last executing test programs: 18m3.971317236s ago: executing program 2 (id=101): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x8004) 18m3.883985959s ago: executing program 2 (id=104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) syz_emit_ethernet(0xbc2, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xaa, 0x1, 'b', "ac7e55", 0x10, "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"}}}}}, 0x0) 18m3.883614949s ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000023c0)='.\x00', &(0x7f00000024c0)='hugetlbfs\x00', 0x2200890, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0/../file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 18m3.84576085s ago: executing program 2 (id=108): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x9) 18m3.663397436s ago: executing program 2 (id=112): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='\x00', 0xfffd, 0x40e0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18m3.407999284s ago: executing program 2 (id=124): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x8004) sendto$inet(r0, &(0x7f0000000240)="25d5ea", 0x3, 0x40, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 18m3.362217195s ago: executing program 32 (id=124): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x8004) sendto$inet(r0, &(0x7f0000000240)="25d5ea", 0x3, 0x40, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 10m30.607069691s ago: executing program 3 (id=6825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 10m30.32940919s ago: executing program 3 (id=6828): r0 = socket$inet6(0xa, 0x80000, 0xca) io_uring_setup(0x2628, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x805, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r3, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002780)="9832", 0x2}], 0x2}}], 0x1, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x4, @perf_bp={&(0x7f00000010c0), 0x8}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="04000000000800000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="800162280000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r5 = signalfd(r4, &(0x7f00000000c0), 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0xb00, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f00000002c0)={0x8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8, 0x10, 0x6, 0xd, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x67, 0x0, 0x4, 0x2f, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001200)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa670, 0x5, 0x2, 0x400, 0x3, 0xa0000, r9}) 10m28.410141762s ago: executing program 3 (id=6839): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) r7 = pidfd_getfd(r5, r5, 0x0) rt_sigqueueinfo(r1, 0x41, &(0x7f0000000240)={0x3a, 0x7, 0xcc0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000040)={0xd5, 0x8000, 0x1, 'queue0\x00', 0x8}) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r8, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) 10m26.59571818s ago: executing program 3 (id=6849): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x800, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x4, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 10m23.863189528s ago: executing program 3 (id=6857): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad07fc26e4c91ea4feb931647fc5393de25000000000000f2ffff032e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d34", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f936", 0xdb}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="005bd507a6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05a7e5f0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706f", 0xb3, 0x10008895, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002540)="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", 0xace}], 0x1, 0x0, 0x0, 0x24040000}, 0x1) 10m22.304032297s ago: executing program 3 (id=6867): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10m22.279937909s ago: executing program 33 (id=6867): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 6m9.816430983s ago: executing program 6 (id=8435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6m9.636773309s ago: executing program 6 (id=8437): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 6m9.424846145s ago: executing program 6 (id=8440): r0 = socket$inet6(0xa, 0x80000, 0xca) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x4, @perf_bp={&(0x7f00000010c0), 0x8}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="04000000000800000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="800162280000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r3 = signalfd(r2, &(0x7f00000000c0), 0x8) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0xb00, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000002c0)={0x8}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001200)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa670, 0x5, 0x2, 0x400, 0x3, 0xa0000}) 6m8.081749389s ago: executing program 6 (id=8452): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 6m7.948442873s ago: executing program 6 (id=8455): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x474203, 0x120, 0x22}, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="0a000010ffffffffffffaaaaaaaaa2aa86dd6917007e00082c00fc02ff0200000000000000000000000000015e00000700000000"], 0x42) 6m7.798191617s ago: executing program 6 (id=8459): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}}}}]}, 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0xf9, 0x1215, &(0x7f0000001840)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x3) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 5m52.715128701s ago: executing program 34 (id=8459): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}}}}]}, 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0xf9, 0x1215, &(0x7f0000001840)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x3) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 4m12.176060485s ago: executing program 4 (id=9184): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000000024f0d1c500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000039000100faff070004000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m12.113744527s ago: executing program 4 (id=9186): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43aff87ffffffffffffff0000000000000010ff02000000000000000000000000000589"], 0x340a) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 4m11.882800134s ago: executing program 4 (id=9188): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000071180f000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\n\x00syzkaller\x00'], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket(0x10, 0x3, 0x0) unshare(0x28050080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@noquota}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x18) socket$kcm(0x29, 0x3, 0x0) 4m9.640095626s ago: executing program 4 (id=9200): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 4m8.670099497s ago: executing program 4 (id=9211): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000ff"], 0xfdef) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00"/48], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000004c0)) r3 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x13) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x560, &(0x7f0000000080)={0x1b, 0x3, 0x3ff}) 4m6.840438856s ago: executing program 4 (id=9223): sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0xc8, 0x15, 0x400, 0x70bd25, 0x25dfdbff, {0xb}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "962c7c1194439a6b99949c4f16c9ba005817f17ff71f3616116fd90c7d3c2068ef190c5a241215d87c2e061d3a554ffacddb00561f61d3ef8be20001f4f3125406d271dd1a3d5f11d5cfc14669d660392f9ef2731fe154fa317da681e35da0dd26b717b2bb42bdfa2e82b6b5ad48a24960c0b067881e2c80acfebca988c4c589af"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "503ae30bdeec18743a768b952312c0b38846aeb3e063f70492ed6b55cd19854546f82921"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004040}, 0x44004) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 3m51.601593795s ago: executing program 35 (id=9223): sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0xc8, 0x15, 0x400, 0x70bd25, 0x25dfdbff, {0xb}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "962c7c1194439a6b99949c4f16c9ba005817f17ff71f3616116fd90c7d3c2068ef190c5a241215d87c2e061d3a554ffacddb00561f61d3ef8be20001f4f3125406d271dd1a3d5f11d5cfc14669d660392f9ef2731fe154fa317da681e35da0dd26b717b2bb42bdfa2e82b6b5ad48a24960c0b067881e2c80acfebca988c4c589af"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "503ae30bdeec18743a768b952312c0b38846aeb3e063f70492ed6b55cd19854546f82921"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004040}, 0x44004) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 10.759793185s ago: executing program 5 (id=11203): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x6063100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r7, r8, 0x25, 0x4, @val=@netkit={@void, @value=r7}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) syz_usb_disconnect(0xffffffffffffffff) 7.911117426s ago: executing program 5 (id=11218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8010, r1, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = syz_usbip_server_init(0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$usbip_server(r4, &(0x7f00000000c0)=ANY=[], 0x35) mmap(&(0x7f0000e80000/0x4000)=nil, 0x4000, 0xb, 0x30, r4, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff00000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_devices(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070"], 0xffdd) setregid(0xffffffffffffffff, r7) fchown(r4, r5, r7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.764059593s ago: executing program 7 (id=11226): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0xb, 0x6, 0x200}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 6.762751663s ago: executing program 7 (id=11227): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5a3f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv4_delrule={0x64, 0x21, 0x0, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000001}, @FRA_FLOW={0x8, 0xb, 0x2e84}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8e}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x79}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0xffffffffffffff21, 0x10, 0x8001}, @FRA_FLOW={0x8, 0xb, 0xe59c}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) r7 = open_tree(r5, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000640)}, {0x0}], 0x3}, 0x4001) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x109}) 6.372550306s ago: executing program 5 (id=11228): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x6063100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r7, r8, 0x25, 0x4, @val=@netkit={@void, @value=r7}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) syz_usb_disconnect(0xffffffffffffffff) 5.865026742s ago: executing program 8 (id=11229): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000580)="$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") r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2086e11b}}, './file0\x00'}) sendto$l2tp6(r2, &(0x7f0000000040)="ff4c13680d5ba3852b7eda79d9facf5956d314dc2ef93bbb647645cafa8ed78695850cc5d722b7e6ce0915e1427c02928ba589befac48f294526cd89f292c8d908e6ec157d", 0x45, 0x4040012, &(0x7f0000000180)={0xa, 0x0, 0x41, @empty, 0x0, 0x4}, 0x20) 5.447961005s ago: executing program 8 (id=11230): epoll_create1(0x80000) socketpair$unix(0x1, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.832673325s ago: executing program 8 (id=11231): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000694000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x20003db}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x346}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x52e3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000000600)=""/156, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828bd7000fbdbdf251200000014000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="64c481414fecb3c50a0d33e80b56c6339b47965424c3b1b2463846b278f08e96ced5a04eb29c632895080f8be8366b99dabb491869253c1a6dab025ed42702da68466873f747a6a0d5d0601955f4ea0c1a9c9a8013b1147cc9aaf4bd5712290dc805db5fa13deee116622ea7b3a0bd44b92e1067f0075727c491e61a5c09a5f29325c14bcfcc85d46ee90ee953dd6d09a90ce500aa4762268c36e37c42b63a5a38b5bc02e167ab75b912342ab7113c878d7cff81b0d5"], 0x28}}, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.547658274s ago: executing program 0 (id=11233): r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x10000003, 0x1ff, 0x9, 0x2, 0xffffffff, 0x2, 0x72, 0x8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbbb2}}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1dc, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "54682c9145"}, @NFTA_TABLE_USERDATA={0x104, 0x6, "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"}, @NFTA_TABLE_USERDATA={0x96, 0x6, "7fc8cb7b088a99b7c8207615b58a25730fad99c9be2be0e59983dc03a6ff6139bf913b9ca27f9a36bedbb494e409d41cd3d439a64940e6219dc2ea4b288b36287ee7c798c66674e279bb8af0e9480e9814d0634152fbfef818ce2a931c46d8b51f6486e3d21847970f2b276775664e45974f4bd1e63cbe9d22be53714abc2760dd7c793c7cb05871c37240db71e48e9faf04"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @multicast1}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @loopback}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @multicast1}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0xd5}, @NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e22}]}}, @NFT_MSG_DELSET={0x16c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x13c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7fc}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xdbb0d1a2442199af}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x95}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x204, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x430}, 0x1, 0x0, 0x0, 0x4008894}, 0x24008000) r2 = accept$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0xab, 0x9, 0x22, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, 0x80, 0x10, 0x5, 0x26}}) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000640)="86d8ba72869bfaaf86e290ebe7d77aeb1dd6c1914dc40a29a7d835c26477bf9d76e84ec4b68d374ba3924d8be327661435b0d2c6d930b7cd5cd53313d78ff0c3cadcca45b9194898b96c9e15c7d51b534ef647f8797327fe18cfcaf91643054773180c02c587418d070ba513e0aec77a9805a4f87dd573772379afba092623ded03762913817634a3c286b8e9c6148dbd567fd8021dc399c70343f20e8a5feaea0e0ea883dc39466273200b8d61ddd0325b7358108984f1b11bb3555753f687bff6a4278c2", 0xc5}, {&(0x7f0000000740)="b814955adc2baa293073415bc310a4518802f1d18c89896c235f9c8d4255fcb2c77d8759080eb383168ec63f957876c5839621854eca1596d892359db44d2eadf25b858e4992911fd70a685681606ed2712765629695af6d629fc87e077b53a9725cce0da77e", 0x66}, {&(0x7f00000007c0)="384dd6c2", 0x4}, {&(0x7f0000000800)="9e3e57ea6b90def6ba97e3ae1a1a2c8649c3a1c1a42b313add8c5fad9d3211080250caa5a9d43516124f0986b68d0c0abb58b983eb06a0f973866167375261334d20db74b5a6480a53360ecad9a9670144272eaf2021862dad011c74a3147a3760337da57f98be7d0cea7d4ddd3a655eb33efbf253f9922d90f47f88dd94cb7f30a0caad46bdbfe256a04d5bdf2967440959b31491314f71f463a1d2b26189c657c4b1ba15a6f1b46997ea6ea6b87e7433c9cf8fc5636817fbb65efe2a7ff635a4c5110586e0df718ebb6bcc0d778659a0cfbb89052b39c711e3319bfbc2b26e3f08839fba58ce9ce082a1c955d18c3ca92ce1b65e", 0xf5}, {&(0x7f0000000900)="3a8e401fc2617bfb8f5321f00cf40c199bb09101aa92816c718ffbdad9bd8751aec1d79104aad9d8ad36eedf8f10f0b71398ffe54998e298ea923cb17c23bf53ecd3e0574bc1b7b3e3f11a1efaaba417e2c24a17f46f9d05c59bacbf9b1bba7eba25fde7fb9077c3d6783a063e10e4500a7746d68decad33a3fe48457a9beb0d7353e2f7c104397d2e7e381235594106469cf6450f1e21d38bd6b3ab5b0e3857e8fb99cb3052a18bbdb813bd3bb41020a957f4dae915abc6eec3524d1b5d81c61c67170b4bdf54eea873eab835c4", 0xce}], 0x5, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x68}}], 0x1, 0x8040) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000c00)={@dev={0xfe, 0x80, '\x00', 0x11}, @dev={0xfe, 0x80, '\x00', 0x40}, @private2, 0x0, 0x2, 0xf800, 0x500, 0x1ff, 0x1000201, r3}) socket$key(0xf, 0x3, 0x2) timer_create(0x4, &(0x7f0000000c80)={0x0, 0x1a, 0x4, @tid=r0}, &(0x7f0000000cc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000010c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000dc0)={0x288, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7d27f9040bd114b63454452d2f41480a20753a8a7facbb033d514484e9afa7c"}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x8810) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001500)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001180)={0x318, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_REG_RULES={0x1b8, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe1a8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4e1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffeff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x87b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xad}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb90}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x58}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xef}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7cda1bb3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd0400}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x134, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x25}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x47f5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd506}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x39b20f8c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x60b7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}]}, 0x318}, 0x1, 0x0, 0x0, 0x40000}, 0x44) mount$tmpfs(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x10002, &(0x7f00000015c0)={[{@size={'size', 0x3d, [0x74, 0x31, 0x65]}}, {@usrquota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x1a, 0x65, 0x65]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x70, 0x39, 0x35, 0x6b, 0x34, 0x33]}}, {@inode32}, {@noswap}], [{@smackfsdef={'smackfsdef', 0x3d, 'wireguard\x00'}}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x88, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044100}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1e, 0x77b, 0x6, 0x7, 0x2490, r1, 0x9, '\x00', r4, r1, 0x4, 0x3, 0x3}, 0x50) sendmsg(r1, &(0x7f0000002b00)={&(0x7f0000001840)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="5e8d6ee09c6fec0281c1f4ddbe9527f2e048e0a81e64500f7d22b3b86ad643de38543061776176c03d46935ecbfdbcfe26d2a9126e74ff908c0a3eb3a9078d0faf987386ba", 0x45}, {&(0x7f0000002940)="7bb7ca9013b545f1d25c0dd18a4432eadec5e63fc2eebe97b4391d2471d956a2af338dc12ab126e92d174aa1e99852a0f69185143d0d21b1033feeb76e024c13cdb2544131033be4cacd04868fdd1759b7862dfebcea141a10e7a45c1af6ce86d4b7a2058eb93dbb713b4b86e6443a96f21600366ab5e5b9acb32fcb24052f02f9f928ef4ffe8e3941e44d8b750d88d8f1a5c4c092b804a2b4b180fca32a3af651d11d11a11815d9faebc00732e6d24da3054c2ee9122f779d4a46920618caac083db1ac198eda9c78ec", 0xca}], 0x3, &(0x7f0000002a80)=[{0x70, 0x102, 0x3, "5b6ae80329b6ca99e7125afba3f69e19a931063e5bc792591222dbe13ecc8dab0e8d3413bfa15f1939d1e4fb1b254dfb40515aed228b7e16ba02f5b4415701e1769d1b819cb53cd1522f703cee04b542cca8fbdb08290a537f71dda219e8c525"}], 0x70}, 0x4040000) socket$packet(0x11, 0x2, 0x300) r7 = geteuid() quotactl$Q_GETINFO(0x79b2d23e4eca9f37, &(0x7f0000002b40)=@nullb, r7, &(0x7f0000002b80)) mount(&(0x7f0000002bc0)=@filename='./file0\x00', &(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)='tracefs\x00', 0x20, &(0x7f0000002c80)='[\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x44, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x60001) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000003040)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f00)={0x100, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xde, 0xac, "8949a1372517c9ba1f634e6db07705f510355564ac555b7b09890148b31f26e688f7efbe6f5e07d442621e61824c884733d4fe6a82f9278db872a53ce083164874aa4f1e426c0d049a7ee3daa5d662b06c47afb5ca7de33e76c1eb685a6e4a497da526f1beaed8f8760c8bad8fc8d2d9707aad7f7bd2f91720a86ae6d1ff4c9593b5aa22e5369c441a71e0053c3e1de5e63b7a6d7b24e3227973c2be7ba6ecc41d2403b5bd2d8f52484ab2eca911652ef1d937ede4f6e20225fd6a436d4cd2e9841c7bfa0068bc35df11112d282069406b875c4982967b7e5d01"}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) 4.396102289s ago: executing program 1 (id=11235): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006", 0x17}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) 4.395780509s ago: executing program 8 (id=11236): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x3710, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000002, 0xffffffffffffffff, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) unshare(0x2060280) read$ptp(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) r4 = syz_clone(0x26900000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x100010) wait4(0x0, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x32) socket$netlink(0x10, 0x3, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) timer_create(0x4, &(0x7f0000000200)={0x0, 0x9, 0x4, @tid=r4}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {r7, r8+10000000}}, &(0x7f0000000380)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r5, 0x1, 0x0) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r10, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.395367899s ago: executing program 1 (id=11237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0xc4, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x17c}}, 0x0) 4.307881862s ago: executing program 0 (id=11238): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa110180c200000186dd6000200000142fffff010000000000000000000000001001ff01000000000000000000000000000100008906", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000090780000"], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x3, 0x9) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r10, 0x1, 0x70bd27, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x4000000) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000d80)={0x11, 0x4, {0x1, @usage=0xffff, 0x0, 0x7, 0x0, 0x8, 0x9, 0x7fffffff, 0x18, @usage=0x40, 0x3, 0xfffffff8, [0x6, 0x4c, 0x2, 0x24000000, 0x7, 0x80]}, {0x7fffffff, @struct={0x80, 0x9}, 0x0, 0x8000000000000000, 0x6, 0x2, 0x1, 0x7fffffff, 0x0, @usage=0x80, 0x7ff, 0x81, [0x7, 0x5, 0xef, 0xd3, 0xd032, 0x8]}, {0x3ff, @usage=0x6, 0x0, 0x7, 0xe8, 0x3, 0x6, 0x0, 0x440, @usage=0x2, 0x3, 0x200, [0xac, 0x1, 0x0, 0xfffffffffffffffb, 0xd88, 0x4]}, {0xf552, 0xffffffffffff7a24, 0x4}}) 4.307723062s ago: executing program 1 (id=11239): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) r2 = socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="c2", 0x1, 0x4004012, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.113190388s ago: executing program 5 (id=11240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) 4.05911045s ago: executing program 5 (id=11241): epoll_create1(0x80000) socketpair$unix(0x1, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.04514934s ago: executing program 1 (id=11242): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa110180c200000186dd6000200000142fffff010000000000000000000000001001ff01000000000000000000000000000100008906", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x3, 0x9) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r10, 0x1, 0x70bd27, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x4000000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000980)={0x0, 0x0, 0xfff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000d80)={0x11, 0x4, {0x1, @usage=0xffff, r11, 0x7, 0x0, 0x8, 0x9, 0x7fffffff, 0x18, @usage=0x40, 0x3, 0xfffffff8, [0x6, 0x4c, 0x2, 0x24000000, 0x7, 0x80]}, {0x7fffffff, @struct={0x80, 0x9}, 0x0, 0x8000000000000000, 0x6, 0x2, 0x1, 0x7fffffff, 0x0, @usage=0x80, 0x7ff, 0x81, [0x7, 0x5, 0xef, 0xd3, 0xd032, 0x8]}, {0x3ff, @usage=0x6, 0x0, 0x7, 0xe8, 0x3, 0x6, 0x0, 0x440, @usage=0x2, 0x3, 0x200, [0xac, 0x1, 0x0, 0xfffffffffffffffb, 0xd88, 0x4]}, {0xf552, 0xffffffffffff7a24, 0x4}}) 4.000029262s ago: executing program 8 (id=11243): epoll_create1(0x80000) socketpair$unix(0x1, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x29, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xea6c}}, @exit, @alu={0x4, 0x1, 0x2, 0x0, 0x1, 0xc, 0xffffffffffffffff}, @map_val={0x18, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0}}, @jmp={0x5, 0x1, 0x6, 0xe0b3480f9e5f6f18, 0xa, 0x40}, @alu={0x0, 0x1, 0x4, 0x8, 0x8, 0xe509f7e1143b0a06, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x6, 0x2, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 603.988201ms ago: executing program 8 (id=11244): r0 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, r0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008111}, 0x240840b5) 598.129251ms ago: executing program 1 (id=11245): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 553.407732ms ago: executing program 0 (id=11246): syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000001300)=ANY=[], 0x2c, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x3, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340), 0x0, 0x14, &(0x7f0000000e80)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000f00), 0x8, 0xe8, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000330001072cbd7000fedbdf2506"], 0x14}}, 0x24044094) 514.696314ms ago: executing program 1 (id=11247): unshare(0x20400) r0 = socket$unix(0x1, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x40140, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0xfccc, 0xfe, 0x0, 0x2, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) unshare(0x26020480) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(r2, &(0x7f0000000080)=@abs, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmmsg$inet(r1, &(0x7f0000002f40), 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20008811) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$setown(r6, 0x8, 0x0) 412.041767ms ago: executing program 7 (id=11248): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006", 0x17}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) 411.814836ms ago: executing program 0 (id=11249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 346.301309ms ago: executing program 0 (id=11250): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2105003, &(0x7f0000000240), 0x3, 0x43e, &(0x7f0000000d80)="$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") (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x4000814) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) syz_open_procfs$pagemap(r2, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 280.581321ms ago: executing program 7 (id=11253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) (async) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x1}, 0x4, 0x0, 0x10000, 0x1, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x1) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4000}, 0xc) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) (async) r3 = getpgrp(0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r4, 0x0, 0x0, 0x44800, 0x0, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x400101d0, 0x0) (async) timer_create(0x5, &(0x7f0000000140)={0x0, 0x40, 0x1, @tid=r3}, &(0x7f0000000180)) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1}, 0xfffffffffffffe39) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/23, 0x17}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) (async) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 231.655602ms ago: executing program 0 (id=11254): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10614, 0xf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_ublk_setup_io_uring(0x7708, &(0x7f0000001180)={0x0, 0x1e9e, 0x4000, 0x3, 0x2a0}, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280)) io_uring_setup(0x13ed, &(0x7f0000001340)={0x0, 0x4540, 0x4, 0x0, 0xf1, 0x0, r0}) r1 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r1, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) creat(&(0x7f0000000080)='./file2\x00', 0x88) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x2, 0x3, 0x4}, 0x50) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)=0x0) timer_settime(r3, 0x1, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x6, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000001440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="dfbf1eb4f5946b5b7e5d4e6cfc660819", @ANYRESDEC=r6, @ANYBLOB=':00000140737488420864k']) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000640)={r6, 0x6, 0xbd4}) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0xc3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xca, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0xfff0, 0x20008814}, 0x20000881) 0s ago: executing program 7 (id=11255): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001140)={[{@block_validity}, {@i_version}, {@dax_inode}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=ANY=[], 0x835, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r2, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x1}}, 0x80) getpeername$packet(r2, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x18, r1, 0x1488f346e7c00843, 0x70bd30, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x53, 0x1d}, {0x0, 0xd42, 0x0, 0x2da}, 0x4214, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x3}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) tkill(r6, 0x2f) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) accept(r5, 0x0, &(0x7f0000000700)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x14, r8, 0x800, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000001) kernel console output (not intermixed with test programs): tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.699668][ T4991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.711982][ T28] audit: type=1400 audit(985.678:3361): avc: denied { write } for pid=5008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.733422][ T4991] bond0 (unregistering): Released all slaves [ 986.054145][ T5029] loop1: detected capacity change from 0 to 512 [ 986.061155][ T5029] EXT4-fs: Ignoring removed bh option [ 986.139642][ T5029] EXT4-fs: inline encryption not supported [ 986.159143][ T5029] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 986.279014][ T28] audit: type=1400 audit(986.238:3362): avc: denied { write } for pid=5013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.370158][ T5029] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 986.417211][ T5029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10095: bg 0: block 248: padding at end of block bitmap is not set [ 986.431666][ T5029] loop1: lost filesystem error report for type 5 error -117 [ 986.432619][ T5029] Quota error (device loop1): write_blk: dquota write failed [ 986.447496][ T5029] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 986.457466][ T5029] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.10095: Failed to acquire dquot type 1 [ 986.469057][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 986.469096][ C1] EXT4-fs (loop1): last error at time 986: ext4_validate_block_bitmap:441 [ 986.541628][ T28] audit: type=1400 audit(986.508:3363): avc: denied { write } for pid=5046 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.587017][ T5029] loop1: lost filesystem error report for type 5 error -28 [ 986.639910][ T5029] EXT4-fs (loop1): 1 truncate cleaned up [ 986.654618][ T5029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 987.036398][ T5029] syz.1.10095 (5029) used greatest stack depth: 7696 bytes left [ 987.099959][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 987.332940][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10099'. [ 987.380868][ T28] audit: type=1400 audit(987.298:3364): avc: denied { mount } for pid=5071 comm="syz.1.10103" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 987.463999][ T28] audit: type=1400 audit(987.298:3365): avc: denied { search } for pid=5071 comm="syz.1.10103" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 987.618727][ T5082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10105'. [ 987.909758][ T5087] rdma_op ffff88811c791d80 conn xmit_rdma 0000000000000000 [ 988.699423][ T5106] loop1: detected capacity change from 0 to 1024 [ 988.750238][ T5106] EXT4-fs: Ignoring removed i_version option [ 988.781265][ T5106] EXT4-fs: dax option not supported [ 988.902501][ T5117] netlink: 'syz.8.10115': attribute type 10 has an invalid length. [ 989.052604][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10116'. [ 989.104765][ T5124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10117'. [ 989.860130][ T5134] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10120'. [ 989.993483][ T5143] Failed to initialize the IGMP autojoin socket (err -2) [ 990.098351][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 990.098372][ T28] audit: type=1400 audit(990.058:3367): avc: denied { getopt } for pid=5133 comm="syz.5.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 990.471258][ T28] audit: type=1326 audit(990.428:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.578449][ T28] audit: type=1326 audit(990.428:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.667955][ T5168] loop1: detected capacity change from 0 to 512 [ 990.668458][ T28] audit: type=1326 audit(990.428:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.707375][ T28] audit: type=1326 audit(990.428:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.733567][ T5168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 990.766079][ T28] audit: type=1326 audit(990.428:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.829700][ T28] audit: type=1326 audit(990.428:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 990.879454][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10123'. [ 990.927140][ T5168] EXT4-fs (loop1): 1 truncate cleaned up [ 990.936542][ T5168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.027424][ T28] audit: type=1326 audit(990.428:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 991.191216][ T28] audit: type=1326 audit(990.428:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 991.230386][ T28] audit: type=1326 audit(990.428:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.0.10127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x7ffc0000 [ 991.319918][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10128'. [ 991.478820][ T5182] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10129'. [ 992.338522][ T5201] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10134'. [ 992.398457][ T5201] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10134'. [ 992.668954][ T5205] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10137'. [ 993.143315][ T5214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10140'. [ 993.354884][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10138'. [ 994.368702][ T5239] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10148'. [ 994.739642][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.222047][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10153'. [ 996.487966][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10160'. [ 996.556761][ T5285] loop1: detected capacity change from 0 to 128 [ 996.569130][ T5285] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 996.584420][ T5285] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 996.592815][ T5285] FAT-fs (loop1): Filesystem has been set read-only [ 996.864861][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 996.864876][ T28] audit: type=1326 audit(996.788:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.8.10164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x0 [ 997.303064][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10166'. [ 997.441004][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10167'. [ 997.490192][ T28] audit: type=1400 audit(997.448:3499): avc: denied { accept } for pid=5312 comm="syz.1.10168" path="socket:[121362]" dev="sockfs" ino=121362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 997.548447][ T28] audit: type=1400 audit(997.488:3500): avc: denied { watch watch_reads } for pid=5312 comm="syz.1.10168" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 997.574864][ T5313] loop1: detected capacity change from 0 to 512 [ 997.591471][ T5313] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 997.607378][ T5313] EXT4-fs (loop1): orphan cleanup on readonly fs [ 997.615902][ T5313] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 997.631196][ T5313] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 997.639168][ T5313] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #16: comm syz.1.10168: corrupted xattr block 31: invalid header [ 997.653467][ T5313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 997.653849][ T5313] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 997.673089][ T5313] EXT4-fs (loop1): 1 orphan inode deleted [ 997.679192][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 997.679225][ C1] EXT4-fs (loop1): initial error at time 997: ext4_xattr_delete_inode:2972: inode 16 [ 997.679295][ C1] EXT4-fs (loop1): last error at time 997: ext4_xattr_delete_inode:2972: inode 16 [ 997.721327][ T5313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 997.818437][ T28] audit: type=1326 audit(997.788:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.5.10169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdaeb89ce59 code=0x0 [ 997.923008][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.947520][ T28] audit: type=1326 audit(997.908:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.8.10172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 998.038074][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10171'. [ 998.300234][ T5351] loop1: detected capacity change from 0 to 512 [ 998.336187][ T5351] EXT4-fs: Ignoring removed bh option [ 998.352069][ T5351] EXT4-fs: inline encryption not supported [ 998.449719][ T5351] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 998.767894][ T5351] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 998.782505][ T5351] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10177: bg 0: block 248: padding at end of block bitmap is not set [ 998.797156][ T5351] loop1: lost filesystem error report for type 5 error -117 [ 998.797555][ T5351] Quota error (device loop1): write_blk: dquota write failed [ 998.812338][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 998.812366][ C1] EXT4-fs (loop1): last error at time 998: ext4_validate_block_bitmap:441 [ 998.829136][ T5351] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 998.839152][ T5351] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.10177: Failed to acquire dquot type 1 [ 998.877947][ T5351] loop1: lost filesystem error report for type 5 error -28 [ 998.889282][ T5351] EXT4-fs (loop1): 1 truncate cleaned up [ 998.904911][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 999.472490][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1000.316337][ T28] audit: type=1326 audit(1000.278:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.0.10188" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3434c4ce59 code=0x0 [ 1000.440032][ T28] audit: type=1400 audit(1000.408:3504): avc: denied { lock } for pid=5400 comm="syz.1.10189" path="socket:[120522]" dev="sockfs" ino=120522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1000.496432][ T28] audit: type=1400 audit(1000.428:3505): avc: denied { setopt } for pid=5400 comm="syz.1.10189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1000.892017][ T5424] loop1: detected capacity change from 0 to 512 [ 1000.970136][ T5432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10197'. [ 1001.210129][ T5454] FAULT_INJECTION: forcing a failure. [ 1001.210129][ T5454] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.230375][ T5456] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 1001.249422][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz.1.10205 Tainted: G W syzkaller #0 PREEMPT(full) [ 1001.249475][ T5454] Tainted: [W]=WARN [ 1001.249482][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.249495][ T5454] Call Trace: [ 1001.249502][ T5454] [ 1001.249513][ T5454] __dump_stack+0x1d/0x30 [ 1001.249543][ T5454] dump_stack_lvl+0x95/0xd0 [ 1001.249582][ T5454] dump_stack+0x15/0x1b [ 1001.249600][ T5454] should_fail_ex+0x263/0x280 [ 1001.249635][ T5454] should_failslab+0x8c/0xb0 [ 1001.249767][ T5454] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1001.249805][ T5454] ? do_getname+0x2e/0x1c0 [ 1001.249908][ T5454] do_getname+0x2e/0x1c0 [ 1001.249928][ T5454] getname_flags+0x1d/0x30 [ 1001.249945][ T5454] do_sys_openat2+0x60/0x130 [ 1001.250018][ T5454] __x64_sys_openat+0xf2/0x120 [ 1001.250067][ T5454] x64_sys_call+0x1e39/0x3020 [ 1001.250092][ T5454] do_syscall_64+0x12c/0x3b0 [ 1001.250136][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.250162][ T5454] RIP: 0033:0x7f6ce5f2ce59 [ 1001.250185][ T5454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.250205][ T5454] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1001.250231][ T5454] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1001.250248][ T5454] RDX: 0000000000101a02 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1001.250261][ T5454] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.250281][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.250297][ T5454] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1001.250327][ T5454] [ 1001.454336][ T5460] loop1: detected capacity change from 0 to 256 [ 1001.547823][ T5469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10208'. [ 1001.582799][ T5469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10208'. [ 1001.668981][ T5491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1001.976968][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1001.976986][ T28] audit: type=1400 audit(1001.858:3509): avc: denied { write } for pid=5508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.011989][ T5504] FAULT_INJECTION: forcing a failure. [ 1002.011989][ T5504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.048933][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: syz.1.10217 Tainted: G W syzkaller #0 PREEMPT(full) [ 1002.048975][ T5504] Tainted: [W]=WARN [ 1002.048984][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.049047][ T5504] Call Trace: [ 1002.049056][ T5504] [ 1002.049066][ T5504] __dump_stack+0x1d/0x30 [ 1002.049130][ T5504] dump_stack_lvl+0x95/0xd0 [ 1002.049154][ T5504] dump_stack+0x15/0x1b [ 1002.049252][ T5504] should_fail_ex+0x263/0x280 [ 1002.049293][ T5504] should_fail+0xb/0x20 [ 1002.049406][ T5504] should_fail_usercopy+0x1a/0x20 [ 1002.049515][ T5504] _copy_from_user+0x1c/0xb0 [ 1002.049609][ T5504] __sys_bpf+0x183/0x7e0 [ 1002.049652][ T5504] __x64_sys_bpf+0x41/0x50 [ 1002.049675][ T5504] x64_sys_call+0x10cb/0x3020 [ 1002.049748][ T5504] do_syscall_64+0x12c/0x3b0 [ 1002.049795][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.049824][ T5504] RIP: 0033:0x7f6ce5f2ce59 [ 1002.049858][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.049883][ T5504] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.049909][ T5504] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1002.049993][ T5504] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1002.050010][ T5504] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.050035][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.050051][ T5504] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1002.050076][ T5504] [ 1002.218505][ T28] audit: type=1400 audit(1002.188:3510): avc: denied { write } for pid=5521 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.391651][ T28] audit: type=1400 audit(1002.338:3511): avc: denied { write } for pid=5526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.428765][ T5536] loop1: detected capacity change from 0 to 128 [ 1002.438096][ T5536] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1002.454628][ T5536] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1002.462714][ T28] audit: type=1400 audit(1002.408:3512): avc: denied { write } for pid=5541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.485392][ T5536] FAT-fs (loop1): Filesystem has been set read-only [ 1003.038426][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10223'. [ 1003.856187][ T5578] netlink: 'syz.5.10228': attribute type 1 has an invalid length. [ 1003.877948][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10227'. [ 1004.154257][ T5587] loop1: detected capacity change from 0 to 512 [ 1004.160904][ T5587] EXT4-fs: Ignoring removed bh option [ 1004.166311][ T5587] EXT4-fs: inline encryption not supported [ 1004.194173][ T28] audit: type=1400 audit(1004.118:3513): avc: denied { write } for pid=5554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.270517][ T28] audit: type=1400 audit(1004.228:3514): avc: denied { write } for pid=5602 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.272595][ T5587] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1004.626140][ T5587] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1004.647773][ T5587] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10230: bg 0: block 248: padding at end of block bitmap is not set [ 1004.729857][ T5587] loop1: lost filesystem error report for type 5 error -117 [ 1004.731230][ T5587] Quota error (device loop1): write_blk: dquota write failed [ 1004.746308][ T5587] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1004.768985][ T5587] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.10230: Failed to acquire dquot type 1 [ 1004.781105][ T5587] loop1: lost filesystem error report for type 5 error -28 [ 1004.785377][ T5587] EXT4-fs (loop1): 1 truncate cleaned up [ 1004.806023][ T5587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1005.167536][ T5626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10237'. [ 1005.194381][ T5628] 9p: Bad value for 'rfdno' [ 1005.257137][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1005.341337][ T5640] syzkaller0: entered promiscuous mode [ 1005.358498][ T5640] syzkaller0: entered allmulticast mode [ 1006.025477][ T28] audit: type=1400 audit(1005.678:3515): avc: denied { getopt } for pid=5652 comm="syz.8.10245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1006.263905][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1006.740961][ T5684] FAULT_INJECTION: forcing a failure. [ 1006.740961][ T5684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.767773][ T5684] CPU: 0 UID: 0 PID: 5684 Comm: syz.0.10252 Tainted: G W syzkaller #0 PREEMPT(full) [ 1006.767816][ T5684] Tainted: [W]=WARN [ 1006.767824][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.767874][ T5684] Call Trace: [ 1006.767883][ T5684] [ 1006.767892][ T5684] __dump_stack+0x1d/0x30 [ 1006.767923][ T5684] dump_stack_lvl+0x95/0xd0 [ 1006.768030][ T5684] dump_stack+0x15/0x1b [ 1006.768055][ T5684] should_fail_ex+0x263/0x280 [ 1006.768134][ T5684] should_fail+0xb/0x20 [ 1006.768165][ T5684] should_fail_usercopy+0x1a/0x20 [ 1006.768230][ T5684] copy_fpstate_to_sigframe+0x621/0x7c0 [ 1006.768339][ T5684] ? copy_fpstate_to_sigframe+0xe5/0x7c0 [ 1006.768387][ T5684] ? get_sigframe+0xe3/0x470 [ 1006.768412][ T5684] ? x86_task_fpu+0x36/0x60 [ 1006.768509][ T5684] get_sigframe+0x34c/0x470 [ 1006.768550][ T5684] ? get_signal+0xd9f/0xf20 [ 1006.768585][ T5684] x64_setup_rt_frame+0xa7/0x4e0 [ 1006.768615][ T5684] arch_do_signal_or_restart+0x27c/0x480 [ 1006.768658][ T5684] exit_to_user_mode_loop+0x6f/0x820 [ 1006.768686][ T5684] ? do_readv+0x208/0x210 [ 1006.768718][ T5684] do_syscall_64+0x232/0x3b0 [ 1006.768773][ T5684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.768795][ T5684] RIP: 0033:0x7f3434c4ce57 [ 1006.768815][ T5684] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1006.768838][ T5684] RSP: 002b:00007f343367e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1006.768864][ T5684] RAX: 0000000000000013 RBX: 00007f3434ec6090 RCX: 00007f3434c4ce59 [ 1006.768945][ T5684] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 1006.768972][ T5684] RBP: 00007f343367e090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.768984][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.768997][ T5684] R13: 00007f3434ec6128 R14: 00007f3434ec6090 R15: 00007ffe19852a58 [ 1006.769069][ T5684] [ 1007.042330][ T5689] loop1: detected capacity change from 0 to 512 [ 1007.050534][ T5689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1007.060707][ T5689] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 1007.306015][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10257'. [ 1007.350985][ T5707] wireguard: wireguard0: Could not create IPv4 socket [ 1007.357812][ T5707] wireguard0: entered promiscuous mode [ 1007.363366][ T5707] wireguard0: entered allmulticast mode [ 1007.492062][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10259'. [ 1007.578487][ T5725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10261'. [ 1008.032096][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10263'. [ 1008.303932][ T5716] syz.0.10259 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1008.345375][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: syz.0.10259 Tainted: G W syzkaller #0 PREEMPT(full) [ 1008.345422][ T5716] Tainted: [W]=WARN [ 1008.345432][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.345450][ T5716] Call Trace: [ 1008.345458][ T5716] [ 1008.345469][ T5716] __dump_stack+0x1d/0x30 [ 1008.345557][ T5716] dump_stack_lvl+0x95/0xd0 [ 1008.345586][ T5716] dump_stack+0x15/0x1b [ 1008.345707][ T5716] dump_header+0x80/0x240 [ 1008.345732][ T5716] oom_kill_process+0x295/0x350 [ 1008.345779][ T5716] out_of_memory+0x97d/0xb80 [ 1008.345825][ T5716] try_charge_memcg+0x62f/0xa10 [ 1008.345913][ T5716] ? tick_program_event+0x79/0xc0 [ 1008.345964][ T5716] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1008.346016][ T5716] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1008.346055][ T5716] alloc_pages_mpol+0xb3/0x260 [ 1008.346121][ T5716] alloc_pages_noprof+0x8f/0x140 [ 1008.346156][ T5716] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1008.346209][ T5716] __kvmalloc_node_noprof+0x3d4/0x640 [ 1008.346256][ T5716] ? futex_hash_allocate+0x190/0x9a0 [ 1008.346336][ T5716] ? futex_hash_allocate+0x190/0x9a0 [ 1008.346373][ T5716] futex_hash_allocate+0x190/0x9a0 [ 1008.346475][ T5716] ? cap_task_prctl+0x13f/0x6b0 [ 1008.346520][ T5716] futex_hash_prctl+0xd8/0xf0 [ 1008.346562][ T5716] __se_sys_prctl+0x4f4/0x1400 [ 1008.346600][ T5716] __x64_sys_prctl+0x67/0x80 [ 1008.346633][ T5716] x64_sys_call+0x2533/0x3020 [ 1008.346731][ T5716] do_syscall_64+0x12c/0x3b0 [ 1008.346766][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.346788][ T5716] RIP: 0033:0x7f3434c4ce59 [ 1008.346811][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.346836][ T5716] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1008.346923][ T5716] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1008.346943][ T5716] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1008.346962][ T5716] RBP: 00007f3434ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1008.346980][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.346993][ T5716] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1008.347015][ T5716] [ 1008.580013][ T5716] memory: usage 307200kB, limit 307200kB, failcnt 1262 [ 1008.587058][ T5716] memory+swap: usage 309248kB, limit 9007199254740988kB, failcnt 0 [ 1008.595129][ T5716] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1008.602714][ T5716] Memory cgroup stats for /syz0: [ 1008.602938][ T5716] cache 0 [ 1008.610862][ T5716] rss 0 [ 1008.613639][ T5716] shmem 0 [ 1008.616589][ T5716] mapped_file 0 [ 1008.620098][ T5716] dirty 0 [ 1008.623097][ T5716] writeback 0 [ 1008.626408][ T5716] workingset_refault_anon 330 [ 1008.631132][ T5716] workingset_refault_file 2065 [ 1008.635930][ T5716] swap 2097152 [ 1008.639354][ T5716] swapcached 10792960 [ 1008.643345][ T5716] pgpgin 723333 [ 1008.646823][ T5716] pgpgout 723333 [ 1008.650462][ T5716] pgfault 866846 [ 1008.654137][ T5716] pgmajfault 229 [ 1008.657758][ T5716] inactive_anon 0 [ 1008.661499][ T5716] active_anon 0 [ 1008.665075][ T5716] inactive_file 0 [ 1008.668825][ T5716] active_file 0 [ 1008.672421][ T5716] unevictable 0 [ 1008.675999][ T5716] hierarchical_memory_limit 314572800 [ 1008.681477][ T5716] hierarchical_memsw_limit 9223372036854771712 [ 1008.687994][ T5716] total_cache 0 [ 1008.691509][ T5716] total_rss 0 [ 1008.694808][ T5716] total_shmem 0 [ 1008.698294][ T5716] total_mapped_file 0 [ 1008.702289][ T5716] total_dirty 0 [ 1008.705760][ T5716] total_writeback 0 [ 1008.709607][ T5716] total_workingset_refault_anon 330 [ 1008.714823][ T5716] total_workingset_refault_file 2065 [ 1008.720180][ T5716] total_swap 2097152 [ 1008.724308][ T5716] total_swapcached 10792960 [ 1008.728890][ T5716] total_pgpgin 723333 [ 1008.732893][ T5716] total_pgpgout 723333 [ 1008.737001][ T5716] total_pgfault 866846 [ 1008.741098][ T5716] total_pgmajfault 229 [ 1008.745220][ T5716] total_inactive_anon 0 [ 1008.749430][ T5716] total_active_anon 0 [ 1008.753438][ T5716] total_inactive_file 0 [ 1008.757608][ T5716] total_active_file 0 [ 1008.761684][ T5716] total_unevictable 0 [ 1008.765702][ T5716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10259,pid=5715,uid=0 [ 1008.794768][ T5716] Memory cgroup out of memory: Killed process 5715 (syz.0.10259) total-vm:104408kB, anon-rss:1260kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1008.944331][ T28] audit: type=1326 audit(1008.888:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.8.10268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1009.310165][ T5774] FAULT_INJECTION: forcing a failure. [ 1009.310165][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.332132][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.0.10277 Tainted: G W syzkaller #0 PREEMPT(full) [ 1009.332296][ T5774] Tainted: [W]=WARN [ 1009.332306][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.332323][ T5774] Call Trace: [ 1009.332369][ T5774] [ 1009.332381][ T5774] __dump_stack+0x1d/0x30 [ 1009.332413][ T5774] dump_stack_lvl+0x95/0xd0 [ 1009.332441][ T5774] dump_stack+0x15/0x1b [ 1009.332466][ T5774] should_fail_ex+0x263/0x280 [ 1009.332515][ T5774] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1009.332559][ T5774] should_failslab+0x8c/0xb0 [ 1009.332611][ T5774] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1009.332759][ T5774] ? sock_alloc_inode+0x36/0xf0 [ 1009.332819][ T5774] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1009.332851][ T5774] sock_alloc_inode+0x36/0xf0 [ 1009.332933][ T5774] alloc_inode+0x40/0x170 [ 1009.332952][ T5774] do_accept+0xa0/0x390 [ 1009.332971][ T5774] ? _raw_spin_lock+0x52/0xa0 [ 1009.333002][ T5774] __sys_accept4+0xbe/0x170 [ 1009.333128][ T5774] __x64_sys_accept4+0x51/0x60 [ 1009.333154][ T5774] x64_sys_call+0x48d/0x3020 [ 1009.333213][ T5774] do_syscall_64+0x12c/0x3b0 [ 1009.333248][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.333270][ T5774] RIP: 0033:0x7f3434c4ce59 [ 1009.333286][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.333375][ T5774] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1009.333452][ T5774] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1009.333470][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1009.333582][ T5774] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.333601][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.333618][ T5774] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1009.333648][ T5774] [ 1011.398117][ T28] audit: type=1326 audit(1011.358:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.10291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1013.175718][ T5853] Failed to initialize the IGMP autojoin socket (err -2) [ 1013.208731][ T5861] Failed to initialize the IGMP autojoin socket (err -2) [ 1013.304179][ T28] audit: type=1326 audit(1013.268:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.363011][ T28] audit: type=1326 audit(1013.268:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.389977][ T28] audit: type=1326 audit(1013.268:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.426300][ T5880] netlink: 'syz.5.10308': attribute type 1 has an invalid length. [ 1013.426755][ T28] audit: type=1326 audit(1013.268:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.459163][ T28] audit: type=1326 audit(1013.268:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.484158][ T28] audit: type=1326 audit(1013.268:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.517590][ T28] audit: type=1326 audit(1013.268:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1013.547101][ T28] audit: type=1326 audit(1013.328:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.8.10301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1014.053033][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10319'. [ 1014.063794][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.077539][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.111705][ T5929] tipc: Invalid UDP bearer configuration [ 1014.111724][ T5929] tipc: Enabling of bearer rejected, failed to enable media [ 1014.144571][ T5929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10319'. [ 1014.170311][ T5935] loop1: detected capacity change from 0 to 512 [ 1014.210542][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1014.219546][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1014.231596][ T5939] netlink: 'syz.0.10322': attribute type 18 has an invalid length. [ 1014.234871][ T5935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1014.249695][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1014.268895][ T5935] EXT4-fs (loop1): 1 truncate cleaned up [ 1014.275096][ T5935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.462851][ T5950] syzkaller0: entered promiscuous mode [ 1014.475097][ T5950] syzkaller0: entered allmulticast mode [ 1015.042224][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10332'. [ 1015.963117][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1015.963135][ T28] audit: type=1326 audit(1015.918:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.0.10337" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3434c4ce59 code=0x0 [ 1016.158634][ T5999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5999 comm=syz.8.10339 [ 1016.289053][ T6005] 8021q: VLANs not supported on wg2 [ 1017.229939][ T28] audit: type=1400 audit(1017.188:3542): avc: denied { bind } for pid=6022 comm="syz.5.10348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1018.197404][ T28] audit: type=1326 audit(1018.148:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.269046][ T6043] FAULT_INJECTION: forcing a failure. [ 1018.269046][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.279296][ T28] audit: type=1326 audit(1018.148:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.306689][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.10354 Tainted: G W syzkaller #0 PREEMPT(full) [ 1018.306804][ T6043] Tainted: [W]=WARN [ 1018.306825][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.306866][ T6043] Call Trace: [ 1018.306945][ T6043] [ 1018.306975][ T6043] __dump_stack+0x1d/0x30 [ 1018.307093][ T6043] dump_stack_lvl+0x95/0xd0 [ 1018.307120][ T6043] dump_stack+0x15/0x1b [ 1018.307144][ T6043] should_fail_ex+0x263/0x280 [ 1018.307200][ T6043] should_fail+0xb/0x20 [ 1018.307445][ T6043] should_fail_usercopy+0x1a/0x20 [ 1018.307537][ T6043] _copy_from_user+0x1c/0xb0 [ 1018.307646][ T6043] ___sys_sendmsg+0xc1/0x1e0 [ 1018.307798][ T6043] __x64_sys_sendmsg+0xd4/0x160 [ 1018.307916][ T6043] x64_sys_call+0x194c/0x3020 [ 1018.307982][ T6043] do_syscall_64+0x12c/0x3b0 [ 1018.308157][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.308289][ T6043] RIP: 0033:0x7f3434c4ce59 [ 1018.308340][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.308399][ T6043] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.308482][ T6043] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1018.308524][ T6043] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1018.308564][ T6043] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.308625][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.308713][ T6043] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1018.308752][ T6043] [ 1018.628190][ T28] audit: type=1326 audit(1018.148:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.675075][ T28] audit: type=1326 audit(1018.148:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.708832][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10358'. [ 1018.736710][ T6057] macvlan2: entered allmulticast mode [ 1018.754105][ T28] audit: type=1326 audit(1018.148:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.782955][ T6057] gretap0: entered allmulticast mode [ 1018.812943][ T28] audit: type=1326 audit(1018.148:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.839946][ T28] audit: type=1326 audit(1018.148:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1018.865232][ T28] audit: type=1326 audit(1018.148:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.8.10352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd0750ad68e code=0x7ffc0000 [ 1020.783841][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.130741][ T6111] bridge_slave_0: left allmulticast mode [ 1021.144444][ T6111] bridge_slave_0: left promiscuous mode [ 1021.166726][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.196069][ T6119] FAULT_INJECTION: forcing a failure. [ 1021.196069][ T6119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.214863][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.1.10373 Tainted: G W syzkaller #0 PREEMPT(full) [ 1021.214905][ T6119] Tainted: [W]=WARN [ 1021.214914][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.214932][ T6119] Call Trace: [ 1021.214942][ T6119] [ 1021.214953][ T6119] __dump_stack+0x1d/0x30 [ 1021.215023][ T6119] dump_stack_lvl+0x95/0xd0 [ 1021.215051][ T6119] dump_stack+0x15/0x1b [ 1021.215076][ T6119] should_fail_ex+0x263/0x280 [ 1021.215112][ T6119] should_fail+0xb/0x20 [ 1021.215155][ T6119] should_fail_usercopy+0x1a/0x20 [ 1021.215194][ T6119] _copy_from_user+0x1c/0xb0 [ 1021.215237][ T6119] ___sys_sendmsg+0xc1/0x1e0 [ 1021.215287][ T6119] __x64_sys_sendmsg+0xd4/0x160 [ 1021.215462][ T6119] x64_sys_call+0x194c/0x3020 [ 1021.215489][ T6119] do_syscall_64+0x12c/0x3b0 [ 1021.215555][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.215584][ T6119] RIP: 0033:0x7f6ce5f2ce59 [ 1021.215614][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.215632][ T6119] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.215718][ T6119] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1021.215732][ T6119] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1021.215745][ T6119] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.215797][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.215815][ T6119] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1021.215844][ T6119] [ 1021.446590][ T6111] bridge_slave_1: left allmulticast mode [ 1021.460762][ T6111] bridge_slave_1: left promiscuous mode [ 1021.467065][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.485854][ T6111] bond0: (slave bond_slave_0): Releasing backup interface [ 1021.494529][ T6111] bond0: (slave bond_slave_1): Releasing backup interface [ 1021.503186][ T6111] team0: Port device team_slave_0 removed [ 1021.509754][ T6111] team0: Port device team_slave_1 removed [ 1021.515844][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.523929][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.531882][ T6111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1021.711213][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1021.711227][ T28] audit: type=1326 audit(1021.678:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.8.10378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1022.054419][ T6102] netlink: 'syz.0.10372': attribute type 1 has an invalid length. [ 1022.090636][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.110856][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.120879][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.128871][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.138613][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.147440][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.159947][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.169789][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.333883][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10386'. [ 1022.514415][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10386'. [ 1022.634991][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10388'. [ 1023.055222][ T6237] loop1: detected capacity change from 0 to 764 [ 1023.062352][ T6237] iso9660: Unknown parameter 'ÿÿÿÿ' [ 1023.073697][ T6237] Failed to initialize the IGMP autojoin socket (err -2) [ 1023.129746][ T28] audit: type=1326 audit(1023.098:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.10389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x0 [ 1024.305870][ T6273] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10400'. [ 1024.703842][ T28] audit: type=1326 audit(1024.668:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.740034][ T28] audit: type=1326 audit(1024.668:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.765419][ T28] audit: type=1326 audit(1024.668:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.791495][ T28] audit: type=1326 audit(1024.668:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.876967][ T28] audit: type=1326 audit(1024.668:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.936599][ T28] audit: type=1326 audit(1024.668:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.961814][ T28] audit: type=1326 audit(1024.668:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1024.988684][ T28] audit: type=1326 audit(1024.668:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.8.10402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1025.514188][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10418'. [ 1025.847605][ T6367] FAULT_INJECTION: forcing a failure. [ 1025.847605][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.871175][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.0.10431 Tainted: G W syzkaller #0 PREEMPT(full) [ 1025.871329][ T6367] Tainted: [W]=WARN [ 1025.871339][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.871412][ T6367] Call Trace: [ 1025.871422][ T6367] [ 1025.871433][ T6367] __dump_stack+0x1d/0x30 [ 1025.871465][ T6367] dump_stack_lvl+0x95/0xd0 [ 1025.871494][ T6367] dump_stack+0x15/0x1b [ 1025.871532][ T6367] should_fail_ex+0x263/0x280 [ 1025.871570][ T6367] ? __se_sys_memfd_create+0x1df/0x3b0 [ 1025.871609][ T6367] should_failslab+0x8c/0xb0 [ 1025.871685][ T6367] __kmalloc_cache_noprof+0x5f/0x400 [ 1025.871729][ T6367] ? fput+0x8f/0xc0 [ 1025.871757][ T6367] __se_sys_memfd_create+0x1df/0x3b0 [ 1025.871805][ T6367] __x64_sys_memfd_create+0x31/0x40 [ 1025.871841][ T6367] x64_sys_call+0x1f22/0x3020 [ 1025.871936][ T6367] do_syscall_64+0x12c/0x3b0 [ 1025.871979][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.872007][ T6367] RIP: 0033:0x7f3434c4ce59 [ 1025.872028][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.872096][ T6367] RSP: 002b:00007f343369ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1025.872122][ T6367] RAX: ffffffffffffffda RBX: 00000000000002b7 RCX: 00007f3434c4ce59 [ 1025.872140][ T6367] RDX: 00007f343369eee0 RSI: 0000000000000000 RDI: 00007f3434ce2f4f [ 1025.872158][ T6367] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 1025.872175][ T6367] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 1025.872251][ T6367] R13: 00007f343369eee0 R14: 00007f343369eea0 R15: 00002000000005c0 [ 1025.872281][ T6367] [ 1026.194678][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10428'. [ 1027.303008][ T6412] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10444'. [ 1028.949863][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10449'. [ 1029.091879][ T6447] netlink: 'syz.5.10454': attribute type 1 has an invalid length. [ 1029.114873][ T6447] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10454'. [ 1029.244536][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10455'. [ 1029.282841][ T6457] syzkaller0: entered promiscuous mode [ 1029.292183][ T6457] syzkaller0: entered allmulticast mode [ 1029.499638][ T6476] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1029.566789][ T6489] rdma_rxe: Failed to create IPv4 UDP tunnel [ 1029.573666][ T6476] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1029.598499][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 1029.640849][ T6476] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1029.670196][ T6476] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1029.704297][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 1029.722227][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1029.722245][ T28] audit: type=1400 audit(1029.688:3638): avc: denied { write } for pid=6478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.811259][ T28] audit: type=1400 audit(1029.778:3639): avc: denied { write } for pid=6509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.065014][ T28] audit: type=1400 audit(1030.028:3640): avc: denied { write } for pid=6511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.095234][ T6520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.101723][ T6520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.129456][T12265] hid (null): unknown global tag 0xe [ 1030.134805][T12265] hid (null): unknown global tag 0xc [ 1030.141179][T12265] hid-generic 0007:0007:FFFFFFFF.0002: collection stack underflow [ 1030.149053][T12265] hid-generic 0007:0007:FFFFFFFF.0002: item 0 2 0 12 parsing failed [ 1030.157175][T12265] hid-generic 0007:0007:FFFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 1030.225392][ T28] audit: type=1400 audit(1030.158:3641): avc: denied { write } for pid=6533 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.563838][ T28] audit: type=1400 audit(1030.498:3642): avc: denied { write } for pid=6537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.709021][ T28] audit: type=1400 audit(1030.668:3643): avc: denied { write } for pid=6576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.781491][ T28] audit: type=1400 audit(1030.708:3644): avc: granted { setsecparam } for pid=6550 comm="syz.1.10470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1031.151382][ T28] audit: type=1400 audit(1031.098:3645): avc: denied { write } for pid=6580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.176036][ T6609] loop1: detected capacity change from 0 to 128 [ 1031.633153][ T28] audit: type=1400 audit(1031.588:3646): avc: denied { write } for pid=6625 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.939168][ T6652] FAULT_INJECTION: forcing a failure. [ 1031.939168][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.000201][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.0.10488 Tainted: G W syzkaller #0 PREEMPT(full) [ 1032.000247][ T6652] Tainted: [W]=WARN [ 1032.000256][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.000270][ T6652] Call Trace: [ 1032.000277][ T6652] [ 1032.000286][ T6652] __dump_stack+0x1d/0x30 [ 1032.000310][ T6652] dump_stack_lvl+0x95/0xd0 [ 1032.000330][ T6652] dump_stack+0x15/0x1b [ 1032.000396][ T6652] should_fail_ex+0x263/0x280 [ 1032.000433][ T6652] should_fail+0xb/0x20 [ 1032.000458][ T6652] should_fail_usercopy+0x1a/0x20 [ 1032.000522][ T6652] _copy_from_user+0x1c/0xb0 [ 1032.000553][ T6652] ___sys_sendmsg+0xc1/0x1e0 [ 1032.000600][ T6652] __x64_sys_sendmsg+0xd4/0x160 [ 1032.000648][ T6652] x64_sys_call+0x194c/0x3020 [ 1032.000712][ T6652] do_syscall_64+0x12c/0x3b0 [ 1032.000747][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.000768][ T6652] RIP: 0033:0x7f3434c4ce59 [ 1032.000785][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.000808][ T6652] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.000841][ T6652] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1032.000860][ T6652] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000004 [ 1032.000875][ T6652] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.000889][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.000903][ T6652] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1032.000930][ T6652] [ 1032.201981][ T28] audit: type=1400 audit(1032.168:3647): avc: denied { write } for pid=6633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.390865][ T6698] syzkaller0: entered promiscuous mode [ 1032.396481][ T6698] syzkaller0: entered allmulticast mode [ 1033.742772][ T6741] loop1: detected capacity change from 0 to 512 [ 1033.900978][ T6763] FAULT_INJECTION: forcing a failure. [ 1033.900978][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.933850][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.0.10504 Tainted: G W syzkaller #0 PREEMPT(full) [ 1033.933891][ T6763] Tainted: [W]=WARN [ 1033.933899][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.933915][ T6763] Call Trace: [ 1033.933924][ T6763] [ 1033.933935][ T6763] __dump_stack+0x1d/0x30 [ 1033.933984][ T6763] dump_stack_lvl+0x95/0xd0 [ 1033.934010][ T6763] dump_stack+0x15/0x1b [ 1033.934056][ T6763] should_fail_ex+0x263/0x280 [ 1033.934086][ T6763] should_failslab+0x8c/0xb0 [ 1033.934120][ T6763] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1033.934161][ T6763] ? do_getname+0x2e/0x1c0 [ 1033.934230][ T6763] ? __fget_files+0x184/0x1c0 [ 1033.934260][ T6763] do_getname+0x2e/0x1c0 [ 1033.934285][ T6763] getname_flags+0x1d/0x30 [ 1033.934309][ T6763] ksys_truncate+0x51/0x140 [ 1033.934419][ T6763] __x64_sys_truncate+0x31/0x40 [ 1033.934454][ T6763] x64_sys_call+0x19fb/0x3020 [ 1033.934551][ T6763] do_syscall_64+0x12c/0x3b0 [ 1033.934587][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.934611][ T6763] RIP: 0033:0x7f3434c4ce59 [ 1033.934632][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.934656][ T6763] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1033.934741][ T6763] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1033.934755][ T6763] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000900 [ 1033.934771][ T6763] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.934786][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.934798][ T6763] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1033.934888][ T6763] [ 1034.124856][ T6769] FAULT_INJECTION: forcing a failure. [ 1034.124856][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.147327][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.1.10505 Tainted: G W syzkaller #0 PREEMPT(full) [ 1034.147374][ T6769] Tainted: [W]=WARN [ 1034.147385][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1034.147402][ T6769] Call Trace: [ 1034.147412][ T6769] [ 1034.147424][ T6769] __dump_stack+0x1d/0x30 [ 1034.147457][ T6769] dump_stack_lvl+0x95/0xd0 [ 1034.147509][ T6769] dump_stack+0x15/0x1b [ 1034.147534][ T6769] should_fail_ex+0x263/0x280 [ 1034.147573][ T6769] should_fail+0xb/0x20 [ 1034.147606][ T6769] should_fail_usercopy+0x1a/0x20 [ 1034.147666][ T6769] _copy_from_iter+0xcf/0xea0 [ 1034.147754][ T6769] ? __rcu_read_unlock+0x4e/0x70 [ 1034.147784][ T6769] ? terminate_walk+0x1e6/0x210 [ 1034.147813][ T6769] ? path_openat+0x1ab2/0x2050 [ 1034.147883][ T6769] tun_get_user+0x38c/0x27e0 [ 1034.147919][ T6769] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1034.147969][ T6769] ? selinux_file_permission+0x1e1/0x320 [ 1034.148004][ T6769] tun_chr_write_iter+0x15e/0x210 [ 1034.148078][ T6769] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1034.148253][ T6769] vfs_write+0x5a6/0x9f0 [ 1034.148298][ T6769] ksys_write+0xdc/0x1a0 [ 1034.148337][ T6769] __x64_sys_write+0x40/0x50 [ 1034.148374][ T6769] x64_sys_call+0x27e1/0x3020 [ 1034.148451][ T6769] do_syscall_64+0x12c/0x3b0 [ 1034.148493][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.148542][ T6769] RIP: 0033:0x7f6ce5f2ce59 [ 1034.148563][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.148639][ T6769] RSP: 002b:00007f6ce4966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1034.148664][ T6769] RAX: ffffffffffffffda RBX: 00007f6ce61a6090 RCX: 00007f6ce5f2ce59 [ 1034.148682][ T6769] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 1034.148698][ T6769] RBP: 00007f6ce4966090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.148781][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.148796][ T6769] R13: 00007f6ce61a6128 R14: 00007f6ce61a6090 R15: 00007ffe2e500948 [ 1034.148825][ T6769] [ 1034.965462][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1034.965486][ T28] audit: type=1400 audit(1034.928:3655): avc: denied { ioctl } for pid=6810 comm="syz.0.10512" path="socket:[123969]" dev="sockfs" ino=123969 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1035.019613][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10512'. [ 1035.059545][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10512'. [ 1035.068754][ T6812] netlink: 'syz.0.10512': attribute type 13 has an invalid length. [ 1035.085678][ T6812] netlink: 'syz.0.10512': attribute type 11 has an invalid length. [ 1035.106486][ T28] audit: type=1400 audit(1035.068:3656): avc: denied { write } for pid=6790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.164761][ T28] audit: type=1400 audit(1035.128:3657): avc: denied { write } for pid=6825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.436734][ T6841] loop1: detected capacity change from 0 to 128 [ 1035.468624][ T6841] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1035.495489][ T6841] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1035.533752][ T6841] FAT-fs (loop1): Filesystem has been set read-only [ 1035.582214][ T28] audit: type=1400 audit(1035.548:3658): avc: denied { write } for pid=6828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.981772][ T6872] loop1: detected capacity change from 0 to 128 [ 1036.069839][ T6872] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1036.128343][ T28] audit: type=1400 audit(1035.618:3659): avc: denied { write } for pid=6858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.220857][T30910] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1036.391739][ T28] audit: type=1400 audit(1036.358:3660): avc: denied { create } for pid=6911 comm="syz.0.10529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1036.431036][ T28] audit: type=1400 audit(1036.378:3661): avc: denied { connect } for pid=6911 comm="syz.0.10529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1036.504210][ T28] audit: type=1400 audit(1036.458:3662): avc: denied { write } for pid=6865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.705293][ T28] audit: type=1400 audit(1036.668:3663): avc: denied { write } for pid=6933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.990818][ T28] audit: type=1400 audit(1036.958:3664): avc: denied { write } for pid=6935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.062927][ T7021] syzkaller0: entered promiscuous mode [ 1039.084680][ T7021] syzkaller0: entered allmulticast mode [ 1039.123966][ T7030] loop1: detected capacity change from 0 to 1024 [ 1039.158188][ T7030] EXT4-fs: Ignoring removed i_version option [ 1039.164797][ T7030] EXT4-fs: dax option not supported [ 1039.816354][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1004 sclass=netlink_route_socket pid=7078 comm=syz.5.10550 [ 1039.829506][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7078 comm=syz.5.10550 [ 1039.842774][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1004 sclass=netlink_route_socket pid=7078 comm=syz.5.10550 [ 1039.855702][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7078 comm=syz.5.10550 [ 1039.986926][ T7099] FAULT_INJECTION: forcing a failure. [ 1039.986926][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.004730][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.1.10559 Tainted: G W syzkaller #0 PREEMPT(full) [ 1040.004797][ T7099] Tainted: [W]=WARN [ 1040.004805][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.004818][ T7099] Call Trace: [ 1040.004881][ T7099] [ 1040.004893][ T7099] __dump_stack+0x1d/0x30 [ 1040.004929][ T7099] dump_stack_lvl+0x95/0xd0 [ 1040.004957][ T7099] dump_stack+0x15/0x1b [ 1040.005024][ T7099] should_fail_ex+0x263/0x280 [ 1040.005055][ T7099] should_fail+0xb/0x20 [ 1040.005086][ T7099] should_fail_usercopy+0x1a/0x20 [ 1040.005223][ T7099] _copy_from_user+0x1c/0xb0 [ 1040.005265][ T7099] __sys_bpf+0x183/0x7e0 [ 1040.005310][ T7099] __x64_sys_bpf+0x41/0x50 [ 1040.005436][ T7099] x64_sys_call+0x10cb/0x3020 [ 1040.005469][ T7099] do_syscall_64+0x12c/0x3b0 [ 1040.005518][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.005591][ T7099] RIP: 0033:0x7f6ce5f2ce59 [ 1040.005609][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.005626][ T7099] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1040.005646][ T7099] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1040.005660][ T7099] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000015 [ 1040.005677][ T7099] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.005716][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.005734][ T7099] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1040.005759][ T7099] [ 1040.340213][ T7118] FAULT_INJECTION: forcing a failure. [ 1040.340213][ T7118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.374475][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.0.10564 Tainted: G W syzkaller #0 PREEMPT(full) [ 1040.374519][ T7118] Tainted: [W]=WARN [ 1040.374529][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.374546][ T7118] Call Trace: [ 1040.374556][ T7118] [ 1040.374566][ T7118] __dump_stack+0x1d/0x30 [ 1040.374646][ T7118] dump_stack_lvl+0x95/0xd0 [ 1040.374752][ T7118] dump_stack+0x15/0x1b [ 1040.374777][ T7118] should_fail_ex+0x263/0x280 [ 1040.374816][ T7118] should_fail+0xb/0x20 [ 1040.374910][ T7118] should_fail_usercopy+0x1a/0x20 [ 1040.374949][ T7118] _copy_from_user+0x1c/0xb0 [ 1040.374990][ T7118] ___sys_sendmsg+0xc1/0x1e0 [ 1040.375049][ T7118] ? path_openat+0x1b01/0x2050 [ 1040.375109][ T7118] __sys_sendmmsg+0x185/0x320 [ 1040.375203][ T7118] __x64_sys_sendmmsg+0x57/0x70 [ 1040.375292][ T7118] x64_sys_call+0x27aa/0x3020 [ 1040.375325][ T7118] do_syscall_64+0x12c/0x3b0 [ 1040.375375][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.375440][ T7118] RIP: 0033:0x7f3434c4ce59 [ 1040.375460][ T7118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.375484][ T7118] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1040.375510][ T7118] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1040.375563][ T7118] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1040.375580][ T7118] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.375597][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.375612][ T7118] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1040.375722][ T7118] [ 1042.194845][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1042.194860][ T28] audit: type=1400 audit(1042.158:3680): avc: denied { write } for pid=7188 comm="syz.0.10589" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1042.287854][ T7190] rdma_rxe: Failed to create IPv4 UDP tunnel [ 1044.305474][ T7236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10600'. [ 1044.365698][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10600'. [ 1044.384489][ T28] audit: type=1400 audit(1044.348:3681): avc: denied { ioctl } for pid=7234 comm="syz.0.10600" path="socket:[124345]" dev="sockfs" ino=124345 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1044.599254][ T7255] netlink: 391 bytes leftover after parsing attributes in process `syz.7.10606'. [ 1044.628172][ T7255] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 1044.660035][ T7255] openvswitch: netlink: Message has 4 unknown bytes. [ 1044.923744][ T7267] IPv6: sit1: Disabled Multicast RS [ 1045.068152][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10607'. [ 1045.329935][ T42] Bluetooth: hci0: sending frame failed (-49) [ 1045.336505][ T3850] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1046.052301][ T7314] FAULT_INJECTION: forcing a failure. [ 1046.052301][ T7314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.065361][ T7314] CPU: 1 UID: 0 PID: 7314 Comm: syz.1.10619 Tainted: G W syzkaller #0 PREEMPT(full) [ 1046.065435][ T7314] Tainted: [W]=WARN [ 1046.065509][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.065521][ T7314] Call Trace: [ 1046.065527][ T7314] [ 1046.065536][ T7314] __dump_stack+0x1d/0x30 [ 1046.065558][ T7314] dump_stack_lvl+0x95/0xd0 [ 1046.065577][ T7314] dump_stack+0x15/0x1b [ 1046.065594][ T7314] should_fail_ex+0x263/0x280 [ 1046.065661][ T7314] should_fail+0xb/0x20 [ 1046.065683][ T7314] should_fail_usercopy+0x1a/0x20 [ 1046.065725][ T7314] _copy_to_user+0x20/0xa0 [ 1046.065752][ T7314] simple_read_from_buffer+0xb5/0x130 [ 1046.065784][ T7314] proc_fail_nth_read+0x10e/0x150 [ 1046.065848][ T7314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1046.065948][ T7314] vfs_read+0x1ab/0x7f0 [ 1046.065973][ T7314] ? __rcu_read_unlock+0x4e/0x70 [ 1046.065993][ T7314] ? __fget_files+0x184/0x1c0 [ 1046.066034][ T7314] ? mutex_lock+0x57/0x90 [ 1046.066087][ T7314] ksys_read+0xdc/0x1a0 [ 1046.066189][ T7314] __x64_sys_read+0x40/0x50 [ 1046.066214][ T7314] x64_sys_call+0x2886/0x3020 [ 1046.066235][ T7314] do_syscall_64+0x12c/0x3b0 [ 1046.066312][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.066337][ T7314] RIP: 0033:0x7f6ce5eed68e [ 1046.066352][ T7314] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1046.066367][ T7314] RSP: 002b:00007f6ce4986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1046.066385][ T7314] RAX: ffffffffffffffda RBX: 00007f6ce49876c0 RCX: 00007f6ce5eed68e [ 1046.066397][ T7314] RDX: 000000000000000f RSI: 00007f6ce49870a0 RDI: 0000000000000003 [ 1046.066467][ T7314] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.066484][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.066495][ T7314] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1046.066516][ T7314] [ 1046.275743][ T7317] FAULT_INJECTION: forcing a failure. [ 1046.275743][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.288680][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.1.10620 Tainted: G W syzkaller #0 PREEMPT(full) [ 1046.288837][ T7317] Tainted: [W]=WARN [ 1046.288846][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.288863][ T7317] Call Trace: [ 1046.288873][ T7317] [ 1046.288883][ T7317] __dump_stack+0x1d/0x30 [ 1046.289003][ T7317] dump_stack_lvl+0x95/0xd0 [ 1046.289030][ T7317] dump_stack+0x15/0x1b [ 1046.289056][ T7317] should_fail_ex+0x263/0x280 [ 1046.289123][ T7317] should_failslab+0x8c/0xb0 [ 1046.289166][ T7317] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1046.289209][ T7317] ? __se_sys_mbind+0x616/0xdd0 [ 1046.289353][ T7317] ? get_pid_task+0x96/0xd0 [ 1046.289390][ T7317] __se_sys_mbind+0x616/0xdd0 [ 1046.289419][ T7317] ? __rcu_read_unlock+0x4e/0x70 [ 1046.289485][ T7317] __x64_sys_mbind+0x78/0x90 [ 1046.289514][ T7317] x64_sys_call+0x2b72/0x3020 [ 1046.289546][ T7317] do_syscall_64+0x12c/0x3b0 [ 1046.289585][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.289606][ T7317] RIP: 0033:0x7f6ce5f2ce59 [ 1046.289672][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.289730][ T7317] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1046.289755][ T7317] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1046.289774][ T7317] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000001000 [ 1046.289814][ T7317] RBP: 00007f6ce4987090 R08: 0800004000000053 R09: 0000000000000003 [ 1046.289844][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.289860][ T7317] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1046.289883][ T7317] [ 1047.120508][ T28] audit: type=1326 audit(1047.088:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.8.10623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1047.567501][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10625'. [ 1048.222400][ T7373] Failed to initialize the IGMP autojoin socket (err -2) [ 1048.280012][ T7379] netlink: 'syz.8.10633': attribute type 1 has an invalid length. [ 1048.314623][ T7383] FAULT_INJECTION: forcing a failure. [ 1048.314623][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.348249][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.1.10635 Tainted: G W syzkaller #0 PREEMPT(full) [ 1048.348282][ T7383] Tainted: [W]=WARN [ 1048.348289][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1048.348365][ T7383] Call Trace: [ 1048.348372][ T7383] [ 1048.348381][ T7383] __dump_stack+0x1d/0x30 [ 1048.348412][ T7383] dump_stack_lvl+0x95/0xd0 [ 1048.348439][ T7383] dump_stack+0x15/0x1b [ 1048.348524][ T7383] should_fail_ex+0x263/0x280 [ 1048.348555][ T7383] should_fail+0xb/0x20 [ 1048.348644][ T7383] should_fail_usercopy+0x1a/0x20 [ 1048.348689][ T7383] _copy_from_user+0x1c/0xb0 [ 1048.348731][ T7383] __sys_bpf+0x183/0x7e0 [ 1048.348773][ T7383] __x64_sys_bpf+0x41/0x50 [ 1048.348802][ T7383] x64_sys_call+0x10cb/0x3020 [ 1048.348904][ T7383] do_syscall_64+0x12c/0x3b0 [ 1048.348948][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.348972][ T7383] RIP: 0033:0x7f6ce5f2ce59 [ 1048.348987][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.349078][ T7383] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1048.349104][ T7383] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1048.349118][ T7383] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1048.349132][ T7383] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.349158][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.349206][ T7383] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1048.349312][ T7383] [ 1049.829144][ T7396] loop1: detected capacity change from 0 to 256 [ 1050.066939][ T28] audit: type=1326 audit(1050.018:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.7.10655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1050.193901][ T7465] loop1: detected capacity change from 0 to 512 [ 1050.250495][ T7465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1050.281149][ T7465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.313935][ T28] audit: type=1400 audit(1050.278:3684): avc: denied { write } for pid=7461 comm="syz.1.10658" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1050.386342][ T28] audit: type=1400 audit(1050.308:3685): avc: denied { write } for pid=7461 comm="syz.1.10658" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1050.413902][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.547827][ T28] audit: type=1400 audit(1050.488:3686): avc: denied { append } for pid=7481 comm="syz.1.10661" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1050.642817][ T7489] Failed to initialize the IGMP autojoin socket (err -2) [ 1051.504017][ T7526] FAULT_INJECTION: forcing a failure. [ 1051.504017][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.517662][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.1.10672 Tainted: G W syzkaller #0 PREEMPT(full) [ 1051.517697][ T7526] Tainted: [W]=WARN [ 1051.517704][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1051.517769][ T7526] Call Trace: [ 1051.517809][ T7526] [ 1051.517821][ T7526] __dump_stack+0x1d/0x30 [ 1051.517854][ T7526] dump_stack_lvl+0x95/0xd0 [ 1051.517878][ T7526] dump_stack+0x15/0x1b [ 1051.517898][ T7526] should_fail_ex+0x263/0x280 [ 1051.517997][ T7526] should_fail+0xb/0x20 [ 1051.518030][ T7526] should_fail_usercopy+0x1a/0x20 [ 1051.518090][ T7526] _copy_from_user+0x1c/0xb0 [ 1051.518121][ T7526] ___sys_sendmsg+0xc1/0x1e0 [ 1051.518253][ T7526] __x64_sys_sendmsg+0xd4/0x160 [ 1051.518303][ T7526] x64_sys_call+0x194c/0x3020 [ 1051.518327][ T7526] do_syscall_64+0x12c/0x3b0 [ 1051.518362][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.518532][ T7526] RIP: 0033:0x7f6ce5f2ce59 [ 1051.518561][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.518607][ T7526] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.518627][ T7526] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1051.518642][ T7526] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1051.518657][ T7526] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.518674][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.518707][ T7526] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1051.518742][ T7526] [ 1052.054597][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10684'. [ 1052.598832][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10688'. [ 1052.760709][ T7584] loop1: detected capacity change from 0 to 512 [ 1053.043036][ T7608] loop1: detected capacity change from 0 to 2048 [ 1053.052126][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10701'. [ 1053.061673][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10701'. [ 1053.621618][ T7608] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 1053.804476][ T7608] loop1: p3 start 196609 is beyond EOD, truncated [ 1053.908426][ T7623] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10702'. [ 1054.953543][ T8082] FAULT_INJECTION: forcing a failure. [ 1054.953543][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.008308][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.10709 Tainted: G W syzkaller #0 PREEMPT(full) [ 1055.008346][ T8082] Tainted: [W]=WARN [ 1055.008423][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.008439][ T8082] Call Trace: [ 1055.008447][ T8082] [ 1055.008456][ T8082] __dump_stack+0x1d/0x30 [ 1055.008488][ T8082] dump_stack_lvl+0x95/0xd0 [ 1055.008515][ T8082] dump_stack+0x15/0x1b [ 1055.008558][ T8082] should_fail_ex+0x263/0x280 [ 1055.008596][ T8082] should_fail+0xb/0x20 [ 1055.008680][ T8082] should_fail_usercopy+0x1a/0x20 [ 1055.008713][ T8082] _copy_from_user+0x1c/0xb0 [ 1055.008762][ T8082] ___sys_sendmsg+0xc1/0x1e0 [ 1055.008880][ T8082] __x64_sys_sendmsg+0xd4/0x160 [ 1055.009050][ T8082] x64_sys_call+0x194c/0x3020 [ 1055.009141][ T8082] do_syscall_64+0x12c/0x3b0 [ 1055.009181][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.009203][ T8082] RIP: 0033:0x7f3434c4ce59 [ 1055.009220][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.009262][ T8082] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.009282][ T8082] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1055.009296][ T8082] RDX: 000000000004c040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1055.009311][ T8082] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.009328][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.009344][ T8082] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1055.009390][ T8082] [ 1055.228805][ T28] audit: type=1400 audit(1055.188:3687): avc: denied { bind } for pid=8186 comm="syz.8.10711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1055.293558][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop1p22, 10) failed: No such file or directory [ 1055.303727][ T7888] udevd[7888]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 1055.306595][ T7891] udevd[7891]: inotify_add_watch(7, /dev/loop1p27, 10) failed: No such file or directory [ 1055.315486][ T7886] udevd[7886]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 1055.336029][ T7887] udevd[7887]: inotify_add_watch(7, /dev/loop1p30, 10) failed: No such file or directory [ 1055.340763][ T7893] udevd[7893]: inotify_add_watch(7, /dev/loop1p28, 10) failed: No such file or directory [ 1055.348924][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop1p31, 10) failed: No such file or directory [ 1055.358725][ T7889] udevd[7889]: inotify_add_watch(7, /dev/loop1p24, 10) failed: No such file or directory [ 1055.376586][ T7890] udevd[7890]: inotify_add_watch(7, /dev/loop1p26, 10) failed: No such file or directory [ 1055.382347][ T7888] udevd[7888]: inotify_add_watch(7, /dev/loop1p32, 10) failed: No such file or directory [ 1055.849869][ T8242] netlink: 'syz.0.10719': attribute type 1 has an invalid length. [ 1056.687782][ T8264] random: crng reseeded on system resumption [ 1056.700598][ T8264] loop1: detected capacity change from 0 to 512 [ 1056.855094][ T8264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1057.281072][ T28] audit: type=1400 audit(1057.198:3688): avc: denied { validate_trans } for pid=8263 comm="syz.1.10727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1058.169264][ T8312] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1058.434736][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1058.495841][ T8343] syzkaller0: entered promiscuous mode [ 1058.501363][ T8343] syzkaller0: entered allmulticast mode [ 1058.548018][ T8349] Failed to initialize the IGMP autojoin socket (err -2) [ 1058.693891][ T8360] dummy0: entered allmulticast mode [ 1059.904238][ T8417] loop1: detected capacity change from 0 to 256 [ 1059.911368][ T8417] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1059.931466][ T8417] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1060.020533][ T8425] FAULT_INJECTION: forcing a failure. [ 1060.020533][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.051680][ T8366] dummy0: left allmulticast mode [ 1060.056759][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.1.10773 Tainted: G W syzkaller #0 PREEMPT(full) [ 1060.056853][ T8425] Tainted: [W]=WARN [ 1060.056861][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.056877][ T8425] Call Trace: [ 1060.056885][ T8425] [ 1060.056896][ T8425] __dump_stack+0x1d/0x30 [ 1060.057006][ T8425] dump_stack_lvl+0x95/0xd0 [ 1060.057032][ T8425] dump_stack+0x15/0x1b [ 1060.057054][ T8425] should_fail_ex+0x263/0x280 [ 1060.057131][ T8425] should_fail+0xb/0x20 [ 1060.057161][ T8425] should_fail_usercopy+0x1a/0x20 [ 1060.057273][ T8425] _copy_from_user+0x1c/0xb0 [ 1060.057310][ T8425] kstrtouint_from_user+0x69/0xf0 [ 1060.057343][ T8425] ? 0xffffffff81000000 [ 1060.057435][ T8425] ? selinux_file_permission+0x1e1/0x320 [ 1060.057466][ T8425] proc_fail_nth_write+0x50/0x160 [ 1060.057540][ T8425] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1060.057577][ T8425] vfs_write+0x269/0x9f0 [ 1060.057627][ T8425] ? mutex_lock+0x4f/0x90 [ 1060.057667][ T8425] ? mutex_lock+0x57/0x90 [ 1060.057702][ T8425] ksys_write+0xdc/0x1a0 [ 1060.057775][ T8425] __x64_sys_write+0x40/0x50 [ 1060.057810][ T8425] x64_sys_call+0x27e1/0x3020 [ 1060.057916][ T8425] do_syscall_64+0x12c/0x3b0 [ 1060.057955][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.058072][ T8425] RIP: 0033:0x7f6ce5eed68e [ 1060.058150][ T8425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1060.058172][ T8425] RSP: 002b:00007f6ce4986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1060.058196][ T8425] RAX: ffffffffffffffda RBX: 00007f6ce49876c0 RCX: 00007f6ce5eed68e [ 1060.058215][ T8425] RDX: 0000000000000001 RSI: 00007f6ce49870a0 RDI: 0000000000000005 [ 1060.058231][ T8425] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.058246][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.058260][ T8425] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1060.058329][ T8425] [ 1061.138350][ T28] audit: type=1326 audit(1061.088:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.8.10778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1061.294589][ T8462] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.10784'. [ 1062.880036][ T28] audit: type=1400 audit(1062.818:3690): avc: denied { bind } for pid=8495 comm="syz.0.10795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1064.472138][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10795'. [ 1065.388705][ T8527] netlink: 52 bytes leftover after parsing attributes in process `syz.8.10801'. [ 1065.429047][ T8527] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10801'. [ 1066.652871][ T8592] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10823'. [ 1066.662321][ T8592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8592 comm=syz.1.10823 [ 1066.675058][ T8592] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10823'. [ 1067.160110][ T8602] loop1: detected capacity change from 0 to 256 [ 1068.259285][ T28] audit: type=1326 audit(1068.228:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.0.10826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3434c4ce59 code=0x0 [ 1068.371243][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1069.197902][ T28] audit: type=1400 audit(1069.118:3692): avc: denied { shutdown } for pid=8656 comm="syz.0.10843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1069.229080][ T28] audit: type=1400 audit(1069.118:3693): avc: denied { read } for pid=8656 comm="syz.0.10843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1069.272320][ T28] audit: type=1326 audit(1069.228:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.7.10846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1069.506422][ T8679] tipc: Enabled bearer , priority 0 [ 1069.515872][ T8679] syzkaller0: entered promiscuous mode [ 1069.521388][ T8679] syzkaller0: entered allmulticast mode [ 1069.534652][ T8679] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1069.544466][ T8679] tipc: Resetting bearer [ 1069.552362][ T8678] tipc: Resetting bearer [ 1069.560583][ T8678] tipc: Disabling bearer [ 1069.877814][ T8699] loop1: detected capacity change from 0 to 512 [ 1069.939947][ T8712] loop1: detected capacity change from 0 to 164 [ 1069.955618][ T8712] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1069.983418][ T8712] loop1: detected capacity change from 0 to 512 [ 1070.090477][ T8712] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.10860: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 1070.108041][ T8712] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1070.108321][ T8712] EXT4-fs (loop1): get root inode failed [ 1070.123023][ T8712] EXT4-fs (loop1): mount failed [ 1070.169400][ T8712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1070.948038][ T8766] loop1: detected capacity change from 0 to 1024 [ 1071.334965][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10880'. [ 1071.543532][ T8790] 9pnet: p9_errstr2errno: server reported unknown error [ 1071.588287][ T28] audit: type=1326 audit(1071.528:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.7.10882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1072.628259][ T28] audit: type=1400 audit(1072.478:3696): avc: denied { write } for pid=8838 comm="syz.0.10897" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1075.222782][ T8874] loop1: detected capacity change from 0 to 8192 [ 1075.284129][ T8875] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10908'. [ 1075.644692][ T8899] loop1: detected capacity change from 0 to 512 [ 1075.651372][ T8899] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1076.577390][ T8920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10919'. [ 1078.100771][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10938'. [ 1078.136038][ T8974] loop1: detected capacity change from 0 to 512 [ 1078.156337][ T8974] EXT4-fs: Ignoring removed bh option [ 1078.162662][ T8974] EXT4-fs: inline encryption not supported [ 1078.180652][ T8974] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1078.359656][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10938'. [ 1078.791637][ T8974] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1078.827842][ T8974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10935: bg 0: block 248: padding at end of block bitmap is not set [ 1078.877109][ T8974] loop1: lost filesystem error report for type 5 error -117 [ 1078.906407][ T9020] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10944'. [ 1078.922728][ T9020] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 1078.930864][ T9020] openvswitch: netlink: Message has 6 unknown bytes. [ 1078.950839][ T8974] Quota error (device loop1): write_blk: dquota write failed [ 1078.958318][ T8974] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1078.968205][ T8974] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.10935: Failed to acquire dquot type 1 [ 1078.991640][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1078.991671][ C0] EXT4-fs (loop1): last error at time 1078: ext4_validate_block_bitmap:441 [ 1079.055197][ T8974] loop1: lost filesystem error report for type 5 error -28 [ 1079.055952][ T8974] EXT4-fs (loop1): 1 truncate cleaned up [ 1079.081451][ T28] audit: type=1400 audit(1079.018:3697): avc: denied { write } for pid=9003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.117911][ T8974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1079.253180][ T28] audit: type=1400 audit(1079.088:3698): avc: denied { write } for pid=9031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.324003][ T28] audit: type=1400 audit(1079.248:3699): avc: denied { create } for pid=9037 comm="syz.5.10949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1079.496350][ T28] audit: type=1326 audit(1079.438:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.8.10948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1079.692275][T29446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1079.704479][ T28] audit: type=1400 audit(1079.658:3701): avc: denied { write } for pid=9043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.786648][ T28] audit: type=1400 audit(1079.718:3702): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.987098][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10958'. [ 1079.998158][ T9085] netlink: 'syz.7.10958': attribute type 21 has an invalid length. [ 1080.006136][ T9085] netlink: 156 bytes leftover after parsing attributes in process `syz.7.10958'. [ 1080.015589][ T9080] loop1: detected capacity change from 0 to 512 [ 1080.288133][ T9080] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.682530][T29446] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1080.887262][ T28] audit: type=1326 audit(1080.838:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.8.10962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1086.176229][ T28] audit: type=1326 audit(1086.138:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.7.10982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1086.535746][ T9183] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10985'. [ 1087.281376][ T9203] loop1: detected capacity change from 0 to 128 [ 1087.329633][ T9203] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1087.416100][ T9203] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1087.612458][ T9203] FAT-fs (loop1): Filesystem has been set read-only [ 1087.737023][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10995'. [ 1088.534022][ T9265] syzkaller0: entered promiscuous mode [ 1088.539545][ T9265] syzkaller0: entered allmulticast mode [ 1088.551115][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11012'. [ 1089.859454][ T28] audit: type=1400 audit(1089.808:3705): avc: denied { checkpoint_restore } for pid=9292 comm="syz.1.11019" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.672089][ T9334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1090.755693][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11041'. [ 1090.862363][ T28] audit: type=1400 audit(1090.808:3706): avc: denied { write } for pid=9381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.951871][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11046'. [ 1090.996824][ T28] audit: type=1400 audit(1090.918:3707): avc: denied { write } for pid=9425 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.929423][ T28] audit: type=1400 audit(1091.868:3708): avc: denied { search } for pid=9437 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.098234][ T28] audit: type=1400 audit(1091.868:3709): avc: denied { search } for pid=9437 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.188954][ T28] audit: type=1400 audit(1091.908:3710): avc: denied { search } for pid=9437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.362496][ T28] audit: type=1400 audit(1091.908:3711): avc: denied { search } for pid=9437 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.491995][ T28] audit: type=1400 audit(1091.908:3712): avc: denied { recv } for pid=9434 comm="syz.5.11052" saddr=10.128.0.163 src=30036 daddr=10.128.0.205 dest=46158 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1093.668602][ T28] audit: type=1400 audit(1091.908:3713): avc: denied { read } for pid=9437 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.740147][ T28] audit: type=1400 audit(1091.908:3714): avc: denied { read open } for pid=9437 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.792720][ T28] audit: type=1400 audit(1091.908:3715): avc: denied { getattr } for pid=9437 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.842456][ T28] audit: type=1400 audit(1091.928:3716): avc: denied { write } for pid=9441 comm="syz.0.11053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1093.877227][ T28] audit: type=1400 audit(1091.928:3717): avc: denied { getattr } for pid=9437 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1094.010986][ T9496] loop1: detected capacity change from 0 to 2048 [ 1094.029173][ T9496] EXT4-fs: Ignoring removed nobh option [ 1094.095314][ T9496] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.11065: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1094.136040][ T9496] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1094.136411][ T9496] EXT4-fs (loop1): Remounting filesystem read-only [ 1094.158265][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1094.164788][ C1] EXT4-fs (loop1): initial error at time 1094: ext4_ext_check_inode:521: inode 2 [ 1094.173975][ C1] EXT4-fs (loop1): last error at time 1094: ext4_ext_check_inode:521: inode 2 [ 1094.184472][ T9496] EXT4-fs (loop1): get root inode failed [ 1094.190166][ T9496] EXT4-fs (loop1): mount failed [ 1094.224379][ T9496] loop1: detected capacity change from 0 to 512 [ 1094.254246][ T9496] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1094.342314][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11069'. [ 1098.645948][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 1098.645963][ T28] audit: type=1400 audit(1098.578:3809): avc: denied { unmount } for pid=29446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1098.971018][ T9608] loop1: detected capacity change from 0 to 512 [ 1098.977657][ T9608] EXT4-fs: quotafile must be on filesystem root [ 1099.052143][ T9620] loop1: detected capacity change from 0 to 128 [ 1099.072812][ T9620] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1099.089850][ T28] audit: type=1400 audit(1099.028:3810): avc: denied { mount } for pid=9619 comm="syz.1.11098" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1099.105063][ T9620] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1099.129494][ T9620] FAT-fs (loop1): Filesystem has been set read-only [ 1100.474974][ T28] audit: type=1400 audit(1100.418:3811): avc: denied { unmount } for pid=29446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1101.288320][ T28] audit: type=1400 audit(1101.198:3812): avc: denied { create } for pid=9646 comm="syz.7.11105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1101.320625][ T28] audit: type=1400 audit(1101.258:3813): avc: denied { sqpoll } for pid=9646 comm="syz.7.11105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1101.556896][ T9665] macsec1: entered promiscuous mode [ 1101.574133][ T9665] macsec1: entered allmulticast mode [ 1104.132012][ T28] audit: type=1400 audit(1103.988:3814): avc: denied { mount } for pid=9674 comm="syz.8.11113" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1107.027237][ T28] audit: type=1400 audit(1106.978:3815): avc: denied { write } for pid=9689 comm="syz.8.11117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1107.046935][ T28] audit: type=1400 audit(1106.978:3816): avc: denied { nlmsg_write } for pid=9689 comm="syz.8.11117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1107.067117][ T28] audit: type=1400 audit(1106.978:3817): avc: denied { ioctl } for pid=9689 comm="syz.8.11117" path="socket:[129230]" dev="sockfs" ino=129230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1107.169647][ T28] audit: type=1326 audit(1107.098:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.8.11117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1107.263895][ T28] audit: type=1400 audit(1107.148:3819): avc: denied { execute } for pid=9705 comm="syz.0.11122" path="/392/file2" dev="tmpfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1107.358540][ T28] audit: type=1400 audit(1107.148:3820): avc: denied { setopt } for pid=9705 comm="syz.0.11122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1107.377560][ T28] audit: type=1400 audit(1107.208:3821): avc: denied { accept } for pid=9689 comm="syz.8.11117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1107.397348][ T28] audit: type=1400 audit(1107.258:3822): avc: denied { sys_module } for pid=9707 comm="syz.7.11123" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1107.860344][ T28] audit: type=1400 audit(1107.818:3823): avc: denied { create } for pid=9728 comm="syz.8.11128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1108.848770][ T9752] rdma_rxe: Failed to create IPv4 UDP tunnel [ 1108.873414][ T9758] loop1: detected capacity change from 0 to 256 [ 1108.916775][ T9758] program syz.1.11136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1109.025962][ T9778] netlink: 'syz.1.11139': attribute type 3 has an invalid length. [ 1109.152284][ T9783] netlink: 'syz.8.11141': attribute type 1 has an invalid length. [ 1109.212120][ T9783] bond2: entered promiscuous mode [ 1109.217265][ T9783] bond2: entered allmulticast mode [ 1109.255216][ T9783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.290925][ T9783] ¿: renamed from vlan0 (while UP) [ 1109.391180][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1109.391198][ T28] audit: type=1400 audit(1109.318:3836): avc: denied { create } for pid=9839 comm="syz.5.11144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1109.451760][ T9783] bridge2: entered promiscuous mode [ 1109.457708][ T9783] bridge2: entered allmulticast mode [ 1109.463719][ T9783] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 1109.476594][ T9783] netlink: 'syz.8.11141': attribute type 58 has an invalid length. [ 1109.484534][ T9783] netlink: 152 bytes leftover after parsing attributes in process `syz.8.11141'. [ 1109.484812][T30910] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1109.508510][ T9840] bond0: entered allmulticast mode [ 1109.530190][ T9783] bridge3: entered promiscuous mode [ 1109.535753][ T9783] bridge3: entered allmulticast mode [ 1109.540451][ T28] audit: type=1400 audit(1109.438:3837): avc: denied { write } for pid=9834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.545885][ T9783] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 1109.598470][T28777] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1109.620525][ T28] audit: type=1400 audit(1109.558:3838): avc: denied { write } for pid=9904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.639189][ T9783] bridge4: entered promiscuous mode [ 1109.654125][ T9783] bridge4: entered allmulticast mode [ 1109.669078][ T9913] netlink: 'syz.0.11147': attribute type 12 has an invalid length. [ 1109.681281][ T9783] bond2: (slave bridge4): Enslaving as a backup interface with a down link [ 1109.703065][ T9913] netlink: 'syz.0.11147': attribute type 7 has an invalid length. [ 1110.259814][ T28] audit: type=1400 audit(1110.168:3839): avc: denied { write } for pid=9947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.310705][ T28] audit: type=1326 audit(1110.228:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.7.11158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1110.336416][ T28] audit: type=1400 audit(1110.228:3841): avc: denied { write } for pid=9972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.380103][ T28] audit: type=1326 audit(1110.338:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.8.11157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0750ece59 code=0x0 [ 1110.641710][ T9980] FAULT_INJECTION: forcing a failure. [ 1110.641710][ T9980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.655278][ T28] audit: type=1400 audit(1110.558:3843): avc: denied { write } for pid=9984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.678564][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.1.11161 Tainted: G W syzkaller #0 PREEMPT(full) [ 1110.678631][ T9980] Tainted: [W]=WARN [ 1110.678715][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.678729][ T9980] Call Trace: [ 1110.678736][ T9980] [ 1110.678745][ T9980] __dump_stack+0x1d/0x30 [ 1110.678771][ T9980] dump_stack_lvl+0x95/0xd0 [ 1110.678792][ T9980] dump_stack+0x15/0x1b [ 1110.678812][ T9980] should_fail_ex+0x263/0x280 [ 1110.678899][ T9980] should_fail_alloc_page+0xf2/0x100 [ 1110.678973][ T9980] __alloc_frozen_pages_noprof+0x108/0x350 [ 1110.679003][ T9980] alloc_pages_mpol+0xb3/0x260 [ 1110.679030][ T9980] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 1110.679132][ T9980] migrate_pages_batch+0x35b/0x2010 [ 1110.679178][ T9980] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1110.679211][ T9980] ? __walk_page_range+0x324/0x340 [ 1110.679247][ T9980] ? find_vma+0x6c/0xa0 [ 1110.679319][ T9980] migrate_pages+0x102e/0x1860 [ 1110.679364][ T9980] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1110.679402][ T9980] ? mbind_range+0xb5/0x430 [ 1110.679432][ T9980] __se_sys_mbind+0xc98/0xdd0 [ 1110.679544][ T9980] __x64_sys_mbind+0x78/0x90 [ 1110.679568][ T9980] x64_sys_call+0x2b72/0x3020 [ 1110.679619][ T9980] do_syscall_64+0x12c/0x3b0 [ 1110.679680][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.679702][ T9980] RIP: 0033:0x7f6ce5f2ce59 [ 1110.679719][ T9980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.679738][ T9980] RSP: 002b:00007f6ce4987028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1110.679849][ T9980] RAX: ffffffffffffffda RBX: 00007f6ce61a5fa0 RCX: 00007f6ce5f2ce59 [ 1110.679865][ T9980] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 1110.679945][ T9980] RBP: 00007f6ce4987090 R08: 0000000000000000 R09: 0000000000000002 [ 1110.679976][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.680065][ T9980] R13: 00007f6ce61a6038 R14: 00007f6ce61a5fa0 R15: 00007ffe2e500948 [ 1110.680099][ T9980] [ 1110.941781][ T28] audit: type=1400 audit(1110.898:3844): avc: denied { write } for pid=10000 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.080493][ T28] audit: type=1400 audit(1111.008:3845): avc: denied { listen } for pid=10006 comm="syz.8.11164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1111.106051][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11162'. [ 1111.131849][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11162'. [ 1111.199290][T10012] Failed to initialize the IGMP autojoin socket (err -2) [ 1113.500446][T10102] loop1: detected capacity change from 0 to 512 [ 1113.550395][T10102] /dev/loop1: Can't open blockdev [ 1113.637324][T10121] netlink: 'syz.8.11182': attribute type 1 has an invalid length. [ 1113.787947][T10121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1113.807915][T10129] loop1: detected capacity change from 0 to 4096 [ 1113.838502][T10129] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1113.882899][T10122] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1114.051591][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.070081][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.252057][T10225] Failed to initialize the IGMP autojoin socket (err -2) [ 1114.534679][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1114.534704][ T28] audit: type=1326 audit(1114.458:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1114.804434][ T28] audit: type=1326 audit(1114.538:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1114.859870][T10243] FAULT_INJECTION: forcing a failure. [ 1114.859870][T10243] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.872681][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.0.11193 Tainted: G W syzkaller #0 PREEMPT(full) [ 1114.872723][T10243] Tainted: [W]=WARN [ 1114.872732][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1114.872745][T10243] Call Trace: [ 1114.872753][T10243] [ 1114.872762][T10243] __dump_stack+0x1d/0x30 [ 1114.872786][T10243] dump_stack_lvl+0x95/0xd0 [ 1114.872898][T10243] dump_stack+0x15/0x1b [ 1114.872917][T10243] should_fail_ex+0x263/0x280 [ 1114.872948][T10243] should_failslab+0x8c/0xb0 [ 1114.872995][T10243] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1114.873109][T10243] ? do_getname_kernel+0x53/0x190 [ 1114.873130][T10243] ? should_fail_ex+0xd9/0x280 [ 1114.873182][T10243] do_getname_kernel+0x53/0x190 [ 1114.873211][T10243] kern_path+0x23/0xf0 [ 1114.873241][T10243] bpf_uprobe_multi_link_attach+0x234/0x990 [ 1114.873342][T10243] ? __rcu_read_unlock+0x4e/0x70 [ 1114.873436][T10243] ? __fget_files+0x184/0x1c0 [ 1114.873469][T10243] link_create+0x639/0x690 [ 1114.873510][T10243] __sys_bpf+0x35d/0x7e0 [ 1114.873589][T10243] __x64_sys_bpf+0x41/0x50 [ 1114.873619][T10243] x64_sys_call+0x10cb/0x3020 [ 1114.873652][T10243] do_syscall_64+0x12c/0x3b0 [ 1114.873699][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.873775][T10243] RIP: 0033:0x7f3434c4ce59 [ 1114.873824][T10243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.873924][T10243] RSP: 002b:00007f343369f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.874021][T10243] RAX: ffffffffffffffda RBX: 00007f3434ec5fa0 RCX: 00007f3434c4ce59 [ 1114.874038][T10243] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 1114.874053][T10243] RBP: 00007f343369f090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.874068][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.874083][T10243] R13: 00007f3434ec6038 R14: 00007f3434ec5fa0 R15: 00007ffe19852a58 [ 1114.874117][T10243] [ 1114.922146][ T28] audit: type=1326 audit(1114.538:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.117350][T10247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11194'. [ 1115.129129][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11195'. [ 1115.141696][T10247] 9p: Bad value for 'rfdno' [ 1115.185529][ T28] audit: type=1326 audit(1114.538:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.211025][ T28] audit: type=1326 audit(1114.538:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.236835][ T28] audit: type=1326 audit(1114.538:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.262439][ T28] audit: type=1326 audit(1114.538:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.288582][ T28] audit: type=1326 audit(1114.558:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.299923][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11196'. [ 1115.315546][ T28] audit: type=1326 audit(1114.568:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1115.379401][ T28] audit: type=1326 audit(1114.738:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.1.11189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce5f2ce59 code=0x7ffc0000 [ 1116.810686][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11205'. [ 1117.031746][T10295] netlink: 'syz.1.11205': attribute type 1 has an invalid length. [ 1117.039793][T10295] netlink: 'syz.1.11205': attribute type 2 has an invalid length. [ 1117.363794][T10309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=10309 comm=syz.0.11207 [ 1117.511825][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11210'. [ 1119.779913][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1119.779988][ T28] audit: type=1400 audit(1119.718:3915): avc: denied { mount } for pid=10440 comm="syz.1.11223" name="/" dev="ramfs" ino=129905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1120.166200][ T28] audit: type=1400 audit(1120.118:3916): avc: denied { create } for pid=10440 comm="syz.1.11223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1120.273137][ T28] audit: type=1400 audit(1120.118:3917): avc: denied { write } for pid=10440 comm="syz.1.11223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1120.926706][ T28] audit: type=1400 audit(1120.888:3918): avc: denied { mounton } for pid=10448 comm="syz.7.11227" path="/file0" dev="autofs" ino=131285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1121.125942][ T28] audit: type=1400 audit(1120.908:3919): avc: denied { remount } for pid=10448 comm="syz.7.11227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1121.976920][ T28] audit: type=1400 audit(1121.918:3920): avc: denied { map } for pid=10475 comm="syz.8.11231" path="socket:[129915]" dev="sockfs" ino=129915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1122.198296][ T28] audit: type=1400 audit(1122.138:3921): avc: denied { write } for pid=10478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.269539][ T28] audit: type=1400 audit(1122.198:3922): avc: denied { write } for pid=10497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.362965][ T28] audit: type=1326 audit(1122.278:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.11236" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1122.388155][ T28] audit: type=1326 audit(1122.278:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.11236" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0750ece59 code=0x7ffc0000 [ 1122.616160][T10511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10511 comm=syz.1.11239 [ 1125.107737][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 1125.107756][ T28] audit: type=1400 audit(1125.068:4023): avc: denied { write } for pid=10514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.987214][ T28] audit: type=1400 audit(1125.898:4024): avc: denied { write } for pid=10544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.220874][ T28] audit: type=1400 audit(1126.178:4025): avc: denied { create } for pid=10553 comm="syz.1.11247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1126.254989][ T28] audit: type=1400 audit(1126.178:4026): avc: denied { connect } for pid=10551 comm="syz.0.11246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1126.479541][ T28] audit: type=1400 audit(1126.398:4027): avc: denied { write } for pid=10557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.520390][ T28] audit: type=1400 audit(1126.398:4028): avc: denied { create } for pid=10582 comm="syz.7.11253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1126.603851][ T28] audit: type=1400 audit(1126.398:4029): avc: denied { read } for pid=10582 comm="syz.7.11253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1126.623112][ T28] audit: type=1400 audit(1126.398:4030): avc: denied { connect } for pid=10582 comm="syz.7.11253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1126.642588][ T28] audit: type=1400 audit(1126.518:4031): avc: denied { write } for pid=10590 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.768288][T10592] ================================================================== [ 1126.776763][T10592] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 1126.784065][T10592] [ 1126.786387][T10592] write to 0xffffc9000236fe20 of 8 bytes by task 10583 on cpu 1: [ 1126.794098][T10592] shmem_fallocate+0x724/0x920 [ 1126.798887][T10592] vfs_fallocate+0x3b6/0x400 [ 1126.803487][T10592] __x64_sys_fallocate+0x7a/0xd0 [ 1126.808453][T10592] x64_sys_call+0x298e/0x3020 [ 1126.813146][T10592] do_syscall_64+0x12c/0x3b0 [ 1126.817764][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.823668][T10592] [ 1126.826004][T10592] read to 0xffffc9000236fe20 of 8 bytes by task 10592 on cpu 0: [ 1126.833638][T10592] shmem_writeout+0x2c1/0x920 [ 1126.838312][T10592] shrink_folio_list+0x1f52/0x2840 [ 1126.843422][T10592] evict_folios+0x285f/0x3370 [ 1126.848106][T10592] try_to_shrink_lruvec+0x858/0xc20 [ 1126.853310][T10592] shrink_lruvec+0x256/0x1bc0 [ 1126.857991][T10592] shrink_node+0x697/0x20a0 [ 1126.862504][T10592] do_try_to_free_pages+0x408/0xc90 [ 1126.867702][T10592] try_to_free_mem_cgroup_pages+0x201/0x420 [ 1126.873600][T10592] try_charge_memcg+0x373/0xa10 [ 1126.878455][T10592] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1126.884001][T10592] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1126.889824][T10592] alloc_pages_mpol+0xb3/0x260 [ 1126.894595][T10592] alloc_pages_noprof+0x8f/0x140 [ 1126.899533][T10592] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1126.905526][T10592] __kvmalloc_node_noprof+0x3d4/0x640 [ 1126.910908][T10592] futex_hash_allocate+0x190/0x9a0 [ 1126.916058][T10592] futex_hash_prctl+0xd8/0xf0 [ 1126.920763][T10592] __se_sys_prctl+0x4f4/0x1400 [ 1126.925531][T10592] __x64_sys_prctl+0x67/0x80 [ 1126.930152][T10592] x64_sys_call+0x2533/0x3020 [ 1126.934834][T10592] do_syscall_64+0x12c/0x3b0 [ 1126.939431][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.945320][T10592] [ 1126.947639][T10592] value changed: 0x0000000000001e75 -> 0x0000000000001e76 [ 1126.954736][T10592] [ 1126.957080][T10592] Reported by Kernel Concurrency Sanitizer on: [ 1126.963228][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.0.11254 Tainted: G W syzkaller #0 PREEMPT(full) [ 1126.974268][T10592] Tainted: [W]=WARN [ 1126.978081][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.988136][T10592] ================================================================== [ 1127.094968][ T28] audit: type=1326 audit(1126.998:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10595 comm="syz.7.11255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c311ce59 code=0x0 [ 1130.222433][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1130.222488][ T28] audit: type=1400 audit(1130.168:4058): avc: denied { write } for pid=10784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.268518][ T28] audit: type=1400 audit(1130.228:4059): avc: denied { write } for pid=10795 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.410156][ T28] audit: type=1400 audit(1130.338:4060): avc: denied { write } for pid=10799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.441456][ T28] audit: type=1400 audit(1130.408:4061): avc: denied { write } for pid=10810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.561763][ T28] audit: type=1400 audit(1130.508:4062): avc: denied { write } for pid=10813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.604702][ T28] audit: type=1400 audit(1130.558:4063): avc: denied { write } for pid=10824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.760347][ T28] audit: type=1400 audit(1130.728:4064): avc: denied { write } for pid=10828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.791718][ T28] audit: type=1400 audit(1130.728:4065): avc: denied { write } for pid=10839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.951854][ T28] audit: type=1400 audit(1130.898:4066): avc: denied { write } for pid=10843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.983445][ T28] audit: type=1400 audit(1130.898:4067): avc: denied { write } for pid=10854 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.319349][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 1135.319366][ T28] audit: type=1400 audit(1135.278:4122): avc: denied { write } for pid=11263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.356016][ T28] audit: type=1400 audit(1135.278:4123): avc: denied { write } for pid=11274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.511580][ T28] audit: type=1400 audit(1135.448:4124): avc: denied { write } for pid=11278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.553153][ T28] audit: type=1400 audit(1135.508:4125): avc: denied { write } for pid=11289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.708881][ T28] audit: type=1400 audit(1135.678:4126): avc: denied { write } for pid=11293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.740468][ T28] audit: type=1400 audit(1135.678:4127): avc: denied { write } for pid=11304 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.899735][ T28] audit: type=1400 audit(1135.848:4128): avc: denied { write } for pid=11308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.931397][ T28] audit: type=1400 audit(1135.848:4129): avc: denied { write } for pid=11319 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.080137][ T28] audit: type=1400 audit(1136.018:4130): avc: denied { write } for pid=11323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.123348][ T28] audit: type=1400 audit(1136.078:4131): avc: denied { write } for pid=11334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1