last executing test programs: 2m9.604017709s ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x50) (fail_nth: 4) 2m9.389635486s ago: executing program 3 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/2186], 0x8d0) sendto$inet6(r1, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) syz_emit_ethernet(0x76, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xa}, 0x100200, 0x0, 0x0, 0x2, 0x80000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) (async) syz_usb_disconnect(r4) ioctl$EVIOCRMFF(r4, 0x5509, 0x0) (async) ioctl$EVIOCRMFF(r4, 0x5509, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.622024542s ago: executing program 3 (id=555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002dbd7000fedbdf2523000000050028006923f8f605002300ee00000005002600290000000500250000000000050028006f00000005002100050000000a0001007770616e340000000a0001007770616e340000000500231de47fe418778cb4d188c8b868cf001000000005002100fe000000"], 0x6c}}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r4, 0x0, r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x14, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x4004044) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYRESDEC=r0], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r9 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402"], 0x0, 0x4e}, 0x20) poll(&(0x7f0000000a40)=[{r9, 0x2}], 0x1, 0x7f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000c14000326bd7000fddbdf25080009d2ffffffffffff0300000000000800030001000000080001000100000008003d00050000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) r12 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) fchown(r12, 0x0, 0xee01) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10140000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 2m6.992944885s ago: executing program 3 (id=569): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000400)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@flushsa={0x1ac, 0x1c, 0x100, 0x70bd28, 0x25dfdbfd, {0x32}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @policy_type={0xa, 0x10, {0x1}}, @algo_aead={0x72, 0x12, {{'aegis128-generic\x00'}, 0x130, 0x60, "2a4316f2bfb42ff2893ae1b4cd2e75c4ea66ef6db71e9d8c834aaa9c6065ff07cf47103983dd"}}, @sec_ctx={0xcd, 0x8, {0xc9, 0x8, 0xb283fdb06a8a4f79, 0x2, 0xc1, "ead347c4f63ed43ab095a9030c6a6e91ecaa15e9093d6a0d940e6546a3299c3a21dbd8704e1f78ada87c101a3c1b7619e768a6f4accec3a2687f16b68746e29bb58399c964c60e8423ad48593503cdbccdac8c0ab4e497ed36b8fb2ede79305aa94781584ee4b859393b0af5af82c86225623c6cad50791491ece85207490989d405734fe6249cd55dad6346b2083dd42129dbd10612b421afc1bab207a74dcf1380ceba3532213dbc860a0a8daedeb9750b39b8e71ddd421a35a76c33edfe76a7"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd26, 0x70bd2a, 0x70bd28, 0x6, [0x0, 0x5, 0x5]}}, @offload={0xc, 0x1c, {r0, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x884}, 0x4048000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x11}, 0x0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x36, "465dbafbe40bc7bfcae77ab068000c0c129ba18d710d015e83e79e0b355c1604526cba5f90c8de189d5f50c49fa1ab529855fb1f71d0"}, &(0x7f0000000140)=0x3e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x6}, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3183a1ffffff00000000190400000c000180080003"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) ioperm(0xfffffffffffffff9, 0xe82, 0x0) socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/:*/\x00', 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x50, 0x43, 0x46, 0x50]}, 0x5f) socket$inet_sctp(0x2, 0x1, 0x84) 2m6.717158924s ago: executing program 3 (id=572): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 2m4.07279273s ago: executing program 3 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB, @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m3.841140718s ago: executing program 32 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB, @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 51.269824836s ago: executing program 1 (id=1084): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x10404e, 0x0, 0x1000, 0x0, 0x40000000000006, 0x2008001, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) capset(0x0, &(0x7f0000000040)={0x1002, 0xfffff05b, 0xfffffffd, 0x0, 0x0, 0x8}) fcntl$setpipe(r0, 0x407, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf251b00000004001900080015000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x24004040) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r5 = getpgid(0x0) ptrace(0x4208, r5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="af5b2b403583b90ac34fc80e07ed438d922a8f1efe4ffc8c09dc9a67e611592eff1562741108e51f77c5837d68ac07976f2467b65455c30e7b4345da3bce36", 0x3f, 0x800, 0x0, 0x0) 50.937388727s ago: executing program 1 (id=1087): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) 50.913216278s ago: executing program 1 (id=1089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@noblock_validity}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x46b, &(0x7f00000006c0)="$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") socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/tcp6\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$l2tp6(0xa, 0x2, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) r0 = socket$kcm(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) sendmsg$inet(r0, 0x0, 0x200048cc) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 47.775660081s ago: executing program 1 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) socket(0x2b, 0x1, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x0) 46.960332137s ago: executing program 1 (id=1101): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x200000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 46.960083427s ago: executing program 1 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2bc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x20004001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 31.85764476s ago: executing program 33 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2bc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x20004001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 18.023924752s ago: executing program 6 (id=1328): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_open(0x0, 0x42, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x40080, 0x1) getdents64(r3, &(0x7f0000000680)=""/4096, 0x1000) socket(0x10, 0x3, 0x0) 11.225670043s ago: executing program 6 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0xfff5, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "1fbabd"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 10.381902331s ago: executing program 6 (id=1364): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 8.57308781s ago: executing program 6 (id=1365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 8.388974236s ago: executing program 6 (id=1366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x42, 0x115) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) 7.988729929s ago: executing program 2 (id=1370): r0 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, 0x0) 7.986592699s ago: executing program 6 (id=1371): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_open(0x0, 0x42, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x40080, 0x1) getdents64(r3, &(0x7f0000000680)=""/4096, 0x1000) socket(0x10, 0x3, 0x0) 7.884421743s ago: executing program 5 (id=1372): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000300)={[{@auto_da_alloc}, {@bh}]}, 0x0, 0x4e1, &(0x7f0000000880)="$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") r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x42, 0x115) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x8, 0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 7.065925549s ago: executing program 2 (id=1374): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x10}, {0x2, 0xfff3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x220410d0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a0500070000002cbd7000fddb011005001a0700000001000000000000000000000000200100000000000000000000000000022800108a"], 0x38}}, 0x40004) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4004, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x200003, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x98d, 0x3faa, 0x10001, 0x6, 0x1, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x8, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, r0, 0x0) r9 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x1, 0x2}) io_uring_enter(r9, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 5.652945176s ago: executing program 2 (id=1378): socket$kcm(0x21, 0x2, 0x2) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x1ff, 0x3, 0x42, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c0014b6465185d4278eddd5411721b3218ef383baeb46d91a33"]) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x2000000000000216, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unshare(0x8000000) r9 = semget(0x1, 0x4, 0x3c4) semtimedop(r9, &(0x7f0000000000)=[{0x3, 0xd, 0x1000}, {0x3, 0x2}, {0x2, 0x25b0, 0x800}], 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24000800) unshare(0x48020400) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000200f00000f000000ff010000000002004b99749372e59bb68c1bd18713eae6e648bf2a9406e6bc4cf2ba02449d6d7975eb338f2741a8a12ad8ab6b9666b98977a1570e262e37813831fc2aac8944f5836883f6498fb80deed87f9a502de5e48c75456bbcb6f21a4a90dc280f316c62bcb084333d90ade5c1", @ANYRES32, @ANYBLOB="1a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000300"/28], 0x50) 4.710474146s ago: executing program 5 (id=1379): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000002006fffe8000000000000000000000160000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex_waitv(0x0, 0x0, 0xca9a3b, 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@noauto_da_alloc}, {@bsdgroups}]}, 0x3, 0x467, &(0x7f0000000a40)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000000ec0)={[{@nofavordynmods}, {}, {@cpuset_v2_mode}, {@xattr}, {@clone_children}]}) geteuid() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.993752709s ago: executing program 2 (id=1383): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x487, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x200, 0x6, 0x1, 0x7, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.439117018s ago: executing program 0 (id=1384): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x700, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x503, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) listen(0xffffffffffffffff, 0xfffffffd) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x100800) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0xffe8, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffefc, 0x80, 0x4, 0x359}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.884928786s ago: executing program 0 (id=1385): io_uring_setup(0x89c, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) listen(0xffffffffffffffff, 0x4) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xfd05, &(0x7f00000000c0)}}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pwritev(r5, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)="6143bf0a", 0x4}], 0x2, 0xfffffff4, 0xfffffffd) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000001080)=0x2, 0x4) socket$kcm(0xa, 0x1, 0x106) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x8000000000000000) socket(0x10, 0x3, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, 0x0, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900), 0x0, 0x0) setsockopt$inet_buf(r8, 0x0, 0x2c, 0x0, 0x0) ppoll(&(0x7f0000001100)=[{r6, 0x240}, {r1, 0x24f5}, {0xffffffffffffffff, 0x21e5}], 0x3, 0x0, &(0x7f0000001140)={[0x784]}, 0x8) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) 2.806554778s ago: executing program 4 (id=1386): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) 2.775104219s ago: executing program 0 (id=1387): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/109, 0x6d}], 0x1, &(0x7f00000006c0)=""/217, 0xd9}, 0x5}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x3673}], 0x2, 0x2061, 0x0) 2.680999393s ago: executing program 0 (id=1388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x88800) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x101, 0x40000000}}, './file1\x00'}) recvmsg$unix(r2, &(0x7f0000001ec0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/6, 0x6}, {&(0x7f0000001b00)=""/15, 0xf}, {&(0x7f0000001b40)=""/18, 0x12}, {&(0x7f0000001b80)=""/205, 0xcd}, {&(0x7f0000001c80)=""/1, 0x1}, {&(0x7f0000001cc0)=""/26, 0x1a}], 0x9, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x12063) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.656284103s ago: executing program 4 (id=1389): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800840, &(0x7f0000000540), 0xfd, 0x236, &(0x7f0000000300)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x484c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x80003, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x13f, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001, 0xa, 0x810}, 0x48) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000880)={[{@dots}, {@fat=@check_strict}, {@fat=@uid={'uid', 0x3d, r6}}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@dots}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@flush}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x91}}, {@nodots}, {@fat=@check_strict}]}, 0x1, 0x249, &(0x7f0000000c80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@sg0, r6, &(0x7f0000000300)) write$P9_RSTATu(r4, &(0x7f00000000c0)={0x53, 0x7d, 0x1, {{0x0, 0x3d, 0x95, 0x9, {0x20, 0x3, 0x1}, 0x10000, 0x2c, 0xeccc37e, 0x1ff, 0x4, 'GPL\x00', 0x1, '\x00', 0x4, 'GPL\x00', 0x1, '$'}, 0x1, '\x00', r5, 0xee01, r6}}, 0x53) 2.308608735s ago: executing program 4 (id=1390): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000300)={[{@auto_da_alloc}, {@bh}]}, 0x0, 0x4e1, &(0x7f0000000880)="$eJzs3E1oHFUcAPD/bDZJvxNr/WitNlrB4kfSpFULCn6A4EFPeqgXJSZpqU0baSK0JdhUil4ELXgXwUtRPIsnPSh69qoHb1Io0kurIKxMZmbdJLuTNM1Hm/x+MO287Jt577/vvdk3MzsbwLrVk/6TRGyJiN8ioisiKo0ZNmZLmu/61cmhv69ODiVRq732V5JuFteuTg4VWZP8/81ZopruqHIhieeblDt+5uzxwdHRkVN5um/ixLt942fOPnHsxODRkaMjJwcOHTp4oP/ppwaeLKv+pYXGmdbp2q73x3bvfPmNi68OHb749i9fJxGbitcb47hJz3TVVyfr70nk723h/BIVdqvY2rCeVFexItyQzohIm6t9evx3RduFbfXXuuKlD1psNrViFQSWTa1Wqw20fnmqBqxhSSxmq7b82AHcvooP+vT8t1hWaOpxS7jyQnYClMZ9PV+yV6rZdZDO7Nxo6zKV3xMRh6f++Txd4oavQ7QvU60AgLXs+3T+83iT+V814u6GfNvy+xfdEXFHRGyPiDsjYkdE3BVZ3nsi4t7mxfS81aL8nlnpufOfyuWmG3YsOMRS6fzv2fze1sz5X/0uWHdbnto6HX97cuTY6Mj+/D3ZF+2dabq/6d6T/Er5r5+0Kr9x/pcuafnFXDArtXK52jkz6uHBicGliT7iyvmIXdVm8SdR/T+K2BkRuxZZxrFHL+2e+Ze2+lp5/PNYgvtMtS8iHsnafypmxV9Iyu9P9m2I0ZH9fUWvmGNjWflZ/JUoj790Fzclbf9Nzfr/c8kfP2ZZupPG+7Xjc3Yx70j88PePWp7TzN/+M/r/tLT/dySvzyj89ODExKn+iI7klbl/b7jAXaRPD381nT+Nf9/e5uN/e75NGv99EZF24vsj4oGI2JPX/cGIeCgi9pbE//OLD7/TMv49C+//y3HTLY1/uOnxr97/Z7X/DaxsyPdw/KfvWhQ/VW//osGatv/BIjFdqYUc/0rr9W9JbwYAAIA1qBIRWyKp9NbXK5Xe3uz78jtiU2V0bHzisSNj750czp4R6I72SnGlq6vhemh/fm24SA/k6XN5+kB+3fizto3T6d6hsdHh1Q4e1rnNLcZ/6s+21a4dsOzm3Eerda1ORYAV53lNWL8WP/4dOeB2N3sUfzMzWVnJugAry6c4rF/Nxv+5xkQS2bfkgTXH5z+sX/Xx/+kCMjc87jX74U3g9lP2+e+rALC2mf/DurSo5/oXuRLJ2eN5sVPlmX94M8u2gD3HlxHleZIVC3ApVz6+mc2r7d/m07blq2FUlmY/Sf5DEwveKm3ujlVplIG2iFXsEtXyX7VoGGhnauda5yl+ynKe/az8sQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA5/BcAAP//p/zL3w==") r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x42, 0x115) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x8, 0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 2.093091422s ago: executing program 5 (id=1391): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000100)}, {&(0x7f00000001c0)="fbfa99a24b3eac7dec2cb1615fdde48e8f3b0be80d2f28274bee03e31b24d034e90fa66e1739cdde055ecdca5b1ff6f340efe98f", 0x34}, {&(0x7f0000000380)="5ea8865e28104b6830830b57a15e7fd3cbf4866b80e360277351ead6915c85356673f66427952b8758eaef3d1e11d71f02678bf7e369c420d293374b22d5600ff953e75d6c6e2498a0994808042670986895a09ee37734c0b3023d78909459d1a3895e71ce7d33bbc9ba2124e6d0f44cef26cb", 0x73}, {&(0x7f0000000740)="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", 0x5d8}], 0x5}}], 0x1, 0xca7ab8a04c442110) 2.058795663s ago: executing program 4 (id=1392): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0xf4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xe0, 0x0, 0x0, 0x9, 0x60000, 0x1d, 0x800, 0x80000001, 0x0, [{0x2, 0xff, 0x7}, {0x8, 0x8}, {0x6, 0x9, 0x1}, {0x1000, 0x800, 0x101}, {0x4, 0x1, 0xb}, {0x10, 0x3, 0x6}, {0x2aa, 0x5, 0x6}, {0x7, 0x7f, 0x2}, {0xea, 0x4, 0x9}, {0xe, 0xfffffffd, 0x868}, {0x1, 0x3, 0x5b8b}, {0x9de, 0x3dc, 0x8}, {0x0, 0x40, 0xff}, {0x7, 0x7a, 0x161}, {0x8, 0x1, 0xff}, {0xf44, 0x36, 0x682}, {0xe216, 0x3, 0xff}, {0xe90, 0x10, 0xffffffff}, {0x5, 0x1, 0x3}, {0x9, 0x2, 0x401}, {0xfffffff9, 0xffff, 0x1}, {0x6, 0xe91, 0x11dc}, {0x9, 0x1ff, 0x750}, {0x9, 0x5, 0x9}, {0x2, 0x3, 0x30db}, {0x2, 0x0, 0x9}, {0x7, 0x344, 0x9}, {0x800, 0x4}, {0x6, 0xd, 0x3}]}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100"/47], 0x0, 0x3f}, 0x28) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x1000003, 0x6, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.728422384s ago: executing program 2 (id=1393): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x180, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.385016725s ago: executing program 2 (id=1394): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x100000000000006]}, 0x8) move_mount(r0, 0x0, r0, 0x0, 0x76) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) io_setup(0x3, &(0x7f0000008240)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.119508173s ago: executing program 0 (id=1395): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x700, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x503, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT4KZ2kzaJnY0/H2k0782b+Pte03mv/qbxC2BoXY2I3YgYi4g7ETGdXc9lR3zSPpL7nu49WNrfe7CUi1br1j9yaXtyLTq+JnEle81iRPzgOxE/zj0ft7G9s7ZYrVY2s/pss7Yx29jeubFaW1yprFTWy+WF+YW5j25+WD6zsb5TG8tKX37y+91v/DTp1lR2pXMcZ6k99MJhnMRoRHzvPIINwEg2nrFBd4RXko+INyPi3fT5n46R9LsJAFxmrdZ0tKY76wDAZZdPc2C5fCnLBUxFPl8qtXN4b8VkvlpvNK/frW+tL7dzZTNRyN9drVbmslzhTBSmkvp8Wk7ruaRePlK/GRFvRMTPxyfSemmpXl0e5D98AGCIXTmy/v97vL3+AwCXXPFlv2DmfPoBAPTPS6//AMBnnvUfAIaP9R8Ahk97/Z8YdDcAgD7y/h8Aho/1HwCGyvc//TQ5WvvZ518v39veWqvfu7FcaayValtLpaX65kZppV5fST+zp3bc61Xr9Y35D2Lr/sw3NxrN2cb2zu1afWu9eTv9XO/blUJ6124fRgYA9PLGO4//lEtW5I8n0iM69nIoDLRnwHnLD7oDwMCMDLoDwMDY7QuG1yne40sPwCXRZYveZxS7/YJQq9VqnV+XgHN27Qvy/zCsOvL//hcwDBn5fxhe8v8wvFqt3En3/I+T3ggAXGxy/ECPn/+/mZ1/k/1w4EfLR+94dJ69AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvtYP/fUrYX+FTk86VSxGsRMROF3N3VamUuIl6PiD+OF8aT+vyA+wwAnFb+r7ls/69r0+9PPdP09pXD4lhE/OSXt35xf7HZ3PxDxFjun+MH15uPsuvl/vceADjewTqdnjveyD/de7B0cPSzP3/7dkQU2/H398Zi/zD+aIym52IUImLyX7ms3pbryF2cxu7DiPh8t/HnYirNgbR3Pj0aP4n9Wl/j55+Jn0/b2ufkz+JzZ9AXGDaPk/nnk27PXz6upufuz38xnaFOL5v/kpda2k/nwP/HP5j/RnrMf1dPGuOD3323XZp4vu1hxBdHIw5i73fMPwfxcz3iv3/C+H/+0tvv9mpr/SriWnSP3xlrtlnbmG1s79xYrS2uVFYq6+XywvzC3Ec3PyzPpjnq2d6rwd8/vv56r7Zk/JM94hePGf9XTzj+X//3zg+/8oL4X3+vW/x8vPWC+Mma+LUTxl+c/G2xV1sSf7nH+I/7/l8/Yfwnf9l5bttwAGBwGts7a4vVamVTQeHiF5K/shegG10L3+pXrLHo3vSz99rP9JGmVuuVYvWaMc4i6wZcBIcPfUT8Z9CdAQAAAAAAAAAAAAAAuurHbywNeowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8LAAD//9dIzz4=") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) listen(0xffffffffffffffff, 0xfffffffd) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x100800) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0xffe8, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffefc, 0x80, 0x4, 0x359}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 951.036899ms ago: executing program 5 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x9, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x8000000, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r2 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x180800) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 852.915512ms ago: executing program 0 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0xf99, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(0x0, r2, 0x40000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x2010480, &(0x7f0000000440)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x45, 0x787, &(0x7f0000001740)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x1000, &(0x7f0000000580)=ANY=[@ANYBLOB="6c60c3a013c8d8c50f747260", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC]) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) sync() 852.649142ms ago: executing program 5 (id=1398): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/109, 0x6d}], 0x1, &(0x7f00000006c0)=""/217, 0xd9}, 0x5}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x3673}], 0x2, 0x2061, 0x0) 753.027766ms ago: executing program 5 (id=1399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x2, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x2, 0xe, 0xee}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x300, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) lseek(r0, 0x1000000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000801500030826bd7000fddbdf250280d400", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff140006000200000004000000ff0000000300000008000a0000000000140003006272696467655f736c6176655f31000008000a00020000000800080080000000080002000000000008000100e000000108000800640600000800090008000000"], 0x80}}, 0x0) r2 = io_uring_setup(0x6b81, &(0x7f0000000340)={0x0, 0xe322, 0x400, 0x3, 0x38d}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x548, 0x1, 0x12, r2, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="bc150000", @ANYRES16=r4, @ANYBLOB="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"], 0x15bc}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000030c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x94}}, 0x0) flock(r6, 0x1) preadv2(r5, &(0x7f0000000540)=[{&(0x7f0000001200)=""/4083, 0xff3}], 0x1, 0x80, 0x0, 0xd) 109.339157ms ago: executing program 4 (id=1400): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_ublk_setup_io_uring(0x52bc, &(0x7f0000000100)={0x0, 0x7896, 0x100, 0x1, 0xa5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000280)={r2, 0x1, 0xe, 0x8e0, 0x3}, 0x1) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000080)={0x21, 0x5, 0x5}) 0s ago: executing program 4 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x147) write(r2, &(0x7f0000000340)="6b53acc1a6df", 0x6) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): t, send abort [ 132.478458][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b313400: abort rx timeout. Force session deactivation [ 132.687577][ T28] audit: type=1326 audit(1782091919.892:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951bbece59 code=0x7ffc0000 [ 132.911409][ T28] audit: type=1326 audit(1782091919.922:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951bbece59 code=0x7ffc0000 [ 132.968171][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810d1d0e00: abort rx timeout. Force session deactivation [ 133.144713][ T28] audit: type=1326 audit(1782091919.932:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f951bbece59 code=0x7ffc0000 [ 133.267425][ T28] audit: type=1326 audit(1782091919.932:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951bbece59 code=0x7ffc0000 [ 133.311059][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.800'. [ 133.369269][ T28] audit: type=1326 audit(1782091919.932:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951bbece59 code=0x7ffc0000 [ 133.454777][ T28] audit: type=1326 audit(1782091920.422:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.4.798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 133.575468][ T28] audit: type=1326 audit(1782091920.432:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.4.798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 133.623356][ T6372] loop5: detected capacity change from 0 to 512 [ 133.647179][ T6372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.694507][ T28] audit: type=1326 audit(1782091920.432:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.4.798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 133.750388][ T6372] EXT4-fs (loop5): 1 truncate cleaned up [ 133.775145][ T6372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.148326][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b136a00: rx timeout, send abort [ 134.372870][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.648349][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b098600: rx timeout, send abort [ 134.659758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b136a00: abort rx timeout. Force session deactivation [ 135.031376][ T6392] syzkaller1: entered promiscuous mode [ 135.080890][ T6392] syzkaller1: entered allmulticast mode [ 135.156688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b098600: abort rx timeout. Force session deactivation [ 136.056727][ T6419] loop1: detected capacity change from 0 to 1024 [ 136.085844][ T6419] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 136.107010][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 136.129849][ T6419] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 136.140739][ T6419] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.142809][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 136.161654][ T6419] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #5: comm syz.1.817: unexpected bad inode w/o EXT4_IGET_BAD [ 136.251120][ T6419] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 136.251375][ T6419] EXT4-fs (loop1): no journal found [ 136.260603][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 136.260624][ C0] EXT4-fs (loop1): initial error at time 1782091923: ext4_get_journal_inode:5900: inode 5 [ 136.260661][ C0] EXT4-fs (loop1): last error at time 1782091923: ext4_get_journal_inode:5900: inode 5 [ 136.298379][ T6419] EXT4-fs (loop1): can't get journal size [ 136.314497][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.924224][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.392218][ T6440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.822'. [ 137.415545][ T6440] gretap0: entered promiscuous mode [ 137.475586][ T6440] netlink: 5 bytes leftover after parsing attributes in process `syz.2.822'. [ 137.488907][ T6440] 0ªî{X¹¦: renamed from gretap0 [ 137.500702][ T6445] FAULT_INJECTION: forcing a failure. [ 137.500702][ T6445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.521839][ T6445] CPU: 1 UID: 0 PID: 6445 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.521870][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.521918][ T6445] Call Trace: [ 137.521924][ T6445] [ 137.521931][ T6445] __dump_stack+0x1d/0x30 [ 137.521955][ T6445] dump_stack_lvl+0x95/0xd0 [ 137.521976][ T6445] dump_stack+0x15/0x1b [ 137.521997][ T6445] should_fail_ex+0x25e/0x270 [ 137.522067][ T6445] should_fail+0xb/0x20 [ 137.522158][ T6445] should_fail_usercopy+0x1a/0x20 [ 137.522217][ T6445] _copy_from_user+0x1c/0xb0 [ 137.522259][ T6445] kstrtouint_from_user+0x69/0xf0 [ 137.522294][ T6445] ? 0xffffffff81000000 [ 137.522327][ T6445] ? avc_policy_seqno+0x15/0x30 [ 137.522358][ T6445] proc_fail_nth_write+0x50/0x160 [ 137.522382][ T6445] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.522410][ T6445] vfs_write+0x252/0x990 [ 137.522560][ T6445] ? __fget_files+0x184/0x1c0 [ 137.522592][ T6445] ? mutex_lock+0x57/0x90 [ 137.522635][ T6445] ksys_write+0xdc/0x1a0 [ 137.522669][ T6445] __x64_sys_write+0x40/0x50 [ 137.522694][ T6445] x64_sys_call+0x27e1/0x3020 [ 137.522724][ T6445] do_syscall_64+0x136/0x3c0 [ 137.522758][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.522788][ T6445] RIP: 0033:0x7fb6781ed68e [ 137.522834][ T6445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.522854][ T6445] RSP: 002b:00007fb676c86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.522880][ T6445] RAX: ffffffffffffffda RBX: 00007fb676c876c0 RCX: 00007fb6781ed68e [ 137.522900][ T6445] RDX: 0000000000000001 RSI: 00007fb676c870a0 RDI: 0000000000000005 [ 137.522984][ T6445] RBP: 00007fb676c87090 R08: 0000000000000000 R09: 0000000000000000 [ 137.522999][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.523012][ T6445] R13: 00007fb6784a6038 R14: 00007fb6784a5fa0 R15: 00007ffc977f9338 [ 137.523032][ T6445] [ 137.528452][ T6440] 0ªî{X¹¦: left promiscuous mode [ 137.619265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b449800: rx timeout, send abort [ 137.776483][ T6440] 0ªî{X¹¦: entered allmulticast mode [ 137.795919][ T6440] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 137.847561][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 137.847576][ T28] audit: type=1400 audit(1782091925.052:662): avc: denied { mount } for pid=6449 comm="syz.0.826" name="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 137.928807][ T28] audit: type=1400 audit(1782091925.132:663): avc: denied { search } for pid=6449 comm="syz.0.826" name="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.952246][ T6451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6451 comm=syz.0.826 [ 137.965889][ T28] audit: type=1400 audit(1782091925.162:664): avc: denied { search } for pid=6449 comm="syz.0.826" name="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.988470][ T28] audit: type=1400 audit(1782091925.162:665): avc: denied { read } for pid=6449 comm="syz.0.826" name="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.011251][ T28] audit: type=1400 audit(1782091925.162:666): avc: denied { read open } for pid=6449 comm="syz.0.826" path="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.116324][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b136400: rx timeout, send abort [ 138.124706][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b449800: abort rx timeout. Force session deactivation [ 138.373209][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.4.832 [ 138.624578][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b136400: abort rx timeout. Force session deactivation [ 139.798773][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 139.820150][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 141.393693][ T6507] FAULT_INJECTION: forcing a failure. [ 141.393693][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.191510][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.5.843 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.191559][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.191576][ T6507] Call Trace: [ 142.191585][ T6507] [ 142.191593][ T6507] __dump_stack+0x1d/0x30 [ 142.191620][ T6507] dump_stack_lvl+0x95/0xd0 [ 142.191691][ T6507] dump_stack+0x15/0x1b [ 142.191757][ T6507] should_fail_ex+0x25e/0x270 [ 142.191814][ T6507] should_fail+0xb/0x20 [ 142.191844][ T6507] should_fail_usercopy+0x1a/0x20 [ 142.191951][ T6507] _copy_from_user+0x1c/0xb0 [ 142.191993][ T6507] kstrtouint_from_user+0x69/0xf0 [ 142.192019][ T6507] ? avc_policy_seqno+0x15/0x30 [ 142.192100][ T6507] proc_fail_nth_write+0x50/0x160 [ 142.192127][ T6507] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.192156][ T6507] vfs_write+0x252/0x990 [ 142.192188][ T6507] ? __fget_files+0x184/0x1c0 [ 142.192266][ T6507] ? mutex_lock+0x57/0x90 [ 142.192428][ T6507] ksys_write+0xdc/0x1a0 [ 142.192461][ T6507] __x64_sys_write+0x40/0x50 [ 142.192484][ T6507] x64_sys_call+0x27e1/0x3020 [ 142.192514][ T6507] do_syscall_64+0x136/0x3c0 [ 142.192599][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.192697][ T6507] RIP: 0033:0x7fa0b821d68e [ 142.192715][ T6507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.192807][ T6507] RSP: 002b:00007fa0b6cb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.192832][ T6507] RAX: ffffffffffffffda RBX: 00007fa0b6cb76c0 RCX: 00007fa0b821d68e [ 142.192849][ T6507] RDX: 0000000000000001 RSI: 00007fa0b6cb70a0 RDI: 000000000000000a [ 142.192866][ T6507] RBP: 00007fa0b6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.192883][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.192950][ T6507] R13: 00007fa0b84d6038 R14: 00007fa0b84d5fa0 R15: 00007ffdadb7b5d8 [ 142.192970][ T6507] [ 144.877190][ T28] audit: type=1326 audit(1782091932.082:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.006563][ T28] audit: type=1326 audit(1782091932.082:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.057555][ T6573] loop5: detected capacity change from 0 to 2048 [ 145.111188][ T6573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.149512][ T28] audit: type=1326 audit(1782091932.082:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.189596][ T6573] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.272634][ T28] audit: type=1326 audit(1782091932.082:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.396967][ T28] audit: type=1326 audit(1782091932.082:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.516804][ T28] audit: type=1326 audit(1782091932.082:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.559593][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 145.596505][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.609833][ T6580] geneve3: entered allmulticast mode [ 145.636275][ T28] audit: type=1326 audit(1782091932.082:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.711193][ T6585] 9p: Bad value for 'wfdno' [ 145.714564][ T28] audit: type=1326 audit(1782091932.112:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.757033][ T28] audit: type=1326 audit(1782091932.112:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.826892][ T28] audit: type=1326 audit(1782091932.112:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.2.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 145.869557][ T6595] geneve2: entered allmulticast mode [ 145.887152][ T3683] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.896374][ T3683] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.931283][ T3683] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.955629][ T3683] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 146.027415][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=6603 comm=syz.4.873 [ 146.411517][ T6623] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 146.763020][ T6644] FAULT_INJECTION: forcing a failure. [ 146.763020][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.791952][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.887 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.791989][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.792006][ T6644] Call Trace: [ 146.792027][ T6644] [ 146.792037][ T6644] __dump_stack+0x1d/0x30 [ 146.792069][ T6644] dump_stack_lvl+0x95/0xd0 [ 146.792096][ T6644] dump_stack+0x15/0x1b [ 146.792156][ T6644] should_fail_ex+0x25e/0x270 [ 146.792196][ T6644] should_fail+0xb/0x20 [ 146.792219][ T6644] should_fail_usercopy+0x1a/0x20 [ 146.792254][ T6644] _copy_from_user+0x1c/0xb0 [ 146.792295][ T6644] sctp_setsockopt+0x161/0xea0 [ 146.792369][ T6644] sock_common_setsockopt+0x69/0x80 [ 146.792404][ T6644] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.792517][ T6644] __sys_setsockopt+0x184/0x200 [ 146.792547][ T6644] __x64_sys_setsockopt+0x64/0x80 [ 146.792576][ T6644] x64_sys_call+0x2327/0x3020 [ 146.792601][ T6644] do_syscall_64+0x136/0x3c0 [ 146.792661][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.792686][ T6644] RIP: 0033:0x7f951bbece59 [ 146.792707][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.792766][ T6644] RSP: 002b:00007f951a647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.792793][ T6644] RAX: ffffffffffffffda RBX: 00007f951be65fa0 RCX: 00007f951bbece59 [ 146.792816][ T6644] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 146.792903][ T6644] RBP: 00007f951a647090 R08: 0000000000000030 R09: 0000000000000000 [ 146.792921][ T6644] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 146.792944][ T6644] R13: 00007f951be66038 R14: 00007f951be65fa0 R15: 00007ffc17c404b8 [ 146.792972][ T6644] [ 147.525139][ T6667] futex_wake_op: syz.1.895 tries to shift op by -1; fix this program [ 147.876110][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b447e00: rx timeout, send abort [ 148.376090][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b43f000: rx timeout, send abort [ 148.384432][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b447e00: abort rx timeout. Force session deactivation [ 148.422261][ T6684] loop1: detected capacity change from 0 to 512 [ 148.464217][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.480056][ T6684] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.693841][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.875727][ T6694] geneve0: entered promiscuous mode [ 148.884568][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b43f000: abort rx timeout. Force session deactivation [ 148.904805][ T6694] geneve0: left promiscuous mode [ 149.215693][ T6706] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 149.621162][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b43a400: rx timeout, send abort [ 149.798114][ T6734] loop1: detected capacity change from 0 to 512 [ 149.834600][ T6734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.864159][ T6734] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #17: comm syz.1.918: corrupted in-inode xattr: e_name out of bounds [ 149.879764][ T6734] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 149.879987][ T6734] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.918: couldn't read orphan inode 17 (err -117) [ 149.900996][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 149.901017][ C1] EXT4-fs (loop1): initial error at time 1782091937: ext4_iget_extra_inode:5180: inode 17 [ 149.901054][ C1] EXT4-fs (loop1): last error at time 1782091937: ext4_iget_extra_inode:5180: inode 17 [ 150.004132][ T6734] loop1: lost filesystem error report for type 5 error -117 [ 150.004785][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.121176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b43b800: rx timeout, send abort [ 150.129426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b43a400: abort rx timeout. Force session deactivation [ 150.201625][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.629436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b43b800: abort rx timeout. Force session deactivation [ 150.786386][ T6769] FAULT_INJECTION: forcing a failure. [ 150.786386][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.858060][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.858106][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.858125][ T6769] Call Trace: [ 150.858133][ T6769] [ 150.858143][ T6769] __dump_stack+0x1d/0x30 [ 150.858188][ T6769] dump_stack_lvl+0x95/0xd0 [ 150.858209][ T6769] dump_stack+0x15/0x1b [ 150.858228][ T6769] should_fail_ex+0x25e/0x270 [ 150.858294][ T6769] should_fail+0xb/0x20 [ 150.858318][ T6769] should_fail_usercopy+0x1a/0x20 [ 150.858379][ T6769] _copy_to_user+0x20/0xa0 [ 150.858422][ T6769] simple_read_from_buffer+0xb5/0x130 [ 150.858538][ T6769] proc_fail_nth_read+0x10e/0x150 [ 150.858559][ T6769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.858597][ T6769] vfs_read+0x18e/0x7c0 [ 150.858638][ T6769] ? __rcu_read_unlock+0x4e/0x70 [ 150.858691][ T6769] ? __fget_files+0x184/0x1c0 [ 150.858724][ T6769] ? mutex_lock+0x57/0x90 [ 150.858823][ T6769] ksys_read+0xdc/0x1a0 [ 150.858856][ T6769] __x64_sys_read+0x40/0x50 [ 150.858898][ T6769] x64_sys_call+0x2886/0x3020 [ 150.858931][ T6769] do_syscall_64+0x136/0x3c0 [ 150.858981][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.859070][ T6769] RIP: 0033:0x7f951bbad68e [ 150.859090][ T6769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.859115][ T6769] RSP: 002b:00007f951a646fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.859142][ T6769] RAX: ffffffffffffffda RBX: 00007f951a6476c0 RCX: 00007f951bbad68e [ 150.859158][ T6769] RDX: 000000000000000f RSI: 00007f951a6470a0 RDI: 0000000000000004 [ 150.859187][ T6769] RBP: 00007f951a647090 R08: 0000000000000000 R09: 0000000000000000 [ 150.859205][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.859222][ T6769] R13: 00007f951be66038 R14: 00007f951be65fa0 R15: 00007ffc17c404b8 [ 150.859250][ T6769] [ 151.153247][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.160651][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.271642][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.316230][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.456260][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b46a400: rx timeout, send abort [ 151.671345][ T3752] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 151.680073][ T3752] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.697436][ T3752] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 151.716447][ T3752] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.738290][ T3752] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 151.832473][ T3752] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.854546][ T3752] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 151.889828][ T3752] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.899502][ T28] kauditd_printk_skb: 784 callbacks suppressed [ 151.899520][ T28] audit: type=1400 audit(1782091939.102:1461): avc: denied { write } for pid=6809 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.956287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a24ec00: rx timeout, send abort [ 151.969726][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b46a400: abort rx timeout. Force session deactivation [ 152.333798][ T6818] loop1: detected capacity change from 0 to 128 [ 152.464562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a24ec00: abort rx timeout. Force session deactivation [ 153.151072][ T28] audit: type=1400 audit(1782091940.362:1462): avc: denied { mount } for pid=6838 comm="syz.5.946" name="/" dev="autofs" ino=18258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 153.179836][ T6839] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 153.252871][ T28] audit: type=1400 audit(1782091940.382:1463): avc: denied { read } for pid=6838 comm="syz.5.946" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.344149][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.358079][ T28] audit: type=1400 audit(1782091940.382:1464): avc: denied { open } for pid=6838 comm="syz.5.946" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.399932][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.435895][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.455609][ T28] audit: type=1400 audit(1782091940.382:1465): avc: denied { ioctl } for pid=6838 comm="syz.5.946" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.489803][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.962339][ T6860] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.140173][ T6860] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.208249][ T6860] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.275044][ T6860] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.507397][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.515851][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.524386][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.533099][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.692642][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.956'. [ 154.707032][ T6868] vhci_hcd vhci_hcd.4: default hub control req: d746 v0000 i0000 l0 [ 154.865377][ T6886] FAULT_INJECTION: forcing a failure. [ 154.865377][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 154.896416][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.5.961 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.896453][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.896471][ T6886] Call Trace: [ 154.896479][ T6886] [ 154.896487][ T6886] __dump_stack+0x1d/0x30 [ 154.896591][ T6886] dump_stack_lvl+0x95/0xd0 [ 154.896611][ T6886] dump_stack+0x15/0x1b [ 154.896630][ T6886] should_fail_ex+0x25e/0x270 [ 154.896723][ T6886] should_failslab+0x8c/0xb0 [ 154.896746][ T6886] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 154.896782][ T6886] ? __alloc_skb+0x2db/0x6f0 [ 154.896834][ T6886] __alloc_skb+0x2db/0x6f0 [ 154.896873][ T6886] ? __alloc_skb+0x205/0x6f0 [ 154.896954][ T6886] netlink_ack+0xfd/0x530 [ 154.897059][ T6886] ? nfnetlink_rcv+0xa41/0x1740 [ 154.897146][ T6886] nfnetlink_rcv+0x1567/0x1740 [ 154.897203][ T6886] netlink_unicast+0x5a7/0x680 [ 154.897233][ T6886] netlink_sendmsg+0x5be/0x6f0 [ 154.897266][ T6886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.897390][ T6886] ____sys_sendmsg+0x532/0x580 [ 154.897416][ T6886] ___sys_sendmsg+0x195/0x1e0 [ 154.897460][ T6886] __x64_sys_sendmsg+0xd4/0x160 [ 154.897495][ T6886] x64_sys_call+0x194c/0x3020 [ 154.897524][ T6886] do_syscall_64+0x136/0x3c0 [ 154.897625][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.897654][ T6886] RIP: 0033:0x7fa0b825ce59 [ 154.897710][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.897791][ T6886] RSP: 002b:00007fa0b6cb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.897828][ T6886] RAX: ffffffffffffffda RBX: 00007fa0b84d5fa0 RCX: 00007fa0b825ce59 [ 154.897909][ T6886] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 154.897923][ T6886] RBP: 00007fa0b6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.897941][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.898046][ T6886] R13: 00007fa0b84d6038 R14: 00007fa0b84d5fa0 R15: 00007ffdadb7b5d8 [ 154.898073][ T6886] [ 154.904166][ T6872] loop1: detected capacity change from 0 to 1024 [ 155.139048][ T6890] loop5: detected capacity change from 0 to 128 [ 155.202760][ T6872] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 155.598157][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.104147][ T28] audit: type=1400 audit(1782091943.312:1466): avc: denied { name_bind } for pid=6873 comm="syz.4.958" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 156.128393][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.137778][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.965'. [ 156.297175][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'. [ 156.775565][ T6941] syzkaller0: entered promiscuous mode [ 156.788232][ T6941] syzkaller0: entered allmulticast mode [ 157.831449][ T6955] tipc: Started in network mode [ 157.841259][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.5.981'. [ 157.866844][ T6955] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 157.896487][ T6955] tipc: Enabling of bearer rejected, failed to enable media [ 158.324810][ T6961] program syz.5.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.780822][ T6965] netlink: 292 bytes leftover after parsing attributes in process `syz.4.985'. [ 158.842727][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 158.911807][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.983'. [ 159.152675][ T6983] FAULT_INJECTION: forcing a failure. [ 159.152675][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.195318][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.4.991 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.195346][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.195358][ T6983] Call Trace: [ 159.195365][ T6983] [ 159.195374][ T6983] __dump_stack+0x1d/0x30 [ 159.195404][ T6983] dump_stack_lvl+0x95/0xd0 [ 159.195443][ T6983] dump_stack+0x15/0x1b [ 159.195489][ T6983] should_fail_ex+0x25e/0x270 [ 159.195516][ T6983] should_fail+0xb/0x20 [ 159.195618][ T6983] should_fail_usercopy+0x1a/0x20 [ 159.195654][ T6983] _copy_to_user+0x20/0xa0 [ 159.195695][ T6983] simple_read_from_buffer+0xb5/0x130 [ 159.195784][ T6983] proc_fail_nth_read+0x10e/0x150 [ 159.195808][ T6983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.195828][ T6983] vfs_read+0x18e/0x7c0 [ 159.195865][ T6983] ? __rcu_read_unlock+0x4e/0x70 [ 159.195903][ T6983] ? __fget_files+0x184/0x1c0 [ 159.195934][ T6983] ? mutex_lock+0x57/0x90 [ 159.195993][ T6983] ksys_read+0xdc/0x1a0 [ 159.196033][ T6983] __x64_sys_read+0x40/0x50 [ 159.196103][ T6983] x64_sys_call+0x2886/0x3020 [ 159.196214][ T6983] do_syscall_64+0x136/0x3c0 [ 159.196247][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.196304][ T6983] RIP: 0033:0x7f7ceb7ed68e [ 159.196323][ T6983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.196348][ T6983] RSP: 002b:00007f7cea286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.196428][ T6983] RAX: ffffffffffffffda RBX: 00007f7cea2876c0 RCX: 00007f7ceb7ed68e [ 159.196442][ T6983] RDX: 000000000000000f RSI: 00007f7cea2870a0 RDI: 0000000000000006 [ 159.196458][ T6983] RBP: 00007f7cea287090 R08: 0000000000000000 R09: 0000000000000000 [ 159.196475][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.196492][ T6983] R13: 00007f7cebaa6038 R14: 00007f7cebaa5fa0 R15: 00007fff5ffc3868 [ 159.196526][ T6983] [ 159.629231][ T28] audit: type=1326 audit(1782091945.552:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 159.654969][ T28] audit: type=1326 audit(1782091945.972:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 159.690914][ T28] audit: type=1326 audit(1782091945.972:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 159.738546][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.5.993'. [ 159.872453][ T28] audit: type=1326 audit(1782091945.972:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 159.957865][ T28] audit: type=1326 audit(1782091945.982:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 160.003632][ T28] audit: type=1326 audit(1782091945.982:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 160.115321][ T28] audit: type=1326 audit(1782091945.982:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7ceb7ed68e code=0x7ffc0000 [ 160.146650][ T7008] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1000'. [ 160.183904][ T7008] SELinux: Context AÇÂ)ëát·'ðÃñÐ*'属õÿkµªì¨¶Ø´œL¨&ñÒzª [ 160.183904][ T7008] : is not valid (left unmapped). [ 160.197798][ T7006] vhci_hcd vhci_hcd.4: default hub control req: d746 v0000 i0000 l0 [ 160.221617][ T28] audit: type=1326 audit(1782091945.982:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ceb7ed68e code=0x7ffc0000 [ 160.438616][ T28] audit: type=1326 audit(1782091945.982:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ceb7ed68e code=0x7ffc0000 [ 160.479241][ T28] audit: type=1326 audit(1782091945.982:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x7ffc0000 [ 160.512238][ T7016] loop1: detected capacity change from 0 to 512 [ 160.519424][ T7016] EXT4-fs: Ignoring removed bh option [ 160.548441][ T7016] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.1003: corrupted xattr block 95: invalid header [ 160.566715][ T7020] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1005'. [ 160.593774][ T7016] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.594049][ T7016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1003: bg 0: block 7: invalid block bitmap [ 160.603283][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 160.603299][ C0] EXT4-fs (loop1): initial error at time 1782091947: ext4_expand_extra_isize_ea:2810: inode 11 [ 160.603332][ C0] EXT4-fs (loop1): last error at time 1782091947: ext4_expand_extra_isize_ea:2810: inode 11 [ 160.690444][ T7026] can0: slcan on ttyS3. [ 160.707553][ T7016] loop1: lost filesystem error report for type 5 error -117 [ 160.707750][ T7016] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.725078][ T7016] loop1: lost filesystem error report for type 5 error -117 [ 160.725265][ T7016] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.1003: corrupted xattr block 95: invalid header [ 160.749549][ T7016] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.749768][ T7016] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 160.768481][ T7016] EXT4-fs (loop1): 1 orphan inode deleted [ 160.775138][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.792493][ T7028] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1006'. [ 160.831412][ T6790] IPVS: starting estimator thread 0... [ 160.851796][ T7026] can0 (unregistered): slcan off ttyS3. [ 160.866806][ T7016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7016 comm=syz.1.1003 [ 160.907202][ T7028] loop5: detected capacity change from 0 to 512 [ 160.939872][ T7029] IPVS: using max 2304 ests per chain, 115200 per kthread [ 161.002761][ T7035] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.090783][ T7028] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.144356][ T7035] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.220879][ T7035] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.265735][ T7028] EXT4-fs (loop5): 1 truncate cleaned up [ 161.322291][ T7035] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.455339][ T7028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.469848][ T3689] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.498373][ T7040] FAULT_INJECTION: forcing a failure. [ 161.498373][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.526876][ T3689] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.539652][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.539712][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.539726][ T7040] Call Trace: [ 161.539733][ T7040] [ 161.539742][ T7040] __dump_stack+0x1d/0x30 [ 161.539790][ T7040] dump_stack_lvl+0x95/0xd0 [ 161.539816][ T7040] dump_stack+0x15/0x1b [ 161.539840][ T7040] should_fail_ex+0x25e/0x270 [ 161.539875][ T7040] should_fail+0xb/0x20 [ 161.539956][ T7040] should_fail_usercopy+0x1a/0x20 [ 161.540021][ T7040] _copy_from_user+0x1c/0xb0 [ 161.540055][ T7040] ___sys_recvmsg+0xaa/0x3a0 [ 161.540078][ T7040] ? _parse_integer+0x27/0x40 [ 161.540153][ T7040] do_recvmmsg+0x1e5/0x560 [ 161.540186][ T7040] ? fput+0x8f/0xc0 [ 161.540213][ T7040] __x64_sys_recvmmsg+0xe5/0x170 [ 161.540240][ T7040] x64_sys_call+0x80f/0x3020 [ 161.540343][ T7040] do_syscall_64+0x136/0x3c0 [ 161.540367][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.540387][ T7040] RIP: 0033:0x7fb67822ce59 [ 161.540405][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.540466][ T7040] RSP: 002b:00007fb676c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 161.540484][ T7040] RAX: ffffffffffffffda RBX: 00007fb6784a5fa0 RCX: 00007fb67822ce59 [ 161.540504][ T7040] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000004 [ 161.540517][ T7040] RBP: 00007fb676c87090 R08: 0000000000000000 R09: 0000000000000000 [ 161.540551][ T7040] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 161.540568][ T7040] R13: 00007fb6784a6038 R14: 00007fb6784a5fa0 R15: 00007ffc977f9338 [ 161.540588][ T7040] [ 161.743281][ T3689] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.751635][ T3689] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.764421][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.802945][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.939433][ T7055] loop5: detected capacity change from 0 to 128 [ 161.955905][ T7048] vhci_hcd vhci_hcd.4: default hub control req: d746 v0000 i0000 l0 [ 162.323505][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 162.427889][ T7070] netlink: 'syz.0.1019': attribute type 13 has an invalid length. [ 163.069778][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1023'. [ 163.134384][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1023'. [ 163.146960][ T7081] loop5: detected capacity change from 0 to 512 [ 163.153703][ T7081] EXT4-fs: Ignoring removed i_version option [ 163.161457][ T7081] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.186139][ T7081] EXT4-fs (loop5): 1 truncate cleaned up [ 163.205130][ T7081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.792367][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.824866][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'. [ 163.852232][ T7092] vhci_hcd vhci_hcd.4: default hub control req: d746 v0000 i0000 l0 [ 163.995544][ T7105] loop1: detected capacity change from 0 to 512 [ 164.018771][ T7105] EXT4-fs: Ignoring removed i_version option [ 164.067348][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.126749][ T7105] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.149233][ T7110] loop5: detected capacity change from 0 to 512 [ 164.156313][ T7110] EXT4-fs: Ignoring removed i_version option [ 164.162365][ T7110] EXT4-fs: Ignoring removed bh option [ 164.257460][ T7110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.270355][ T7110] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.296702][ T7110] mmap: syz.5.1030 (7110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.637365][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 164.637392][ T28] audit: type=1400 audit(1782091951.842:1501): avc: denied { write } for pid=7104 comm="syz.1.1032" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.708283][ T7105] loop9: detected capacity change from 0 to 7 [ 164.778829][ T28] audit: type=1400 audit(1782091951.872:1502): avc: denied { create } for pid=7104 comm="syz.1.1032" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 164.801617][ T7105] buffer_io_error: 2 callbacks suppressed [ 164.801852][ T7105] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.846066][ T7105] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.865967][ T28] audit: type=1400 audit(1782091951.882:1503): avc: denied { write } for pid=7104 comm="syz.1.1032" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.900594][ T7105] loop9: unable to read partition table [ 164.919868][ T7105] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 164.933205][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.963133][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.996186][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.005639][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.031012][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.074135][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.083715][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.111840][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.151529][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.233868][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.294065][ T7134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1039'. [ 165.928431][ T7143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.968851][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.046774][ T7143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.144558][ T7143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.234603][ T7143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.410617][ T7158] loop5: detected capacity change from 0 to 128 [ 166.435448][ T7158] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.465850][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1050'. [ 166.480198][ T7158] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.503286][ T7158] Invalid ELF header magic: != ELF [ 166.504690][ T28] audit: type=1400 audit(1782091953.712:1504): avc: denied { module_load } for pid=7150 comm="syz.5.1043" path="/79/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 167.064271][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1061'. [ 167.135652][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1063'. [ 167.146700][ T7198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.153968][ T7198] IPv6: NLM_F_CREATE should be set when creating new route [ 167.161298][ T7198] IPv6: NLM_F_CREATE should be set when creating new route [ 167.168539][ T7198] IPv6: NLM_F_CREATE should be set when creating new route [ 167.196258][ T3689] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.226748][ T7200] loop5: detected capacity change from 0 to 512 [ 167.233785][ T7200] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.254586][ T7200] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.1064: corrupted in-inode xattr: e_name out of bounds [ 167.288081][ T7200] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 167.288265][ T7200] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1064: couldn't read orphan inode 17 (err -117) [ 167.297516][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 167.297538][ C0] EXT4-fs (loop5): initial error at time 1782091954: ext4_iget_extra_inode:5180: inode 17 [ 167.297568][ C0] EXT4-fs (loop5): last error at time 1782091954: ext4_iget_extra_inode:5180: inode 17 [ 167.351919][ T7200] loop5: lost filesystem error report for type 5 error -117 [ 167.352594][ T7200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.635532][ T28] audit: type=1400 audit(1782091954.842:1505): avc: denied { write } for pid=7218 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.662525][ T28] audit: type=1400 audit(1782091954.842:1506): avc: denied { ioctl } for pid=7218 comm="syz.4.1071" path="socket:[20336]" dev="sockfs" ino=20336 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.689131][ T7221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.768211][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1076'. [ 167.856726][ T28] audit: type=1400 audit(1782091955.062:1507): avc: denied { getopt } for pid=7228 comm="syz.0.1075" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.074567][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.516897][ T28] audit: type=1400 audit(1782091955.722:1508): avc: denied { read } for pid=7248 comm="syz.0.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.544522][ T7251] FAULT_INJECTION: forcing a failure. [ 168.544522][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.557943][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.0.1083 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.557968][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.557983][ T7251] Call Trace: [ 168.557990][ T7251] [ 168.558023][ T7251] __dump_stack+0x1d/0x30 [ 168.558111][ T7251] dump_stack_lvl+0x95/0xd0 [ 168.558244][ T7251] dump_stack+0x15/0x1b [ 168.558268][ T7251] should_fail_ex+0x25e/0x270 [ 168.558365][ T7251] should_fail+0xb/0x20 [ 168.558444][ T7251] should_fail_usercopy+0x1a/0x20 [ 168.558476][ T7251] _copy_from_iter+0xcc/0xe70 [ 168.558515][ T7251] ? __alloc_skb+0x511/0x6f0 [ 168.558578][ T7251] ? __alloc_skb+0x205/0x6f0 [ 168.558619][ T7251] netlink_sendmsg+0x4a4/0x6f0 [ 168.558657][ T7251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.558757][ T7251] ____sys_sendmsg+0x532/0x580 [ 168.558814][ T7251] ___sys_sendmsg+0x195/0x1e0 [ 168.558856][ T7251] __x64_sys_sendmsg+0xd4/0x160 [ 168.558882][ T7251] x64_sys_call+0x194c/0x3020 [ 168.558979][ T7251] do_syscall_64+0x136/0x3c0 [ 168.559011][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.559039][ T7251] RIP: 0033:0x7fb67822ce59 [ 168.559058][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.559076][ T7251] RSP: 002b:00007fb676c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.559133][ T7251] RAX: ffffffffffffffda RBX: 00007fb6784a5fa0 RCX: 00007fb67822ce59 [ 168.559152][ T7251] RDX: 0000000004040800 RSI: 0000200000000140 RDI: 0000000000000003 [ 168.559170][ T7251] RBP: 00007fb676c87090 R08: 0000000000000000 R09: 0000000000000000 [ 168.559187][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.559203][ T7251] R13: 00007fb6784a6038 R14: 00007fb6784a5fa0 R15: 00007ffc977f9338 [ 168.559286][ T7251] [ 168.951017][ T7268] loop1: detected capacity change from 0 to 512 [ 168.968761][ T7268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.974781][ T7270] program syz.0.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.368958][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 169.448529][ T7268] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #17: comm syz.1.1089: corrupted in-inode xattr: e_name out of bounds [ 169.480998][ T7268] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 169.481341][ T7268] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1089: couldn't read orphan inode 17 (err -117) [ 169.491200][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 169.491217][ C1] EXT4-fs (loop1): initial error at time 1782091956: ext4_iget_extra_inode:5180: inode 17 [ 169.491242][ C1] EXT4-fs (loop1): last error at time 1782091956: ext4_iget_extra_inode:5180: inode 17 [ 169.755371][ T7280] loop5: detected capacity change from 0 to 512 [ 169.765774][ T7280] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 169.774704][ T7280] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1091: inode #15: comm syz.5.1091: iget: illegal inode # [ 169.982328][ T7268] loop1: lost filesystem error report for type 5 error -117 [ 169.982645][ T7280] loop5: lost filesystem error report for type 5 error -117 [ 169.994444][ T7268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.023370][ T7280] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1091: couldn't read orphan inode 15 (err -117) [ 170.035299][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 170.035323][ C0] EXT4-fs (loop5): initial error at time 1782091957: ext4_orphan_get:1399 [ 170.035347][ C0] EXT4-fs (loop5): last error at time 1782091957: ext4_orphan_get:1399 [ 170.884013][ T7280] loop5: lost filesystem error report for type 5 error -117 [ 170.885029][ T7280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.111335][ T28] audit: type=1400 audit(1782091958.322:1509): avc: denied { write } for pid=7279 comm="syz.5.1091" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.881031][ T7276] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.912460][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.077743][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.341283][ T3752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.360313][ T3752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.436634][ T3752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.450375][ T3752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.473283][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7292 comm=syz.4.1092 [ 172.638073][ T28] audit: type=1400 audit(1782091959.842:1510): avc: denied { bind } for pid=7303 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.691625][ T28] audit: type=1400 audit(1782091959.842:1511): avc: denied { listen } for pid=7303 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.756306][ T28] audit: type=1400 audit(1782091959.962:1512): avc: denied { shutdown } for pid=7303 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.766241][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1098'. [ 172.799778][ T28] audit: type=1400 audit(1782091959.962:1513): avc: denied { write } for pid=7303 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.883436][ T7317] 9p: Bad value for 'rfdno' [ 172.915531][ T7319] loop5: detected capacity change from 0 to 512 [ 172.928442][ T7319] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1104: bad orphan inode 15 [ 172.938605][ T7319] loop5: lost filesystem error report for type 5 error -117 [ 172.938844][ T7319] ext4_test_bit(bit=14, block=18) = 1 [ 172.946198][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 172.946217][ C1] EXT4-fs (loop5): initial error at time 1782091960: ext4_orphan_get:1425 [ 172.946259][ C1] EXT4-fs (loop5): last error at time 1782091960: ext4_orphan_get:1425 [ 172.975087][ T7319] is_bad_inode(inode)=0 [ 172.979340][ T7319] NEXT_ORPHAN(inode)=1023 [ 172.983728][ T7319] max_ino=32 [ 172.987031][ T7319] i_nlink=0 [ 172.991839][ T7319] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.1104: corrupted xattr block 19: invalid header [ 173.005402][ T7319] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.005733][ T7319] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 173.024559][ T7319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 173.036808][ T7319] ext4 filesystem being mounted at /86/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 173.285328][ T28] audit: type=1400 audit(1782091960.482:1514): avc: denied { write } for pid=7318 comm="syz.5.1104" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.362274][ T7332] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1104: bg 0: block 449: padding at end of block bitmap is not set [ 174.365283][ T28] audit: type=1400 audit(1782091961.572:1515): avc: denied { read write } for pid=7360 comm="syz.4.1114" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.566580][ T28] audit: type=1400 audit(1782091961.572:1516): avc: denied { open } for pid=7360 comm="syz.4.1114" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 175.161717][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 175.491505][ T7372] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 175.510467][ T28] audit: type=1400 audit(1782091962.722:1517): avc: denied { relabelto } for pid=7366 comm="syz.4.1116" name="238" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 175.565576][ T28] audit: type=1400 audit(1782091962.722:1518): avc: denied { associate } for pid=7366 comm="syz.4.1116" name="238" dev="tmpfs" ino=1249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 176.250479][ T7390] loop5: detected capacity change from 0 to 764 [ 176.453355][ T7401] loop5: detected capacity change from 0 to 1024 [ 176.469258][ T7401] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.492290][ T7401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.512907][ T7401] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.542891][ T7401] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.1125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.569789][ T7401] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.569949][ T7401] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1125: couldn't read orphan inode 11 (err -117) [ 176.591134][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 176.591162][ C0] EXT4-fs (loop5): initial error at time 1782091963: ext4_ext_check_inode:521: inode 11 [ 176.591221][ C0] EXT4-fs (loop5): last error at time 1782091963: ext4_ext_check_inode:521: inode 11 [ 176.632253][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 176.674361][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 176.674379][ T28] audit: type=1400 audit(1782091963.872:1526): avc: denied { read } for pid=7393 comm="syz.0.1123" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.724772][ T7401] loop5: lost filesystem error report for type 5 error -117 [ 176.727758][ T7401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.779286][ T28] audit: type=1400 audit(1782091963.922:1527): avc: denied { ioctl } for pid=7393 comm="syz.0.1123" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.107422][ T7417] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1125: Invalid block bitmap block 0 in block_group 0 [ 177.124052][ T7417] Quota error (device loop5): write_blk: dquota write failed [ 177.132628][ T7417] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 177.144047][ T7417] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1125: Failed to acquire dquot type 0 [ 177.169113][ T28] audit: type=1400 audit(1782091964.232:1528): avc: denied { write } for pid=7400 comm="syz.5.1125" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.308333][ T7417] syz.5.1125 (7417) used greatest stack depth: 8960 bytes left [ 177.320386][ T7413] infiniband syz1: set down [ 177.343510][ T7413] infiniband syz1: added bond0 [ 177.446582][ T7413] RDS/IB: syz1: added [ 177.458709][ T7413] smc: adding ib device syz1 with port count 1 [ 177.488674][ T7413] smc: ib device syz1 port 1 has no pnetid [ 178.571941][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.853715][ T28] audit: type=1400 audit(1782091966.062:1529): avc: denied { getopt } for pid=7461 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.718639][ T28] audit: type=1400 audit(1782091967.922:1530): avc: denied { ioctl } for pid=7510 comm="syz.4.1158" path="socket:[22769]" dev="sockfs" ino=22769 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.877599][ T7517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.146741][ T28] audit: type=1400 audit(1782091968.352:1531): avc: denied { mount } for pid=7523 comm="syz.4.1163" name="/" dev="rpc_pipefs" ino=22820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 181.396908][ T12] gretap0: left allmulticast mode [ 181.407572][ T12] gretap0: left promiscuous mode [ 181.418829][ T12] bridge0: port 3(gretap0) entered disabled state [ 181.448752][ T12] bridge_slave_1: left allmulticast mode [ 181.460066][ T28] audit: type=1400 audit(1782091968.662:1532): avc: denied { open } for pid=7538 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.464760][ T12] bridge_slave_1: left promiscuous mode [ 181.490905][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.498159][ T28] audit: type=1400 audit(1782091968.662:1533): avc: denied { kernel } for pid=7538 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.519902][ T12] bridge_slave_0: left allmulticast mode [ 181.525634][ T12] bridge_slave_0: left promiscuous mode [ 181.532289][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.548037][ T12] bridge0: left allmulticast mode [ 181.607736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.635846][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.660118][ T12] bond0 (unregistering): Released all slaves [ 181.676832][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1167'. [ 181.717665][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 181.717682][ T28] audit: type=1400 audit(1782091968.902:1535): avc: denied { write } for pid=7537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.799987][ T28] audit: type=1400 audit(1782091968.902:1536): avc: denied { sys_module } for pid=7528 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 181.847600][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 181.865852][ T28] audit: type=1400 audit(1782091968.992:1537): avc: denied { write } for pid=7555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.962900][ T28] audit: type=1400 audit(1782091969.162:1538): avc: denied { write } for pid=7559 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.075103][ T12] hsr_slave_0: left promiscuous mode [ 182.090299][ T12] hsr_slave_1: left promiscuous mode [ 182.101902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.115344][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.274476][ T28] audit: type=1400 audit(1782091969.382:1539): avc: denied { write } for pid=7564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.300561][ T28] audit: type=1400 audit(1782091969.432:1540): avc: denied { write } for pid=7586 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.359988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.371446][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.461174][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 182.484437][ T7591] geneve3: entered allmulticast mode [ 182.807422][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.837952][ T28] audit: type=1400 audit(1782091970.042:1541): avc: denied { write } for pid=7597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.868652][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.899778][ T7528] bridge_slave_0: entered allmulticast mode [ 182.925049][ T7528] bridge_slave_0: entered promiscuous mode [ 182.947857][ T28] audit: type=1400 audit(1782091970.122:1542): avc: denied { write } for pid=7617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.970401][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 182.982885][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.999789][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.014110][ T7528] bridge_slave_1: entered allmulticast mode [ 183.031102][ T7528] bridge_slave_1: entered promiscuous mode [ 183.072014][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.081244][ T28] audit: type=1400 audit(1782091970.282:1543): avc: denied { create } for pid=7603 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.117649][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.138391][ T28] audit: type=1400 audit(1782091970.302:1544): avc: denied { write } for pid=7603 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.181330][ T7528] team0: Port device team_slave_0 added [ 183.199433][ T7528] team0: Port device team_slave_1 added [ 183.231604][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.246869][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.311483][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.353093][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.371764][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.458282][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.526824][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 183.555880][ T7528] hsr_slave_0: entered promiscuous mode [ 183.575398][ T7528] hsr_slave_1: entered promiscuous mode [ 183.591579][ T7528] debugfs: 'hsr0' already exists in 'hsr' [ 183.606049][ T7528] Cannot create hsr debugfs directory [ 183.991730][ T7528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.012860][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.020935][ T7528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.042210][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.051856][ T7528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.072210][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.081152][ T7528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.103720][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.116495][ T7683] netlink: 'syz.2.1186': attribute type 30 has an invalid length. [ 184.143479][ T7683] bond7: option arp_missed_max: invalid value (0) [ 184.175888][ T7683] bond7: option arp_missed_max: allowed values 1 - 255 [ 184.202132][ T7683] bond7 (unregistering): Released all slaves [ 184.341744][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.382368][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.391724][ T7707] Cannot find add_set index 0 as target [ 184.406952][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.414095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.474562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.481702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.790796][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.083767][ T7528] veth0_vlan: entered promiscuous mode [ 185.108511][ T7528] veth1_vlan: entered promiscuous mode [ 185.162364][ T7528] veth0_macvtap: entered promiscuous mode [ 185.190402][ T7528] veth1_macvtap: entered promiscuous mode [ 185.213534][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.235262][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.254099][ T3689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.263702][ T3689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.286542][ T3689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.308688][ T3689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.501407][ T7797] loop5: detected capacity change from 0 to 256 [ 185.519830][ T7797] msdos: Unknown parameter 'dOs1xfloppy' [ 185.619449][ T7805] tipc: Enabling of bearer rejected, failed to enable media [ 186.051539][ T7834] program syz.5.1209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.454197][ T7845] loop5: detected capacity change from 0 to 136 [ 186.907712][ T7859] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 188.233617][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 188.259790][ T7901] loop5: detected capacity change from 0 to 1024 [ 188.267704][ T7901] EXT4-fs: Ignoring removed orlov option [ 188.340754][ T7901] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 188.353457][ T7901] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 188.361721][ T7901] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.370304][ T7901] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.1227: Invalid inode table block 0 in block_group 0 [ 188.384134][ T7901] loop5: lost filesystem error report for type 5 error -117 [ 188.384694][ T7901] EXT4-fs (loop5): Remounting filesystem read-only [ 188.392506][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 188.392521][ C0] EXT4-fs (loop5): initial error at time 1782091975: __ext4_get_inode_loc:4886 [ 188.392542][ C0] EXT4-fs (loop5): last error at time 1782091975: __ext4_get_inode_loc:4886 [ 188.423707][ T7901] __quota_error: 22 callbacks suppressed [ 188.423723][ T7901] Quota error (device loop5): write_blk: dquota write failed [ 188.436999][ T7901] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 188.447161][ T7901] EXT4-fs (loop5): 1 truncate cleaned up [ 188.455339][ T7901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.703042][ T3747] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.853804][ T3747] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.964000][ T3747] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.028480][ T7901] syz.5.1227 (7901) used greatest stack depth: 8696 bytes left [ 189.039596][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.078889][ T3747] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.295886][ T7935] FAULT_INJECTION: forcing a failure. [ 189.295886][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.311956][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.5.1234 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.311982][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.311998][ T7935] Call Trace: [ 189.312006][ T7935] [ 189.312015][ T7935] __dump_stack+0x1d/0x30 [ 189.312061][ T7935] dump_stack_lvl+0x95/0xd0 [ 189.312087][ T7935] dump_stack+0x15/0x1b [ 189.312105][ T7935] should_fail_ex+0x25e/0x270 [ 189.312135][ T7935] should_fail+0xb/0x20 [ 189.312218][ T7935] should_fail_usercopy+0x1a/0x20 [ 189.312254][ T7935] _copy_from_user+0x1c/0xb0 [ 189.312293][ T7935] __sys_connect+0xd0/0x2a0 [ 189.312336][ T7935] __x64_sys_connect+0x3f/0x50 [ 189.312433][ T7935] x64_sys_call+0x2df0/0x3020 [ 189.312482][ T7935] do_syscall_64+0x136/0x3c0 [ 189.312611][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.312639][ T7935] RIP: 0033:0x7faae2f4ce59 [ 189.312664][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.312688][ T7935] RSP: 002b:00007faae19a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 189.312786][ T7935] RAX: ffffffffffffffda RBX: 00007faae31c5fa0 RCX: 00007faae2f4ce59 [ 189.312804][ T7935] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 189.312821][ T7935] RBP: 00007faae19a7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.312837][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.312853][ T7935] R13: 00007faae31c6038 R14: 00007faae31c5fa0 R15: 00007ffcb0915e08 [ 189.312879][ T7935] [ 189.337576][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.484636][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.492179][ T7898] bridge_slave_0: entered allmulticast mode [ 189.498928][ T7898] bridge_slave_0: entered promiscuous mode [ 189.517944][ T7941] gretap0: entered allmulticast mode [ 189.531709][ T3747] gretap0: left allmulticast mode [ 189.538255][ T3747] gretap0: left promiscuous mode [ 189.549871][ T3747] bridge0: port 3(gretap0) entered disabled state [ 189.572059][ T3747] bridge_slave_1: left allmulticast mode [ 189.582124][ T3747] bridge_slave_1: left promiscuous mode [ 189.589333][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.613345][ T3747] bridge_slave_0: left allmulticast mode [ 189.619191][ T3747] bridge_slave_0: left promiscuous mode [ 189.628266][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.666079][ T7948] loop5: detected capacity change from 0 to 4096 [ 189.701856][ T7948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.805019][ T3747] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 189.818898][ T3747] bridge1 (unregistering): left promiscuous mode [ 189.828971][ T3747] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 189.844501][ T3747] bridge2 (unregistering): left promiscuous mode [ 189.876814][ T3747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.892462][ T3747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.906864][ T3747] bond0 (unregistering): Released all slaves [ 189.922946][ T3747] bond1 (unregistering): Released all slaves [ 189.942191][ T3747] bond2 (unregistering): Released all slaves [ 189.966550][ T3747] bond3 (unregistering): Released all slaves [ 189.983893][ T3747] bond4 (unregistering): Released all slaves [ 190.002271][ T3747] bond5 (unregistering): Released all slaves [ 190.021540][ T3747] bond6 (unregistering): Released all slaves [ 190.035227][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.042946][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.051957][ T7898] bridge_slave_1: entered allmulticast mode [ 190.065059][ T7898] bridge_slave_1: entered promiscuous mode [ 190.129521][ T28] audit: type=1400 audit(1782091977.332:1567): avc: denied { write } for pid=7947 comm="syz.5.1239" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.152580][ T7957] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1239: corrupted inode contents [ 190.171375][ T7957] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.1239: mark_inode_dirty error [ 190.191667][ T7957] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1239: corrupted inode contents [ 190.211713][ T7957] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1239: mark_inode_dirty error [ 190.223647][ T7957] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1239: corrupted inode contents [ 190.236194][ T7957] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1239: mark_inode_dirty error [ 190.250530][ T28] audit: type=1400 audit(1782091977.462:1568): avc: denied { append } for pid=7947 comm="syz.5.1239" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.257338][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.277537][ T7957] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1239: corrupted inode contents [ 190.295134][ T28] audit: type=1400 audit(1782091977.502:1569): avc: denied { create } for pid=7947 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.316939][ T7948] ieee802154 phy0 wpan0: encryption failed: -90 [ 190.320546][ T7957] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.1239: mark_inode_dirty error [ 190.324908][ T28] audit: type=1400 audit(1782091977.522:1570): avc: denied { write } for pid=7947 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.367974][ T7957] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 190.384594][ T7948] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1239: corrupted inode contents [ 190.398810][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.493417][ T7898] team0: Port device team_slave_0 added [ 190.502769][ T7898] team0: Port device team_slave_1 added [ 190.515766][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'. [ 190.540030][ T3747] hsr_slave_0: left promiscuous mode [ 190.547365][ T3747] hsr_slave_1: left promiscuous mode [ 190.555148][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.564286][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.575077][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.603792][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.618479][ T3747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.627507][ T28] audit: type=1400 audit(1782091977.822:1571): avc: denied { write } for pid=7965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.678377][ T3747] veth1_macvtap: left promiscuous mode [ 190.687581][ T3747] veth0_macvtap: left promiscuous mode [ 190.702793][ T3747] veth1_vlan: left promiscuous mode [ 190.708524][ T28] audit: type=1400 audit(1782091977.892:1572): avc: denied { write } for pid=7986 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.735774][ T3747] veth0_vlan: left promiscuous mode [ 190.819162][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 190.890179][ T3747] team0 (unregistering): Port device team_slave_1 removed [ 190.965812][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 190.997407][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.011152][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.053215][ T8001] loop5: detected capacity change from 0 to 512 [ 191.061097][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.082570][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.098846][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.149209][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.161670][ T8001] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1250: error while reading EA inode 32 err=-116 [ 191.189887][ T8001] loop5: lost filesystem error report for type 5 error -117 [ 191.190178][ T8001] EXT4-fs (loop5): 1 orphan inode deleted [ 191.203328][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 191.203355][ C0] EXT4-fs (loop5): initial error at time 1782091978: ext4_xattr_inode_iget:446 [ 191.203387][ C0] EXT4-fs (loop5): last error at time 1782091978: ext4_xattr_inode_iget:446 [ 191.229124][ T8001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.247218][ T8001] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.1250: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 191.279534][ T8001] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.1250: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 191.297292][ T7898] hsr_slave_0: entered promiscuous mode [ 191.311382][ T7898] hsr_slave_1: entered promiscuous mode [ 191.319433][ T7898] debugfs: 'hsr0' already exists in 'hsr' [ 191.323300][ T28] audit: type=1400 audit(1782091978.532:1573): avc: denied { write } for pid=8004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.325240][ T7898] Cannot create hsr debugfs directory [ 191.400327][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.428540][ T28] audit: type=1400 audit(1782091978.622:1574): avc: denied { write } for pid=8020 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.460891][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 191.546942][ T8025] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 191.564320][ T8025] bond1: option packets_per_slave: allowed values 0 - 65535 [ 191.574567][ T8025] bond1 (unregistering): Released all slaves [ 191.593553][ T3747] IPVS: stop unused estimator thread 0... [ 191.700011][ T7898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.717601][ T7898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.728587][ T8047] netlink: 'syz.4.1257': attribute type 4 has an invalid length. [ 191.737141][ T7898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.749128][ T7898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.773717][ T7898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.792811][ T7898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.805656][ T7898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.824972][ T7898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.883695][ T8054] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1258'. [ 191.894142][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 191.922125][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.942029][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.956516][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.963639][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.974795][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.981933][ T3689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.181545][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.197253][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 192.428346][ T7898] veth0_vlan: entered promiscuous mode [ 192.461374][ T7898] veth1_vlan: entered promiscuous mode [ 192.476076][ T8117] loop5: detected capacity change from 0 to 2048 [ 192.501617][ T7898] veth0_macvtap: entered promiscuous mode [ 192.527604][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.542264][ T8117] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.560470][ T7898] veth1_macvtap: entered promiscuous mode [ 192.571611][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.586991][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.603448][ T351] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.620931][ T351] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.659033][ T351] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.684350][ T351] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.800049][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.816280][ T8137] loop6: detected capacity change from 0 to 1024 [ 192.837662][ T8137] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.854143][ T8137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.868916][ T8137] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.886680][ T8139] FAULT_INJECTION: forcing a failure. [ 192.886680][ T8139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.900862][ T8139] CPU: 0 UID: 0 PID: 8139 Comm: syz.4.1268 Not tainted syzkaller #0 PREEMPT(lazy) [ 192.900936][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.900968][ T8139] Call Trace: [ 192.900975][ T8139] [ 192.900985][ T8139] __dump_stack+0x1d/0x30 [ 192.901073][ T8139] dump_stack_lvl+0x95/0xd0 [ 192.901147][ T8139] dump_stack+0x15/0x1b [ 192.901238][ T8139] should_fail_ex+0x25e/0x270 [ 192.901298][ T8139] should_fail+0xb/0x20 [ 192.901328][ T8139] should_fail_usercopy+0x1a/0x20 [ 192.901360][ T8139] _copy_from_user+0x1c/0xb0 [ 192.901402][ T8139] ___sys_sendmsg+0xc1/0x1e0 [ 192.901444][ T8139] __x64_sys_sendmsg+0xd4/0x160 [ 192.901527][ T8139] x64_sys_call+0x194c/0x3020 [ 192.901616][ T8139] do_syscall_64+0x136/0x3c0 [ 192.901698][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.901726][ T8139] RIP: 0033:0x7f7ceb82ce59 [ 192.901742][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.901765][ T8139] RSP: 002b:00007f7cea287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.901786][ T8139] RAX: ffffffffffffffda RBX: 00007f7cebaa5fa0 RCX: 00007f7ceb82ce59 [ 192.901809][ T8139] RDX: 0000000000000804 RSI: 0000200000000200 RDI: 0000000000000005 [ 192.901822][ T8139] RBP: 00007f7cea287090 R08: 0000000000000000 R09: 0000000000000000 [ 192.901835][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.901850][ T8139] R13: 00007f7cebaa6038 R14: 00007f7cebaa5fa0 R15: 00007fff5ffc3868 [ 192.901876][ T8139] [ 192.908057][ T8137] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.1226: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 193.089750][ T8137] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.091080][ T8137] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1226: couldn't read orphan inode 11 (err -117) [ 193.100404][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 193.100428][ C0] EXT4-fs (loop6): initial error at time 1782091980: ext4_ext_check_inode:521: inode 11 [ 193.100477][ C0] EXT4-fs (loop6): last error at time 1782091980: ext4_ext_check_inode:521: inode 11 [ 193.146032][ T8137] loop6: lost filesystem error report for type 5 error -117 [ 193.148608][ T8137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.197546][ T8149] loop5: detected capacity change from 0 to 512 [ 193.230689][ T8147] ip6t_rpfilter: unknown options [ 193.281979][ T8137] FAULT_INJECTION: forcing a failure. [ 193.281979][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.326099][ T8149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.346808][ T8137] CPU: 1 UID: 0 PID: 8137 Comm: syz.6.1226 Not tainted syzkaller #0 PREEMPT(lazy) [ 193.346901][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.346919][ T8137] Call Trace: [ 193.346927][ T8137] [ 193.346937][ T8137] __dump_stack+0x1d/0x30 [ 193.346965][ T8137] dump_stack_lvl+0x95/0xd0 [ 193.346986][ T8137] dump_stack+0x15/0x1b [ 193.347007][ T8137] should_fail_ex+0x25e/0x270 [ 193.347042][ T8137] should_fail+0xb/0x20 [ 193.347066][ T8137] should_fail_usercopy+0x1a/0x20 [ 193.347141][ T8137] strncpy_from_user+0x27/0x250 [ 193.347168][ T8137] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 193.347201][ T8137] do_getname+0x59/0x1c0 [ 193.347231][ T8137] getname_flags+0x1d/0x30 [ 193.347260][ T8137] __se_sys_quotactl+0x157/0x630 [ 193.347313][ T8137] __x64_sys_quotactl+0x55/0x70 [ 193.347343][ T8137] x64_sys_call+0x1a2a/0x3020 [ 193.347367][ T8137] do_syscall_64+0x136/0x3c0 [ 193.347463][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.347493][ T8137] RIP: 0033:0x7f45676cce59 [ 193.347514][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.347565][ T8137] RSP: 002b:00007f4566127028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 193.347600][ T8137] RAX: ffffffffffffffda RBX: 00007f4567945fa0 RCX: 00007f45676cce59 [ 193.347659][ T8137] RDX: 0000000000000000 RSI: 0000200000005bc0 RDI: ffffffff80000800 [ 193.347673][ T8137] RBP: 00007f4566127090 R08: 0000000000000000 R09: 0000000000000000 [ 193.347764][ T8137] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 193.347780][ T8137] R13: 00007f4567946038 R14: 00007f4567945fa0 R15: 00007ffc39df1d68 [ 193.347824][ T8137] [ 193.407756][ T8160] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1226: Invalid block bitmap block 0 in block_group 0 [ 193.536196][ T8160] __quota_error: 6 callbacks suppressed [ 193.536212][ T8160] Quota error (device loop6): write_blk: dquota write failed [ 193.565044][ T8160] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 193.575391][ T8160] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1226: Failed to acquire dquot type 0 [ 194.508982][ T7898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.518505][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.612862][ T8179] loop6: detected capacity change from 0 to 2048 [ 194.666641][ T8179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.679358][ T8179] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.816890][ T7898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.860775][ T8185] loop5: detected capacity change from 0 to 512 [ 194.880643][ T8185] EXT4-fs: Ignoring removed bh option [ 194.922583][ T28] audit: type=1400 audit(1782091982.132:1581): avc: denied { create } for pid=8188 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 194.947115][ T8189] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 194.956015][ T28] audit: type=1400 audit(1782091982.162:1582): avc: denied { ioctl } for pid=8188 comm="syz.0.1284" path="socket:[24855]" dev="sockfs" ino=24855 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 194.987568][ T8185] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1282: corrupted xattr block 95: invalid header [ 195.006703][ T8185] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 195.007182][ T8185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1282: bg 0: block 7: invalid block bitmap [ 195.016451][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 195.016467][ C0] EXT4-fs (loop5): initial error at time 1782091982: ext4_expand_extra_isize_ea:2810: inode 11 [ 195.016500][ C0] EXT4-fs (loop5): last error at time 1782091982: ext4_expand_extra_isize_ea:2810: inode 11 [ 195.105982][ T8185] loop5: lost filesystem error report for type 5 error -117 [ 195.106171][ T8185] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 195.139107][ T8185] loop5: lost filesystem error report for type 5 error -117 [ 195.139469][ T8185] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1282: corrupted xattr block 95: invalid header [ 195.172172][ T8185] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 195.174660][ T8185] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 195.204545][ T8185] EXT4-fs (loop5): 1 orphan inode deleted [ 195.211125][ T8185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.241365][ T28] audit: type=1400 audit(1782091982.452:1583): avc: denied { write } for pid=8184 comm="syz.5.1282" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.268954][ T6788] IPVS: starting estimator thread 0... [ 195.293062][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.370454][ T8203] IPVS: using max 2160 ests per chain, 108000 per kthread [ 195.394526][ T8211] cgroup: none used incorrectly [ 195.420329][ T28] audit: type=1400 audit(1782091982.632:1584): avc: denied { ioctl } for pid=8216 comm="syz.2.1294" path="socket:[25672]" dev="sockfs" ino=25672 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.457356][ T8214] loop5: detected capacity change from 0 to 2048 [ 195.493387][ T8214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.506118][ T8214] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.631501][ T8226] 9pnet_fd: Insufficient options for proto=fd [ 195.643152][ T8228] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 195.883393][ T28] audit: type=1326 audit(1782091983.082:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.6.1296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45676cce59 code=0x0 [ 197.325005][ T6784] IPVS: starting estimator thread 0... [ 197.414936][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.424174][ T8250] IPVS: using max 1680 ests per chain, 84000 per kthread [ 197.628003][ T28] audit: type=1400 audit(1782091984.832:1586): avc: denied { create } for pid=8253 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.691552][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1306'. [ 197.845097][ T8274] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.939417][ T28] audit: type=1326 audit(1782091985.142:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8278 comm="syz.4.1308" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ceb82ce59 code=0x0 [ 197.982100][ T8274] FAULT_INJECTION: forcing a failure. [ 197.982100][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 198.004711][ T8283] process 'syz.4.1308' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 198.082597][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.6.1306 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.082660][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.082675][ T8274] Call Trace: [ 198.082684][ T8274] [ 198.082696][ T8274] __dump_stack+0x1d/0x30 [ 198.082726][ T8274] dump_stack_lvl+0x95/0xd0 [ 198.082815][ T8274] dump_stack+0x15/0x1b [ 198.082836][ T8274] should_fail_ex+0x25e/0x270 [ 198.082870][ T8274] should_failslab+0x8c/0xb0 [ 198.082897][ T8274] __kmalloc_noprof+0xb8/0x4d0 [ 198.082948][ T8274] ? fib6_info_alloc+0x2e/0x90 [ 198.083020][ T8274] fib6_info_alloc+0x2e/0x90 [ 198.083041][ T8274] ip6_route_info_create+0xe5/0x4e0 [ 198.083131][ T8274] ip6_route_add+0x49/0x170 [ 198.083161][ T8274] inet6_rtm_newroute+0x138/0x1140 [ 198.083183][ T8274] ? xas_load+0x413/0x430 [ 198.083338][ T8274] ? xas_load+0x413/0x430 [ 198.083384][ T8274] ? __siphash_unaligned+0x185/0x2d0 [ 198.083410][ T8274] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 198.083490][ T8274] ? selinux_capable+0x31/0x40 [ 198.083583][ T8274] ? security_capable+0x7b/0x90 [ 198.083662][ T8274] ? ns_capable+0x80/0xb0 [ 198.083697][ T8274] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 198.083726][ T8274] rtnetlink_rcv_msg+0x64b/0x720 [ 198.083770][ T8274] netlink_rcv_skb+0x11e/0x220 [ 198.083806][ T8274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.083840][ T8274] rtnetlink_rcv+0x1c/0x30 [ 198.083872][ T8274] netlink_unicast+0x5a7/0x680 [ 198.083923][ T8274] netlink_sendmsg+0x5be/0x6f0 [ 198.083960][ T8274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.084058][ T8274] ____sys_sendmsg+0x532/0x580 [ 198.084085][ T8274] ___sys_sendmsg+0x195/0x1e0 [ 198.084133][ T8274] __x64_sys_sendmsg+0xd4/0x160 [ 198.084169][ T8274] x64_sys_call+0x194c/0x3020 [ 198.084205][ T8274] do_syscall_64+0x136/0x3c0 [ 198.084232][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.084317][ T8274] RIP: 0033:0x7f45676cce59 [ 198.084334][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.084358][ T8274] RSP: 002b:00007f4566127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.084390][ T8274] RAX: ffffffffffffffda RBX: 00007f4567945fa0 RCX: 00007f45676cce59 [ 198.084409][ T8274] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000a [ 198.084426][ T8274] RBP: 00007f4566127090 R08: 0000000000000000 R09: 0000000000000000 [ 198.084441][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.084453][ T8274] R13: 00007f4567946038 R14: 00007f4567945fa0 R15: 00007ffc39df1d68 [ 198.084474][ T8274] [ 198.425276][ T28] audit: type=1400 audit(1782091985.582:1588): avc: denied { execute_no_trans } for pid=8278 comm="syz.4.1308" path="/285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.681960][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1311'. [ 198.692032][ T8293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8293 comm=syz.6.1311 [ 198.974172][ T8302] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 199.054663][ T8300] loop5: detected capacity change from 0 to 512 [ 199.083592][ T8302] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 199.146231][ T8300] EXT4-fs: Ignoring removed bh option [ 199.168406][ T8302] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 199.273717][ T8302] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 199.543059][ T3689] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.553458][ T3689] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.555944][ T8300] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1314: corrupted xattr block 95: invalid header [ 199.562220][ T3689] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.584205][ T3689] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 199.602432][ T8312] sg_write: data in/out 491484/136 bytes for SCSI command 0x0-- guessing data in; [ 199.602432][ T8312] program syz.6.1315 not setting count and/or reply_len properly [ 199.631748][ T8300] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.632024][ T8300] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1314: bg 0: block 7: invalid block bitmap [ 199.641234][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 199.641258][ C1] EXT4-fs (loop5): initial error at time 1782091986: ext4_expand_extra_isize_ea:2810: inode 11 [ 199.641298][ C1] EXT4-fs (loop5): last error at time 1782091986: ext4_expand_extra_isize_ea:2810: inode 11 [ 199.681731][ T8300] loop5: lost filesystem error report for type 5 error -117 [ 199.681997][ T8300] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 199.698626][ T8300] loop5: lost filesystem error report for type 5 error -117 [ 199.698894][ T8300] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1314: corrupted xattr block 95: invalid header [ 199.741342][ T8300] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.741589][ T8300] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 199.792905][ T8319] loop6: detected capacity change from 0 to 512 [ 199.803639][ T8300] EXT4-fs (loop5): 1 orphan inode deleted [ 199.827229][ T8319] EXT4-fs: Ignoring removed bh option [ 199.835908][ T8300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.869436][ T8319] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.1317: corrupted xattr block 95: invalid header [ 199.903987][ T8319] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.905537][ T8319] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1317: bg 0: block 7: invalid block bitmap [ 199.914777][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 199.914801][ C1] EXT4-fs (loop6): initial error at time 1782091987: ext4_expand_extra_isize_ea:2810: inode 11 [ 199.914827][ C1] EXT4-fs (loop6): last error at time 1782091987: ext4_expand_extra_isize_ea:2810: inode 11 [ 199.954663][ T8319] loop6: lost filesystem error report for type 5 error -117 [ 199.955217][ T8319] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 199.957946][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.963538][ T8319] loop6: lost filesystem error report for type 5 error -117 [ 199.994961][ T8319] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.1317: corrupted xattr block 95: invalid header [ 200.029040][ T8319] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.029249][ T8319] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 200.047944][ T8319] EXT4-fs (loop6): 1 orphan inode deleted [ 200.054424][ T8319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.082890][ T23] IPVS: starting estimator thread 0... [ 200.091704][ T28] audit: type=1400 audit(1782091987.282:1589): avc: denied { write } for pid=8318 comm="syz.6.1317" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.141650][ T28] audit: type=1400 audit(1782091987.352:1590): avc: denied { setopt } for pid=8333 comm="syz.5.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.162503][ T28] audit: type=1400 audit(1782091987.352:1591): avc: denied { ioctl } for pid=8333 comm="syz.5.1321" path="socket:[25076]" dev="sockfs" ino=25076 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.209963][ T8331] IPVS: using max 2256 ests per chain, 112800 per kthread [ 200.646245][ T7898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.954517][ T8354] loop5: detected capacity change from 0 to 512 [ 201.072605][ T8354] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.145074][ T8354] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1326: invalid indirect mapped block 32768 (level 2) [ 201.160617][ T8354] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 201.168986][ T8354] EXT4-fs (loop5): 1 orphan inode deleted [ 201.178450][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 201.178580][ C0] EXT4-fs (loop5): initial error at time 1782091988: ext4_free_branches:1023: inode 16 [ 201.178770][ C0] EXT4-fs (loop5): last error at time 1782091988: ext4_free_branches:1023: inode 16 [ 201.213323][ T8354] EXT4-fs (loop5): 1 truncate cleaned up [ 201.231356][ T8354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.102768][ T8310] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 210 vs 220 free clusters [ 202.552963][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.615731][ T8381] syzkaller0: entered promiscuous mode [ 202.629529][ T8381] syzkaller0: entered allmulticast mode [ 202.659622][ T28] audit: type=1400 audit(1782091989.862:1592): avc: denied { write } for pid=8375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.715231][ T8314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.732869][ T28] audit: type=1400 audit(1782091989.932:1593): avc: denied { write } for pid=8389 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.795408][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 202.813563][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 202.820153][ T28] audit: type=1400 audit(1782091990.022:1594): avc: denied { write } for pid=8396 comm="syz.0.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 202.863060][ T8403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1334'. [ 202.902782][ T8405] loop5: detected capacity change from 0 to 512 [ 202.909962][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1334'. [ 202.910780][ T8405] EXT4-fs: Ignoring removed bh option [ 203.089102][ T8405] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1335: corrupted xattr block 95: invalid header [ 203.111227][ T8405] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.111638][ T8405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1335: bg 0: block 7: invalid block bitmap [ 203.120837][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 203.120854][ C0] EXT4-fs (loop5): initial error at time 1782091990: ext4_expand_extra_isize_ea:2810: inode 11 [ 203.120890][ C0] EXT4-fs (loop5): last error at time 1782091990: ext4_expand_extra_isize_ea:2810: inode 11 [ 203.404247][ T8405] loop5: lost filesystem error report for type 5 error -117 [ 203.405030][ T8405] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 203.652664][ T8405] loop5: lost filesystem error report for type 5 error -117 [ 203.655090][ T8405] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1335: corrupted xattr block 95: invalid header [ 204.027190][ T8405] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.028767][ T8405] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 204.193378][ T8405] EXT4-fs (loop5): 1 orphan inode deleted [ 204.222621][ T8405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.256499][ T28] audit: type=1400 audit(1782091991.462:1595): avc: denied { write } for pid=8404 comm="syz.5.1335" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.389642][ T28] audit: type=1400 audit(1782091991.592:1596): avc: denied { write } for pid=8424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.458282][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.502776][ T28] audit: type=1400 audit(1782091991.702:1597): avc: denied { write } for pid=8438 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.734439][ T28] audit: type=1400 audit(1782091991.942:1598): avc: denied { write } for pid=8441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.152121][ T8484] loop5: detected capacity change from 0 to 512 [ 205.178393][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 205.178431][ T28] audit: type=1400 audit(1782091992.382:1601): avc: denied { write } for pid=8463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.226360][ T8484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.297873][ T28] audit: type=1400 audit(1782091992.442:1602): avc: denied { write } for pid=8490 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.429183][ T8484] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.1342: corrupted in-inode xattr: e_name out of bounds [ 205.451457][ T8484] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 205.451643][ T8484] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1342: couldn't read orphan inode 17 (err -117) [ 205.460880][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 205.460905][ C1] EXT4-fs (loop5): initial error at time 1782091992: ext4_iget_extra_inode:5180: inode 17 [ 205.460943][ C1] EXT4-fs (loop5): last error at time 1782091992: ext4_iget_extra_inode:5180: inode 17 [ 205.630402][ T8484] loop5: lost filesystem error report for type 5 error -117 [ 205.631572][ T8484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.052552][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.609656][ T8519] loop5: detected capacity change from 0 to 512 [ 207.213311][ T8520] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 207.277834][ T8519] EXT4-fs: Ignoring removed bh option [ 207.348923][ T8520] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 207.517024][ T8519] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1352: corrupted xattr block 95: invalid header [ 207.541733][ T8520] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 207.554677][ T8519] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.554977][ T8519] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1352: bg 0: block 7: invalid block bitmap [ 207.564169][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 207.564185][ C0] EXT4-fs (loop5): initial error at time 1782091994: ext4_expand_extra_isize_ea:2810: inode 11 [ 207.564216][ C0] EXT4-fs (loop5): last error at time 1782091994: ext4_expand_extra_isize_ea:2810: inode 11 [ 207.631168][ T8519] loop5: lost filesystem error report for type 5 error -117 [ 207.631488][ T8519] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 207.675197][ T8520] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 207.678753][ T8519] loop5: lost filesystem error report for type 5 error -117 [ 207.693971][ T8519] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1352: corrupted xattr block 95: invalid header [ 207.737819][ T359] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.746232][ T8519] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.751155][ T8519] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 207.772201][ T359] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.791262][ T8519] EXT4-fs (loop5): 1 orphan inode deleted [ 207.807550][ T8519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.819757][ T359] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.856283][ T359] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.886984][ T28] audit: type=1400 audit(1782091995.092:1603): avc: denied { write } for pid=8518 comm="syz.5.1352" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.056606][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.842541][ T3689] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.873524][ T3689] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.933942][ T28] audit: type=1326 audit(1782091999.142:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.4.1369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ceb82ce59 code=0x0 [ 212.014771][ T3689] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.041102][ T3689] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.095744][ T8591] loop5: detected capacity change from 0 to 512 [ 212.183372][ T8591] EXT4-fs: Ignoring removed bh option [ 212.352777][ T28] audit: type=1400 audit(1782091999.532:1605): avc: denied { getattr } for pid=8576 comm="syz.0.1368" lport=54664 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.396932][ T8591] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1372: corrupted xattr block 95: invalid header [ 212.515076][ T8591] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.516430][ T8591] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1372: bg 0: block 7: invalid block bitmap [ 212.525693][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 212.525716][ C0] EXT4-fs (loop5): initial error at time 1782091999: ext4_expand_extra_isize_ea:2810: inode 11 [ 212.525756][ C0] EXT4-fs (loop5): last error at time 1782091999: ext4_expand_extra_isize_ea:2810: inode 11 [ 212.669366][ T8591] loop5: lost filesystem error report for type 5 error -117 [ 212.679124][ T8591] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 212.736759][ T8591] loop5: lost filesystem error report for type 5 error -117 [ 212.756557][ T8591] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1372: corrupted xattr block 95: invalid header [ 212.796598][ T8605] macsec1: entered promiscuous mode [ 212.812864][ T8591] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.814449][ T8591] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 212.867229][ T8591] EXT4-fs (loop5): 1 orphan inode deleted [ 212.881299][ T8591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.921829][ T28] audit: type=1400 audit(1782092000.132:1606): avc: denied { write } for pid=8589 comm="syz.5.1372" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.109338][ T28] audit: type=1400 audit(1782092002.312:1607): avc: denied { setopt } for pid=8620 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.722339][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.966393][ T8641] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 215.988829][ T28] audit: type=1326 audit(1782092003.192:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 216.125920][ T8642] loop5: detected capacity change from 0 to 512 [ 216.147319][ T8642] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.221273][ T8642] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1379: invalid indirect mapped block 32768 (level 2) [ 216.236185][ T8642] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 216.240678][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 216.256272][ C0] EXT4-fs (loop5): initial error at time 1782092003: ext4_free_branches:1023: inode 16 [ 216.265988][ C0] EXT4-fs (loop5): last error at time 1782092003: ext4_free_branches:1023: inode 16 [ 216.276015][ T8642] EXT4-fs (loop5): 1 orphan inode deleted [ 216.282563][ T8642] EXT4-fs (loop5): 1 truncate cleaned up [ 216.303558][ T8642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.964788][ T28] audit: type=1326 audit(1782092003.192:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 216.990296][ T28] audit: type=1326 audit(1782092003.572:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 217.254720][ T8657] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1389'. [ 217.698728][ T28] audit: type=1326 audit(1782092003.572:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 217.724413][ T28] audit: type=1326 audit(1782092003.572:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97899ce59 code=0x7ffc0000 [ 217.727172][ T7528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.750957][ T28] audit: type=1326 audit(1782092003.632:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 217.791462][ T28] audit: type=1326 audit(1782092003.632:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 217.949929][ T28] audit: type=1326 audit(1782092003.642:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 218.127103][ T28] audit: type=1326 audit(1782092003.642:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 218.294289][ T28] audit: type=1326 audit(1782092003.652:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 218.360835][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100a27600: rx timeout, send abort [ 218.502867][ T28] audit: type=1326 audit(1782092003.652:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.2.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb97895d68e code=0x7ffc0000 [ 218.861027][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100a27400: rx timeout, send abort [ 218.869975][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100a27600: abort rx timeout. Force session deactivation [ 219.117239][ T8685] netlink: 4684 bytes leftover after parsing attributes in process `syz.5.1399'. [ 219.370036][ C1] vcan0: j1939_tp_rxtimer: 0xffff888100a27400: abort rx timeout. Force session deactivation [ 219.544159][ T8687] loop5: detected capacity change from 0 to 128 [ 219.652346][ T8687] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.689521][ T8687] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.951030][ T8694] ================================================================== [ 219.959176][ T8694] BUG: KCSAN: data-race in _copy_to_iter / copy_folio_from_iter_atomic [ 219.967467][ T8694] [ 219.969810][ T8694] read to 0xffff8881244ac30c of 6 bytes by task 8695 on cpu 0: [ 219.977372][ T8694] _copy_to_iter+0x605/0xea0 [ 219.982021][ T8694] copy_page_to_iter+0x174/0x210 [ 219.987084][ T8694] shmem_file_read_iter+0x29c/0x4b0 [ 219.992320][ T8694] copy_splice_read+0x47a/0x6b0 [ 219.997289][ T8694] splice_direct_to_actor+0x27c/0x680 [ 220.002691][ T8694] do_splice_direct+0x119/0x1a0 [ 220.007575][ T8694] do_sendfile+0x37d/0x640 [ 220.012017][ T8694] __x64_sys_sendfile64+0x105/0x150 [ 220.017241][ T8694] x64_sys_call+0x2dc4/0x3020 [ 220.021945][ T8694] do_syscall_64+0x136/0x3c0 [ 220.026563][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.032478][ T8694] [ 220.034817][ T8694] write to 0xffff8881244ac30c of 12 bytes by task 8694 on cpu 1: [ 220.042556][ T8694] copy_folio_from_iter_atomic+0x728/0x10a0 [ 220.048494][ T8694] generic_perform_write+0x2c4/0x490 [ 220.053809][ T8694] shmem_file_write_iter+0xc5/0xf0 [ 220.058956][ T8694] iter_file_splice_write+0x6a0/0xa60 [ 220.064355][ T8694] direct_splice_actor+0x156/0x280 [ 220.069491][ T8694] splice_direct_to_actor+0x2f9/0x680 [ 220.074889][ T8694] do_splice_direct+0x119/0x1a0 [ 220.079798][ T8694] do_sendfile+0x37d/0x640 [ 220.084246][ T8694] __x64_sys_sendfile64+0x105/0x150 [ 220.089502][ T8694] x64_sys_call+0x2dc4/0x3020 [ 220.094234][ T8694] do_syscall_64+0x136/0x3c0 [ 220.098861][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.104802][ T8694] [ 220.107139][ T8694] Reported by Kernel Concurrency Sanitizer on: [ 220.113306][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.4.1401 Not tainted syzkaller #0 PREEMPT(lazy) [ 220.122616][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.132691][ T8694] ================================================================== [ 220.836489][ T7528] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.