3309] RSP: 002b:00007ffdd1b5c250 EFLAGS: 00010202 [ 226.227637][ T3309] RAX: 0000000000000000 RBX: 000055558b7ad500 RCX: 00007f8c59d57197 [ 226.227698][ T3309] RDX: 00007ffdd1b5c290 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.227715][ T3309] RBP: 00007ffdd1b5c2fc R08: 0000000000000000 R09: 0000000000000000 [ 226.227731][ T3309] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 226.227747][ T3309] R13: 00000000000927c0 R14: 0000000000035a31 R15: 00007ffdd1b5c350 [ 226.227771][ T3309] [ 226.461181][ T3309] memory: usage 303812kB, limit 307200kB, failcnt 3308 [ 226.468522][ T3309] memory+swap: usage 365068kB, limit 9007199254740988kB, failcnt 0 [ 226.488318][ T3309] kmem: usage 267568kB, limit 9007199254740988kB, failcnt 0 [ 226.508372][ T3309] Memory cgroup stats for /syz2: [ 226.508720][ T3309] cache 0 [ 226.524911][ T3309] rss 61440 [ 226.534231][ T3309] shmem 0 [ 226.549473][ T3309] mapped_file 0 [ 226.567095][ T3309] dirty 0 [ 226.570137][ T3309] writeback 28672 [ 226.582601][ T3309] workingset_refault_anon 3139 [ 226.590128][ T3309] workingset_refault_file 4375 [ 226.595041][ T3309] swap 67764224 [ 226.598675][ T3309] swapcached 73728 [ 226.602411][ T3309] pgpgin 284416 [ 226.606352][ T3309] pgpgout 284390 [ 226.610024][ T3309] pgfault 187345 [ 226.613672][ T3309] pgmajfault 565 [ 226.617758][ T3309] inactive_anon 28672 [ 226.621817][ T3309] active_anon 73728 [ 226.625742][ T3309] inactive_file 0 [ 226.632975][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.648557][ T3309] active_file 0 [ 226.653328][ T3309] unevictable 0 [ 226.656968][ T3309] hierarchical_memory_limit 314572800 [ 226.695724][ T3309] hierarchical_memsw_limit 9223372036854771712 [ 226.702382][ T3309] total_cache 0 [ 226.705861][ T3309] total_rss 61440 [ 226.709518][ T3309] total_shmem 0 [ 226.744516][ T3309] total_mapped_file 0 [ 226.748547][ T3309] total_dirty 0 [ 226.760353][ T3309] total_writeback 28672 [ 226.764667][ T3309] total_workingset_refault_anon 3139 [ 226.779596][ T3309] total_workingset_refault_file 4375 [ 226.784934][ T3309] total_swap 67764224 [ 226.789475][ T3309] total_swapcached 73728 [ 226.793739][ T3309] total_pgpgin 284416 [ 226.797754][ T3309] total_pgpgout 284390 [ 226.802112][ T3309] total_pgfault 187345 [ 226.806298][ T3309] total_pgmajfault 565 [ 226.809060][ T28] audit: type=1400 audit(1770790260.343:2979): avc: denied { connect } for pid=11630 comm="syz.5.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.823194][ T3309] total_inactive_anon 28672 [ 226.862648][ T3309] total_active_anon 73728 [ 226.877120][ T3309] total_inactive_file 0 [ 226.888452][ T28] audit: type=1400 audit(1770790260.418:2980): avc: denied { bind } for pid=11633 comm="syz.4.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 226.894657][ T3309] total_active_file 0 [ 226.919566][ T3309] total_unevictable 0 [ 226.926643][ T3309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2634,pid=11594,uid=0 [ 226.942471][T11636] sctp: [Deprecated]: syz.4.2647 (pid 11636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.942471][T11636] Use struct sctp_sack_info instead [ 226.957704][ T3309] Memory cgroup out of memory: Killed process 11594 (syz.2.2634) total-vm:94156kB, anon-rss:1348kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 227.029115][T11636] loop4: detected capacity change from 0 to 764 [ 227.060002][T11636] iso9660: Unknown parameter 'iocharsturkish' [ 227.222864][T11644] loop3: detected capacity change from 0 to 512 [ 227.280369][T11644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.321820][T11644] ext4 filesystem being mounted at /460/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.610904][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.830083][T11670] Cannot find del_set index 2 as target [ 228.049801][T11685] ================================================================== [ 228.057954][T11685] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 228.066582][T11685] [ 228.068938][T11685] write to 0xffff888107636fa8 of 8 bytes by task 11684 on cpu 1: [ 228.076696][T11685] shmem_file_splice_read+0x470/0x600 [ 228.082268][T11685] splice_direct_to_actor+0x26e/0x670 [ 228.087810][T11685] do_splice_direct+0x119/0x1a0 [ 228.092735][T11685] do_sendfile+0x382/0x650 [ 228.097206][T11685] __x64_sys_sendfile64+0x105/0x150 [ 228.102460][T11685] x64_sys_call+0x2dc4/0x3020 [ 228.107195][T11685] do_syscall_64+0x12c/0x370 [ 228.111930][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.117871][T11685] [ 228.120314][T11685] write to 0xffff888107636fa8 of 8 bytes by task 11685 on cpu 0: [ 228.128065][T11685] shmem_file_splice_read+0x470/0x600 [ 228.133474][T11685] splice_direct_to_actor+0x26e/0x670 [ 228.138894][T11685] do_splice_direct+0x119/0x1a0 [ 228.143779][T11685] do_sendfile+0x382/0x650 [ 228.148235][T11685] __x64_sys_sendfile64+0x105/0x150 [ 228.153472][T11685] x64_sys_call+0x2dc4/0x3020 [ 228.158200][T11685] do_syscall_64+0x12c/0x370 [ 228.162818][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.168999][T11685] [ 228.171344][T11685] value changed: 0x000000000040e000 -> 0x00000000001d3000 [ 228.178471][T11685] [ 228.180897][T11685] Reported by Kernel Concurrency Sanitizer on: [ 228.188220][T11685] CPU: 0 UID: 0 PID: 11685 Comm: syz.5.2662 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.199215][T11685] Tainted: [W]=WARN [ 228.203111][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 228.213377][T11685] ================================================================== [ 228.235164][T11687] loop3: detected capacity change from 0 to 512 [ 228.246663][T11687] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 228.259135][T11687] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 228.269080][T11687] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 228.295993][T11687] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 228.307370][T11687] System zones: 0-2, 18-18, 34-35 [ 228.313321][T11687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.343174][T11687] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 228.377363][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.