last executing test programs: 2m16.361206407s ago: executing program 2 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000180)=0x7fe6) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r5, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2m16.139838522s ago: executing program 2 (id=153): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 2m16.071429534s ago: executing program 2 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m15.980056836s ago: executing program 2 (id=157): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000100)='AQAA8\x9edB\x0f\xffp\xca\x8eN\xbf\xa7\xeb\x9eAAA=AAAAA\x00'/41, 0x0) 2m15.979751566s ago: executing program 2 (id=158): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 2m15.971649716s ago: executing program 2 (id=160): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0xfffd, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m0.933411106s ago: executing program 32 (id=160): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0xfffd, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.193029977s ago: executing program 0 (id=3137): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2.04712847s ago: executing program 1 (id=3142): r0 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/227, 0xe3}], 0x6, &(0x7f0000000600)=""/139, 0x8b}, 0x10002) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x480602, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x891e, &(0x7f0000000740)={'sit0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/vlan/vlan1\x00') r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x5, 0x4, {{0x1f, 0x4, 0x1, 0x5, 0x7c, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0x44, 0xf2, 0x3, 0x4, [{@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10}, {@multicast2, 0x68}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@private=0xa010101, 0x1}, {@multicast1, 0x800}, {@broadcast, 0x1}, {@remote, 0x455}]}, @ssrr={0x89, 0x23, 0x67, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000940)={'wg0\x00', 0x0}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x14) (rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a00)={@rand_addr, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x118, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={r3, 0x20, &(0x7f0000000e40)={&(0x7f0000000dc0)=""/41, 0x29, 0x0, &(0x7f0000000e00)=""/64, 0x40}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1e, 0xc, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x2, 0x3, 0xa, 0x80, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}]}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x1e, &(0x7f0000000d00)=""/30, 0x40f00, 0x0, '\x00', r6, @fallback, r3, 0x8, &(0x7f0000000d40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x7, 0x10}, 0x10, r9, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000ec0)=[{0x4, 0x3, 0x1, 0x3}, {0x0, 0x2, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x5}, {0x1, 0x1, 0xe, 0xa}, {0x0, 0x2, 0x4, 0x5}, {0x5, 0x2, 0x3, 0xa}], 0x10, 0xfffffffd}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001080)={r3, &(0x7f0000001000)="94f8f4e797bff5f7dd7a2426aafb9d4bf42cc6861efca372ace998af9f995dde0ea9a6041c97ca34f141400777e910080493999abe5366e9aac8", &(0x7f0000001040)=@udp=r3, 0x1}, 0x20) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000001700)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x150, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x50, 0x6, "505df4a9d9ebb1eedb99bf7f5717d4b9c825438239e5bd4a4cba1ee5c7b439763b7059e0c758b874f20ffc4d22f9193c46475fa930a17e3a7b75ba3169c37b935282f872eb1aea1d6627b113"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd7, 0x6, "cc6fc654e19612668b8d26d218bff9b3213a2eed80a01fe9f6b101754c2cb09b0ae7b3d865cfa5df8d5c5e819daa967edabe935f413c534ef6567c03f5b31038bf3ba60b7d9e460202aa916d0ed50598ebb23879a3e9aafd7b39154db3d3f49935aa12e0501794b8c04b0e290fbd49a13bb0724a4c19654ecd6aceeb9a9612eec8ccf4c55062f5e66a654368a9e8e04efae56cb03763de32564ca0031bd7448ae212fdc10c885aa5973b31221de9a75ea2085c79821d38fb0dd82389f942b2bc92c101a438149172f2db26f8a5e536485aa3bf"}]}, @NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1a}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1a}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x27}, @NFTA_LOG_LEVEL={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x174, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "937c75e53cb3fa6da68d3ca0bc04050a32dc7ee3d0a46a1cea43ed791f474cb6263a4e3e18185d8a19faab065fccdc4e506fbc4d246628ae124dd68cd56c8a4a7fa3445bbf6acfe212e27d179dadb1ad2c15d8a49ff4dde10e05bd6e22f0387fcb400161deae7fb94ac7b12262b0f2ad6b88c98836b4f993e12e72cebe70e9c6ef1c4a0f1f57f3e3be7aa215d13665b5c1f70135555dac440da2a3310536d8a9bf357fd35d198d4f0e024cc1ff1184ed609b8d43b261f625439a484ba7052da52e5c59f4616e09b2ad95e0edae5e5efdcaf249f6ac2d6b3ac4b5192f6d2c4dd947a24b910b62e03c78aafd8cf48d97f771e640"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x28, 0x8, "c3a8bc000d724a959df969f50365290b43870ffdf1c6e6f4156da6043ceacf7887c66012"}]}, @NFT_MSG_DELSET={0x10c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xac, 0xd, 0x1, 0x0, "faf2574f1bd361bbdd4730c6990e3c6bd01ded343de281dfafd3a2029acec871a6b1bd9044918c23a61c44f6c0ee833eed8db3ec16c2155eaab36107009c444d7a42c6c49eff4022ed81ebaa5f685d5e3d05030dfe9a2f081bad1a627f6f862053ee66568b5d814d92e7923f4bcd4a46a9a7b41905f521151e6bbe747acffe6ab9c0d251eadd9d519d5d941c6df305060a96b56ad356c6023c08ac50f903d4ad3061e02347082a61"}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x594}, 0x1, 0x0, 0x0, 0x4000}, 0x24000120) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000001740)={0x1, 'pimreg1\x00', {}, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000017c0)=0x0) r12 = syz_open_procfs(r11, &(0x7f0000001800)='stat\x00') (async, rerun: 64) perf_event_open(&(0x7f0000001880)={0x4, 0x80, 0x88, 0x7, 0xfa, 0xfe, 0x0, 0x9, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000001840), 0x2}, 0x11122, 0x401, 0x0, 0x5, 0xfffffffffffffffd, 0xfffffff9, 0x3, 0x0, 0x5, 0x0, 0xffffffff}, r11, 0xa, 0xffffffffffffffff, 0x4) (rerun: 64) setsockopt$SO_J1939_SEND_PRIO(r12, 0x6b, 0x3, &(0x7f0000001900)=0x6, 0x4) (async) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001980)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000001940), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @local, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'veth1_macvtap\x00', {}, {}, 0x6c, 0x3, 0x1, 0x21}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x470d, 0x2, 0x0, 0x1, 0x5, 0x0, 0x5f, 0x4ed]}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xa8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) io_uring_enter(r3, 0xc78, 0xc0b3, 0x51, &(0x7f0000001cc0)={[0x8]}, 0x8) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r12) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, r14, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001e80), 0x121000, 0x0) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000001ec0), 0x4) 1.975846503s ago: executing program 1 (id=3143): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffd}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="83040500000000006000128008000100677265005400028006000e000100000006000f000e0000000500160001000000060011004e230000060003008000000006000f000000000005001600010000000800040001"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0x6, 0x800}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000100101000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000500)="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") 1.954266013s ago: executing program 1 (id=3144): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.911572554s ago: executing program 1 (id=3147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204a400ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) getpgid(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x91, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x100000, 0x653f, 0xffffffff, 0x5, 0x0, 0x0, 0xa1c, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000004c0)=0x9, 0x4) (async) mount$9p_tcp(0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x2, 0x100000000}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x3c4c, &(0x7f0000000bc0)={0x0, 0xcb44, 0x40000, 0x0, 0x26c}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x1ff, r3, 0x2e, {0x5, 0x9}, 0x2}, 0x1) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040054, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) (async) syz_emit_ethernet(0x8e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a816008100300086dd6012000800503a00fe8000000000000000000000000000bbfe80000000000000000000000000600000000000110100000000000000000000000000000000fc0200000000000000000000000000002b00000000000000053a000100000000fb36eeca6fad50b375a22a584d16ca5500"/142], 0x0) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1.827865276s ago: executing program 1 (id=3148): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000100)={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x53) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc0, &(0x7f0000000440)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 1.819773056s ago: executing program 4 (id=3149): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x59, 0x8f, 0x1}, 0x28) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0xffffffffffffff44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000080)) 1.797345437s ago: executing program 4 (id=3150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000002b0000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c"], 0x23c}}, 0x0) 1.765569287s ago: executing program 4 (id=3151): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x3) 1.762508197s ago: executing program 4 (id=3152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOPEN(r1, &(0x7f0000000380)={0x18, 0xd, 0x2, {{0x1, 0x1, 0x8}}}, 0x18) sendmsg$nl_xfrm(r0, 0x0, 0x40) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1800000013000100000000000000000008"], 0x18}], 0x1, 0x0, 0x0, 0x2004c044}, 0x40054) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000010c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030e000000000700002000000004000900a8000000708a23820e51543e7cbd6ac7bdb85dfd8accad45530000000300060000000000020010020a010102000000000000000002000100000000000000060d00000000030005006c00000002004e23ac14141e00"], 0x70}, 0x1, 0x7}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r8 = fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x1, 0x86) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010905bd700080000000021810000000fd010004000008000100ac141400080005000a0101021800168014000309000000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b83000c1100fe8000000000001800000000000000bbfe8000000000000000000000000000aa00004e22000c907803000000"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d61637674617000040002800800", @ANYRES32, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x46180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x10, 0x3}, 0x800, 0x2, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2200000, &(0x7f00000003c0)={[{@bsdgroups}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") 1.64481819s ago: executing program 4 (id=3153): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000180)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0xfffffff8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008046}, 0x20040844) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a010000000000000001000100000009000100"], 0x110}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140), 0x0, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$join(0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x9902) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x815) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) pipe2(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0x7, 0x3, 0x9, 0xe9}, 0x8) rt_sigsuspend(0x0, 0x0) 1.64375223s ago: executing program 0 (id=3155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd2a, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) personality(0x5400004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010210000502000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, 0x0, &(0x7f0000000180)=""/177}, 0x20) 1.559265033s ago: executing program 0 (id=3156): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='trylock io+me'], 0xf) 1.558704862s ago: executing program 3 (id=3157): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.558302173s ago: executing program 0 (id=3158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54811}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.488418514s ago: executing program 3 (id=3160): socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) read$msr(r0, &(0x7f0000000340)=""/238, 0xee) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000009c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xfff3}, {0x800a, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c8f0}, 0x4890) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) recvmsg(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/5, 0x5}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003340)=""/94, 0x5e}, 0x40000000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 1.427851756s ago: executing program 5 (id=3161): syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) r0 = getpid() (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, 0x0, 0x0) (async) chown(0x0, 0x0, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x3, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e0000003400028006000300300000001400060000000000000000000000ffffac141427140007"], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) 1.366560497s ago: executing program 5 (id=3162): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, 0x0, 0xe0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0xf00}, 0x0) 1.304665389s ago: executing program 5 (id=3163): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x3) 1.27166064s ago: executing program 5 (id=3164): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x7ffffffe, 0x0, 0x0, 0x40d4}, 0x48800) 1.25637986s ago: executing program 3 (id=3165): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x81}, 0x51}, 0x10) (async) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x81}, 0x51}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000080)='./file0\x00', 0xfb) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x103000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xe5) r2 = socket(0x18, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0xe1, 0x3, 0x1, 0x0, 0x7, 0x400, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffff001, 0x7fff}, 0x100, 0x4, 0x9d, 0x1, 0x2000000000000000, 0xaa, 0xfff, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r1, 0x1) (async) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0xe1, 0x3, 0x1, 0x0, 0x7, 0x400, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffff001, 0x7fff}, 0x100, 0x4, 0x9d, 0x1, 0x2000000000000000, 0xaa, 0xfff, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r1, 0x1) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000280)=0x1, 0x4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000340)={r5, 0x1, 0x6}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000340)={r5, 0x1, 0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_newneigh={0x68, 0x1c, 0x300, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x2, 0x71, 0x5}, [@NDA_FLAGS_EXT={0x8}, @NDA_MASTER={0x8}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0xa}, @NDA_CACHEINFO={0x14, 0x3, {0x10, 0x9, 0x9, 0x6}}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_PROBES={0x8, 0x4, 0xdba}]}, 0x68}, 0x1, 0x0, 0x0, 0x8881}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x5ae808a12ae0ec95}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@mpls_getroute={0xa0, 0x1a, 0x0, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0x4}, {0x3, 0x0, 0x1}, {0x2}, {}, {0x1, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x7bd, 0x0, 0x1}, {0x6}, {0x7eb0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x9}, {0x3}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8000}, {0x7e, 0x0, 0x1}, {0x80}, {0x6}, {0x8294, 0x0, 0x1}, {0x10}, {}, {0x5, 0x0, 0x1}, {0x5}, {0xd}, {0x5, 0x0, 0x1}, {0x800}, {0xf, 0x0, 0x1}, {}, {0xa2}, {0xff000, 0x0, 0x1}, {0x300}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x3f7, 0x4, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x8041) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @private=0xa010101}], 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000880)=0xc, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000880)=0xc, 0x8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000a00)={@llc={0x1a, 0x28a, 0x2a, 0x39, 0x0, 0x2, @local}, {&(0x7f00000008c0)=""/232, 0xe8}, &(0x7f00000009c0), 0x40}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000a00)={@llc={0x1a, 0x28a, 0x2a, 0x39, 0x0, 0x2, @local}, {&(0x7f00000008c0)=""/232, 0xe8}, &(0x7f00000009c0), 0x40}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000b00)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'ip6tnl0\x00'}) write$UHID_CREATE(r4, &(0x7f0000000c00)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000b80)=""/87, 0x57, 0x2, 0xffff, 0x3ff, 0x6, 0x8}}, 0x120) (async) write$UHID_CREATE(r4, &(0x7f0000000c00)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000b80)=""/87, 0x57, 0x2, 0xffff, 0x3ff, 0x6, 0x8}}, 0x120) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}]}, 0x40}}, 0x50) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}]}, 0x40}}, 0x50) 1.191817371s ago: executing program 4 (id=3166): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) move_pages(r1, 0x6, &(0x7f00000001c0)=[&(0x7f0000920000/0x2000)=nil, &(0x7f00005de000/0x2000)=nil, &(0x7f00000cd000/0xc000)=nil, &(0x7f0000585000/0x2000)=nil, &(0x7f0000380000/0x4000)=nil, &(0x7f0000955000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x4, 0xee02, 0xff, 0xfffffff7, 0x1fffc000], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$inet6(0xa, 0x3, 0x3c) 1.190971802s ago: executing program 5 (id=3167): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffff9, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}]}, 0x1c}, 0x1, 0x620b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/igmp6\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="c401028040000100240001006c625f74785f6861ff0300000000000072745f6d617070696e67000000000000050003000300000008000400250f1f1f2747f15ed0a32637be7a7d76ca1d86b276cf401fd622f895e49613aa1ecd5eb40921d1849a934d3c1452e57cee8a7b4f3b3d25", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x8850}, 0x1) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x0, 0x4, 0x3, 0x39, 0x0, 0x6, 0x20001, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0x10001}, 0x140, 0x8000000000000000, 0xd7, 0x1, 0x8, 0x7fffffff, 0xfffe, 0x0, 0x7, 0x0, 0x7f}, r3, 0x8, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='bRequestType=0 bRequest=', 0x18) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) fsmount(0xffffffffffffffff, 0x0, 0x8) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x200, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f00000001c0), 0x5005) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xae, 0x7e, 0x0, 0x0, 0x0, 0x1ff, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={&(0x7f0000000640), 0xc}, 0x11ece8, 0x1225, 0x0, 0x9, 0x8, 0x20005, 0x8ce, 0x0, 0xb9ce, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="70000000020603000000000000000000070000000500010006000000050005000200000005000400000000000900020173797a310000000016000300686173683a6e65742c706f72742c6e65740000005edce21e4e9aa984167db49f97b9453c60cea0786c1bb53d57c1156f4af30f36beff7565ceb7bae760da87bf2c14845c12bf8cdf9a2f155479290d"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) 1.190684971s ago: executing program 3 (id=3168): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) (fail_nth: 12) 1.166639302s ago: executing program 3 (id=3169): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x392}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x45042, 0x30) sendfile(r6, r6, 0x0, 0x252c000000000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884) 1.038057145s ago: executing program 3 (id=3170): r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r3, &(0x7f0000000840)=@target={'target ', {'PCI:', '0', ':', '10', ':', '2', '.', '5'}}, 0x14) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8400, &(0x7f0000000840)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@overriderock}, {@nocompress}, {@mode={'mode', 0x3d, 0x10011}}, {@session={'session', 0x3d, 0x35}}, {@map_normal}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r4, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r6, &(0x7f0000000000)=0x7, r6, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1) 1.024977115s ago: executing program 5 (id=3171): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x3}}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000900)=ANY=[], 0x637) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='mem', 0x3) 535.859287ms ago: executing program 0 (id=3172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000002b0000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00"], 0x23c}}, 0x0) 412.84715ms ago: executing program 1 (id=3173): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100037040000ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff0effff1c0012800e00010069703665727370616e"], 0x3c}}, 0x0) 0s ago: executing program 0 (id=3174): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x3) kernel console output (not intermixed with test programs): t: size too large, truncated to 1048576 [ 152.716343][T10747] tipc: Started in network mode [ 152.724232][T10747] tipc: Node identity c685733493ba, cluster identity 4711 [ 152.744038][T10740] xt_hashlimit: size too large, truncated to 1048576 [ 152.749587][T10747] tipc: Enabled bearer , priority 0 [ 152.783885][T10746] tipc: Disabling bearer [ 152.894434][T10750] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 153.180839][T10756] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.238861][T10760] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2705'. [ 153.240924][ T28] audit: type=1400 audit(1785638759.145:526): avc: denied { audit_read } for pid=10755 comm="syz.5.2703" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.325097][T10756] netlink: 3084 bytes leftover after parsing attributes in process `syz.5.2703'. [ 153.330362][ T28] audit: type=1400 audit(1785638759.165:527): avc: denied { create } for pid=10759 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 153.358562][T10756] netlink: 'syz.5.2703': attribute type 1 has an invalid length. [ 153.376489][T10763] loop0: detected capacity change from 0 to 1024 [ 153.396115][ T28] audit: type=1400 audit(1785638759.165:528): avc: denied { sys_admin } for pid=10759 comm="syz.0.2705" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 153.430563][T10763] EXT4-fs: Ignoring removed nobh option [ 153.439056][T10756] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2703'. [ 153.467591][T10764] loop5: detected capacity change from 0 to 1024 [ 153.471048][T10763] EXT4-fs: Ignoring removed bh option [ 153.503075][T10764] EXT4-fs: Ignoring removed bh option [ 153.520120][T10763] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 153.533280][T10764] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.567398][T10764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 153.583432][T10764] System zones: 0-1, 3-12 [ 153.609655][T10764] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.2703: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.647426][T10763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 153.658787][T10764] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.658950][T10764] EXT4-fs (loop5): Remounting filesystem read-only [ 153.668229][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 153.668249][ C0] EXT4-fs (loop5): initial error at time 1785638759: ext4_map_blocks:833: inode 3: block 1 [ 153.668285][ C0] EXT4-fs (loop5): last error at time 1785638759: ext4_map_blocks:833: inode 3: block 1 [ 153.680946][T10763] System zones: [ 153.701757][T10764] Quota error (device loop5): write_blk: dquota write failed [ 153.724341][T10764] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 153.759872][T10764] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 153.776103][T10763] 0-1, 3-12 [ 153.802679][T10764] EXT4-fs (loop5): 1 orphan inode deleted [ 153.810669][T10763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.814160][T10754] loop4: detected capacity change from 0 to 2048 [ 153.824685][T10764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.917274][T10754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.962221][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.001150][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.021612][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.079975][T10773] loop4: detected capacity change from 0 to 256 [ 154.096453][T10774] xt_hashlimit: size too large, truncated to 1048576 [ 154.573719][T10788] tipc: Enabled bearer , priority 0 [ 154.600500][T10786] tipc: Disabling bearer [ 154.740083][T10796] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 154.766144][T10796] bond1: entered promiscuous mode [ 154.780275][T10796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.819335][T10800] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.831804][T10800] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.842222][T10800] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 154.852664][T10800] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.889448][T10796] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.937549][T10796] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.976030][T10796] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 155.135958][T10802] syzkaller0: entered promiscuous mode [ 155.149164][T10802] syzkaller0: entered allmulticast mode [ 155.274870][T10807] syzkaller0: entered promiscuous mode [ 155.286316][T10807] syzkaller0: entered allmulticast mode [ 155.430912][T10811] xt_hashlimit: size too large, truncated to 1048576 [ 155.489135][T10812] xt_TCPMSS: Only works on TCP SYN packets [ 155.575685][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2721'. [ 155.819506][T10817] loop0: detected capacity change from 0 to 512 [ 155.835069][T10817] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.918003][T10817] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.937953][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 155.944938][ C0] EXT4-fs (loop0): initial error at time 1785638761: ext4_mb_generate_buddy:1317 [ 155.954108][ C0] EXT4-fs (loop0): last error at time 1785638761: ext4_mb_generate_buddy:1317 [ 155.987994][T10817] EXT4-fs (loop0): 1 truncate cleaned up [ 155.994275][T10817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.041805][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 156.041819][ T28] audit: type=1400 audit(1785638761.945:531): avc: denied { write } for pid=10816 comm="syz.0.2722" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.075622][T10817] UHID_CREATE from different security context by process 41 (syz.0.2722), this is not allowed. [ 156.079062][T10824] loop3: detected capacity change from 0 to 256 [ 156.126314][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.397598][T10838] syzkaller0: entered promiscuous mode [ 156.412566][T10838] syzkaller0: entered allmulticast mode [ 156.474666][T10842] syzkaller0: entered promiscuous mode [ 156.508234][T10842] syzkaller0: entered allmulticast mode [ 156.545935][ T28] audit: type=1400 audit(1785638762.445:532): avc: denied { create } for pid=10845 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.581463][ T28] audit: type=1400 audit(1785638762.445:533): avc: denied { getopt } for pid=10845 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.613926][T10828] program syz.0.2726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.629126][T10849] loop5: detected capacity change from 0 to 1024 [ 156.641199][T10828] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 156.669590][T10849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.683977][ T28] audit: type=1400 audit(1785638762.585:534): avc: denied { mount } for pid=10827 comm="syz.0.2726" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.686311][T10849] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.730697][T10849] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 156.738980][T10849] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.745727][T10849] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2721: Invalid inode table block 0 in block_group 0 [ 156.771597][T10849] fserror_report: 12 callbacks suppressed [ 156.771693][T10849] loop5: lost filesystem error report for type 5 error -117 [ 156.785214][T10857] loop3: detected capacity change from 0 to 1764 [ 156.788726][T10849] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 156.798930][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 156.798949][ C0] EXT4-fs (loop5): initial error at time 1785638762: __ext4_get_inode_loc:4886 [ 156.798968][ C0] EXT4-fs (loop5): last error at time 1785638762: __ext4_get_inode_loc:4886 [ 156.858826][ T28] audit: type=1400 audit(1785638762.745:535): avc: denied { mount } for pid=10856 comm="syz.3.2735" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 156.906133][T10849] loop5: lost filesystem error report for type 5 error -117 [ 156.906648][ T28] audit: type=1400 audit(1785638762.805:536): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 156.919231][T10849] EXT4-fs error (device loop5): ext4_quota_write:7430: inode #3: comm syz.5.2721: mark_inode_dirty error [ 156.961005][ T28] audit: type=1400 audit(1785638762.865:537): avc: denied { unmount } for pid=10476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.978885][T10849] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.983717][T10849] Quota error (device loop5): write_blk: dquota write failed [ 157.012974][T10864] 9p: Bad value for 'wfdno' [ 157.014422][T10849] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 157.017745][T10864] netlink: 'syz.0.2738': attribute type 1 has an invalid length. [ 157.042097][T10849] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2721: Failed to acquire dquot type 0 [ 157.047041][T10864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2738'. [ 157.068519][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.069907][T10849] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2721: Invalid inode table block 0 in block_group 0 [ 157.072957][ T28] audit: type=1400 audit(1785638762.975:538): avc: denied { ioctl } for pid=10863 comm="syz.0.2738" path="socket:[32252]" dev="sockfs" ino=32252 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.085325][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.131574][T10849] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.143224][T10866] xt_hashlimit: size too large, truncated to 1048576 [ 157.159618][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.159719][T10849] EXT4-fs error (device loop5): ext4_ext_truncate:4557: inode #15: comm syz.5.2721: mark_inode_dirty error [ 157.188066][T10849] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.188228][T10849] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2721: Invalid inode table block 0 in block_group 0 [ 157.244455][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.244618][T10849] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.277474][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.277623][T10849] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 157.297244][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.306779][T10849] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2721: Invalid inode table block 0 in block_group 0 [ 157.330733][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.330827][T10849] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.348340][T10868] FAULT_INJECTION: forcing a failure. [ 157.348340][T10868] name failslab, interval 1, probability 0, space 0, times 0 [ 157.361063][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.3.2736 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.361095][T10868] Tainted: [W]=WARN [ 157.361103][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.361114][T10868] Call Trace: [ 157.361120][T10868] [ 157.361126][T10868] __dump_stack+0x1d/0x30 [ 157.361160][T10868] dump_stack_lvl+0x95/0xd0 [ 157.361185][T10868] dump_stack+0x15/0x1b [ 157.361201][T10868] should_fail_ex+0x25e/0x270 [ 157.361229][T10868] should_failslab+0x8c/0xb0 [ 157.361252][T10868] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 157.361310][T10868] ? __alloc_skb+0x2db/0x6f0 [ 157.361359][T10868] ? __alloc_skb+0x2db/0x6f0 [ 157.361382][T10868] __alloc_skb+0x2db/0x6f0 [ 157.361437][T10868] ? __alloc_skb+0x205/0x6f0 [ 157.361485][T10868] netlink_alloc_large_skb+0xbf/0xf0 [ 157.361559][T10868] netlink_sendmsg+0x40c/0x6f0 [ 157.361588][T10868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.361615][T10868] ____sys_sendmsg+0x532/0x580 [ 157.361638][T10868] ___sys_sendmsg+0x195/0x1e0 [ 157.361714][T10868] __x64_sys_sendmsg+0xd4/0x160 [ 157.361737][T10868] x64_sys_call+0x194c/0x3020 [ 157.361774][T10868] do_syscall_64+0x136/0x3c0 [ 157.361802][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.361904][T10868] RIP: 0033:0x7f8201e7e019 [ 157.361919][T10868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.362012][T10868] RSP: 002b:00007f82008b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.362031][T10868] RAX: ffffffffffffffda RBX: 00007f8202106090 RCX: 00007f8201e7e019 [ 157.362044][T10868] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 157.362055][T10868] RBP: 00007f82008b6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.362066][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.362077][T10868] R13: 00007f8202106128 R14: 00007f8202106090 R15: 00007ffc9b20fc68 [ 157.362130][T10868] [ 157.362249][T10849] loop5: lost filesystem error report for type 5 error -117 [ 157.419689][T10872] syzkaller0: entered promiscuous mode [ 157.481722][T10849] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.2721: mark_inode_dirty error [ 157.514728][T10875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2742'. [ 157.519637][T10849] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.595962][T10849] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 157.597034][T10877] xt_hashlimit: size too large, truncated to 1048576 [ 157.606237][T10872] syzkaller0: entered allmulticast mode [ 157.627065][T10849] EXT4-fs (loop5): 1 truncate cleaned up [ 157.633432][T10849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.645872][T10881] xt_TCPMSS: Only works on TCP SYN packets [ 157.684551][T10880] syzkaller0: entered promiscuous mode [ 157.701699][T10880] syzkaller0: entered allmulticast mode [ 157.774400][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.910969][ T3691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.968615][ T3691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.029238][T10903] loop3: detected capacity change from 0 to 256 [ 158.060462][ T3691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.184349][T10912] loop0: detected capacity change from 0 to 1024 [ 158.195002][T10912] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.216695][T10912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.231780][T10912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.308945][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.316101][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.323344][T10887] bridge_slave_0: entered allmulticast mode [ 158.329936][T10887] bridge_slave_0: entered promiscuous mode [ 158.336750][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.343918][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.351502][T10887] bridge_slave_1: entered allmulticast mode [ 158.357982][T10887] bridge_slave_1: entered promiscuous mode [ 158.383045][T10931] loop0: detected capacity change from 0 to 256 [ 158.452546][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.499686][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.527898][T10887] team0: Port device team_slave_0 added [ 158.536343][T10887] team0: Port device team_slave_1 added [ 158.544575][ T3691] bridge_slave_1: left allmulticast mode [ 158.550547][ T3691] bridge_slave_1: left promiscuous mode [ 158.556421][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.565625][ T3691] bridge_slave_0: left allmulticast mode [ 158.571588][ T3691] bridge_slave_0: left promiscuous mode [ 158.581139][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.720427][T10944] xt_hashlimit: size too large, truncated to 1048576 [ 158.735367][ T3691]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.760897][ T3691]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.784416][ T3691]  (unregistering): Released all slaves [ 158.817189][T10951] loop3: detected capacity change from 0 to 512 [ 158.860011][T10951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.879815][T10951] ext4 filesystem being mounted at /542/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.910081][T10949] tipc: Enabled bearer , priority 0 [ 158.928094][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.935244][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.961897][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.972797][T10952] syzkaller0: entered promiscuous mode [ 158.978911][T10952] syzkaller0: entered allmulticast mode [ 158.995980][ T3691] tipc: Disabling bearer [ 159.010511][ T3691] tipc: Left network mode [ 159.018398][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.037446][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.065326][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.106050][T10945] tipc: Resetting bearer [ 159.116593][ T3691] hsr_slave_0: left promiscuous mode [ 159.139006][ T3691] hsr_slave_1: left promiscuous mode [ 159.154290][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.164145][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.171428][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.182529][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.199491][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.218411][ T3691] veth1_macvtap: left promiscuous mode [ 159.229601][ T3691] veth0_macvtap: left promiscuous mode [ 159.235366][ T3691] veth1_vlan: left promiscuous mode [ 159.240660][ T3691] veth0_vlan: left promiscuous mode [ 159.335960][ T3691] team0 (unregistering): Port device team_slave_1 removed [ 159.346185][ T3691] team0 (unregistering): Port device team_slave_0 removed [ 159.377835][ T3691] team0 (unregistering): Port device dummy0 removed [ 159.393469][T10940] tipc: Resetting bearer [ 159.405312][T10940] tipc: Disabling bearer [ 159.420488][T10966] syzkaller0: entered promiscuous mode [ 159.439878][T10966] syzkaller0: entered allmulticast mode [ 159.499618][T10887] hsr_slave_0: entered promiscuous mode [ 159.514843][T10887] hsr_slave_1: entered promiscuous mode [ 159.528622][T10980] FAULT_INJECTION: forcing a failure. [ 159.528622][T10980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.542313][T10887] debugfs: 'hsr0' already exists in 'hsr' [ 159.551088][T10887] Cannot create hsr debugfs directory [ 159.563768][T10978] syzkaller0: entered promiscuous mode [ 159.572701][T10980] CPU: 0 UID: 0 PID: 10980 Comm: syz.5.2760 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 159.572846][T10980] Tainted: [W]=WARN [ 159.572853][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.572867][T10980] Call Trace: [ 159.572874][T10980] [ 159.572882][T10980] __dump_stack+0x1d/0x30 [ 159.572961][T10980] dump_stack_lvl+0x95/0xd0 [ 159.572978][T10980] dump_stack+0x15/0x1b [ 159.573040][T10980] should_fail_ex+0x25e/0x270 [ 159.573066][T10980] should_fail+0xb/0x20 [ 159.573106][T10980] should_fail_usercopy+0x1a/0x20 [ 159.573131][T10980] _copy_to_user+0x20/0xa0 [ 159.573152][T10980] simple_read_from_buffer+0xb5/0x130 [ 159.573180][T10980] proc_fail_nth_read+0x10e/0x150 [ 159.573200][T10980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.573219][T10980] vfs_read+0x18e/0x7c0 [ 159.573291][T10980] ? __rcu_read_unlock+0x4e/0x70 [ 159.573316][T10980] ? __fget_files+0x184/0x1c0 [ 159.573342][T10980] ? mutex_lock+0x57/0x90 [ 159.573432][T10980] ksys_read+0xdc/0x1a0 [ 159.573472][T10980] __x64_sys_read+0x40/0x50 [ 159.573492][T10980] x64_sys_call+0x2886/0x3020 [ 159.573633][T10980] do_syscall_64+0x136/0x3c0 [ 159.573676][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.573694][T10980] RIP: 0033:0x7ff9ad81e84e [ 159.573709][T10980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.573729][T10980] RSP: 002b:00007ff9ac2b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.573777][T10980] RAX: ffffffffffffffda RBX: 00007ff9ac2b76c0 RCX: 00007ff9ad81e84e [ 159.573790][T10980] RDX: 000000000000000f RSI: 00007ff9ac2b70a0 RDI: 0000000000000004 [ 159.573802][T10980] RBP: 00007ff9ac2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.573813][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.573823][T10980] R13: 00007ff9adae6038 R14: 00007ff9adae5fa0 R15: 00007ffe8c89cf58 [ 159.573839][T10980] [ 159.638133][T10978] syzkaller0: entered allmulticast mode [ 159.856094][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 159.984248][T11000] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 160.061586][ T3691] IPVS: stop unused estimator thread 0... [ 160.279697][T10887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.300197][T11026] loop4: detected capacity change from 0 to 4096 [ 160.308580][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.323583][T10887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.336685][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.349898][T10887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.359002][T11026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.375666][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.391965][T10887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.411569][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.487387][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.509315][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.520326][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.527438][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.547031][T11026] netlink: 'syz.4.2765': attribute type 13 has an invalid length. [ 160.556774][T11026] netlink: 'syz.4.2765': attribute type 17 has an invalid length. [ 161.332219][T11026] geneve2: left promiscuous mode [ 161.365668][T11072] syzkaller0: entered promiscuous mode [ 161.376402][T11072] syzkaller0: entered allmulticast mode [ 161.395157][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.397895][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.411309][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.435983][T11087] xt_TCPMSS: Only works on TCP SYN packets [ 161.470356][T11089] xt_hashlimit: size too large, truncated to 1048576 [ 161.490271][T10887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.505605][T10887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.571747][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 161.571762][ T28] audit: type=1326 audit(1785638767.475:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 161.615182][T11092] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.658574][ T28] audit: type=1326 audit(1785638767.505:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 161.700853][T11092] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2773'. [ 161.718821][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.728914][T11092] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 161.734935][ T28] audit: type=1326 audit(1785638767.505:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 161.757769][T11092] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2773'. [ 161.824990][ T28] audit: type=1326 audit(1785638767.505:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 161.874861][T10887] veth0_vlan: entered promiscuous mode [ 161.886447][T10887] veth1_vlan: entered promiscuous mode [ 161.897413][ T28] audit: type=1326 audit(1785638767.505:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 161.918376][T10887] veth0_macvtap: entered promiscuous mode [ 161.944870][T10887] veth1_macvtap: entered promiscuous mode [ 161.953349][T11113] tipc: Enabling of bearer rejected, failed to enable media [ 161.983331][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.984586][ T28] audit: type=1326 audit(1785638767.505:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 162.030682][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.078091][ T28] audit: type=1326 audit(1785638767.505:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 162.127996][ T3692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.152801][ T3692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.157895][ T28] audit: type=1326 audit(1785638767.505:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 162.181268][ T3692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.237746][T11127] loop1: detected capacity change from 0 to 1024 [ 162.244485][ T3690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.264425][ T28] audit: type=1326 audit(1785638767.515:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 162.266234][T11127] EXT4-fs: Ignoring removed nobh option [ 162.347652][T11127] EXT4-fs: Ignoring removed bh option [ 162.348047][ T28] audit: type=1326 audit(1785638767.515:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11093 comm="syz.5.2774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 162.396041][T11127] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 162.412801][T11094] loop5: detected capacity change from 0 to 2048 [ 162.421537][T11127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 162.438410][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 162.446214][T11127] System zones: 0-1, 3-12 [ 162.473520][T11127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.502143][T11094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.609179][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.621063][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.683752][T11140] syzkaller0: entered promiscuous mode [ 162.698149][T11140] syzkaller0: entered allmulticast mode [ 162.769234][T11142] loop5: detected capacity change from 0 to 256 [ 162.832578][T11148] xt_TCPMSS: Only works on TCP SYN packets [ 162.870287][T11150] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2784'. [ 163.045037][T11155] loop0: detected capacity change from 0 to 256 [ 163.313982][T11159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2788'. [ 163.358179][T11159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2788'. [ 163.387624][T11172] FAULT_INJECTION: forcing a failure. [ 163.387624][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 163.400721][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.5.2791 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 163.400756][T11172] Tainted: [W]=WARN [ 163.400763][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.400790][T11172] Call Trace: [ 163.400797][T11172] [ 163.400805][T11172] __dump_stack+0x1d/0x30 [ 163.400828][T11172] dump_stack_lvl+0x95/0xd0 [ 163.400848][T11172] dump_stack+0x15/0x1b [ 163.400879][T11172] should_fail_ex+0x25e/0x270 [ 163.400981][T11172] ? ip_set_create+0x1ee/0x970 [ 163.401009][T11172] should_failslab+0x8c/0xb0 [ 163.401031][T11172] __kmalloc_cache_noprof+0x7b/0x3d0 [ 163.401051][T11172] ? ip_set_create+0x1ee/0x970 [ 163.401114][T11172] ? perf_callchain_kernel+0x2b2/0x310 [ 163.401131][T11172] ip_set_create+0x1ee/0x970 [ 163.401226][T11172] ? memchr+0x28/0x50 [ 163.401254][T11172] ? __nla_parse+0x40/0x60 [ 163.401281][T11172] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 163.401355][T11172] ? __rcu_read_unlock+0x33/0x70 [ 163.401442][T11172] netlink_rcv_skb+0x11e/0x220 [ 163.401466][T11172] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 163.401492][T11172] nfnetlink_rcv+0x15f/0x1740 [ 163.401510][T11172] ? __kfree_skb+0x109/0x150 [ 163.401553][T11172] ? kmem_cache_free+0xca/0x380 [ 163.401600][T11172] ? __kfree_skb+0x109/0x150 [ 163.401623][T11172] ? nlmon_xmit+0x4f/0x60 [ 163.401643][T11172] ? consume_skb+0x4b/0x130 [ 163.401794][T11172] ? nlmon_xmit+0x4f/0x60 [ 163.401825][T11172] ? dev_hard_start_xmit+0x34e/0x380 [ 163.401919][T11172] ? __dev_queue_xmit+0x1360/0x1e90 [ 163.401949][T11172] ? __dev_queue_xmit+0x151/0x1e90 [ 163.402019][T11172] ? ref_tracker_free+0x380/0x3f0 [ 163.402046][T11172] ? __netlink_deliver_tap+0x4e6/0x510 [ 163.402090][T11172] netlink_unicast+0x5a7/0x680 [ 163.402113][T11172] netlink_sendmsg+0x5be/0x6f0 [ 163.402141][T11172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.402229][T11172] ____sys_sendmsg+0x532/0x580 [ 163.402251][T11172] ___sys_sendmsg+0x195/0x1e0 [ 163.402281][T11172] __x64_sys_sendmsg+0xd4/0x160 [ 163.402381][T11172] x64_sys_call+0x194c/0x3020 [ 163.402402][T11172] do_syscall_64+0x136/0x3c0 [ 163.402544][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.402575][T11172] RIP: 0033:0x7ff9ad85e019 [ 163.402592][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.402607][T11172] RSP: 002b:00007ff9ac2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.402625][T11172] RAX: ffffffffffffffda RBX: 00007ff9adae5fa0 RCX: 00007ff9ad85e019 [ 163.402670][T11172] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 163.402737][T11172] RBP: 00007ff9ac2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.402751][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.402764][T11172] R13: 00007ff9adae6038 R14: 00007ff9adae5fa0 R15: 00007ffe8c89cf58 [ 163.402782][T11172] [ 163.794162][T11176] syzkaller0: entered promiscuous mode [ 163.800081][T11176] syzkaller0: entered allmulticast mode [ 163.851657][T11180] tipc: Enabled bearer , priority 0 [ 163.859612][T11180] syzkaller0: entered promiscuous mode [ 163.865307][T11180] syzkaller0: entered allmulticast mode [ 163.869528][T11174] loop5: detected capacity change from 0 to 1024 [ 163.887100][T11180] tipc: Resetting bearer [ 163.900901][T11174] EXT4-fs: Ignoring removed nobh option [ 163.920365][T11174] EXT4-fs: Ignoring removed bh option [ 163.930961][T11179] tipc: Resetting bearer [ 163.948356][T11179] tipc: Disabling bearer [ 163.958479][T11174] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 163.990481][T11174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 163.999269][T11174] System zones: 0-1, 3-12 [ 164.025197][T11174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.055532][T11195] loop4: detected capacity change from 0 to 1764 [ 164.082000][T11197] syzkaller0: entered promiscuous mode [ 164.087759][T11197] syzkaller0: entered allmulticast mode [ 164.188157][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.200546][T11202] geneve2: entered promiscuous mode [ 164.228452][T11206] syzkaller0: entered promiscuous mode [ 164.237307][T11206] syzkaller0: entered allmulticast mode [ 164.541647][T11240] FAULT_INJECTION: forcing a failure. [ 164.541647][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.554859][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.4.2811 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 164.554890][T11240] Tainted: [W]=WARN [ 164.554897][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.554908][T11240] Call Trace: [ 164.554913][T11240] [ 164.554921][T11240] __dump_stack+0x1d/0x30 [ 164.554942][T11240] dump_stack_lvl+0x95/0xd0 [ 164.554998][T11240] dump_stack+0x15/0x1b [ 164.555043][T11240] should_fail_ex+0x25e/0x270 [ 164.555068][T11240] should_fail+0xb/0x20 [ 164.555088][T11240] should_fail_usercopy+0x1a/0x20 [ 164.555133][T11240] _copy_from_user+0x1c/0xb0 [ 164.555152][T11240] kstrtouint_from_user+0x69/0xf0 [ 164.555176][T11240] ? 0xffffffff81000000 [ 164.555213][T11240] ? avc_policy_seqno+0x15/0x30 [ 164.555298][T11240] proc_fail_nth_write+0x50/0x160 [ 164.555319][T11240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.555338][T11240] vfs_write+0x252/0x990 [ 164.555356][T11240] ? __fget_files+0x184/0x1c0 [ 164.555378][T11240] ? mutex_lock+0x57/0x90 [ 164.555456][T11240] ksys_write+0xdc/0x1a0 [ 164.555474][T11240] __x64_sys_write+0x40/0x50 [ 164.555503][T11240] x64_sys_call+0x27e1/0x3020 [ 164.555584][T11240] do_syscall_64+0x136/0x3c0 [ 164.555606][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.555625][T11240] RIP: 0033:0x7fbfcf34e84e [ 164.555638][T11240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.555735][T11240] RSP: 002b:00007fbfcdde6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.555775][T11240] RAX: ffffffffffffffda RBX: 00007fbfcdde76c0 RCX: 00007fbfcf34e84e [ 164.555790][T11240] RDX: 0000000000000001 RSI: 00007fbfcdde70a0 RDI: 0000000000000004 [ 164.555802][T11240] RBP: 00007fbfcdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.555814][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.555826][T11240] R13: 00007fbfcf616038 R14: 00007fbfcf615fa0 R15: 00007ffc2a37d2b8 [ 164.555845][T11240] [ 164.900104][T11255] tipc: Enabled bearer , priority 0 [ 164.907874][T11255] syzkaller0: entered promiscuous mode [ 164.914170][T11255] syzkaller0: entered allmulticast mode [ 164.937178][T11255] tipc: Resetting bearer [ 164.961374][T11254] tipc: Resetting bearer [ 164.982851][T11254] tipc: Disabling bearer [ 165.232425][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.241143][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.251216][ T3396] dummy0: entered promiscuous mode [ 165.256603][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'. [ 165.266050][ T3396] dummy0: left promiscuous mode [ 165.361497][T11271] 9pnet_fd: Insufficient options for proto=fd [ 165.379062][T11271] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 165.416983][T11274] syzkaller0: entered promiscuous mode [ 165.423507][T11274] syzkaller0: entered allmulticast mode [ 165.570905][T11279] xt_TCPMSS: Only works on TCP SYN packets [ 165.605431][T11282] loop0: detected capacity change from 0 to 256 [ 165.812968][T11286] loop4: detected capacity change from 0 to 1024 [ 165.837746][T11286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.846843][T11286] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.861860][T11286] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.870128][T11286] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.889384][T11286] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2818: Invalid inode table block 0 in block_group 0 [ 165.902428][T11286] fserror_report: 1 callbacks suppressed [ 165.902443][T11286] loop4: lost filesystem error report for type 5 error -117 [ 165.908354][T11286] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 165.925366][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 165.925384][ C1] EXT4-fs (loop4): initial error at time 1785638771: __ext4_get_inode_loc:4886 [ 165.925402][ C1] EXT4-fs (loop4): last error at time 1785638771: __ext4_get_inode_loc:4886 [ 165.949906][T11286] loop4: lost filesystem error report for type 5 error -117 [ 165.950056][T11286] EXT4-fs error (device loop4): ext4_quota_write:7430: inode #3: comm syz.4.2818: mark_inode_dirty error [ 165.969512][T11286] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 165.969612][T11286] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2818: Failed to acquire dquot type 0 [ 165.990017][T11286] loop4: lost filesystem error report for type 5 error -117 [ 165.990152][T11286] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2818: Invalid inode table block 0 in block_group 0 [ 166.012461][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.012570][T11286] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.029521][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.029995][T11286] EXT4-fs error (device loop4): ext4_ext_truncate:4557: inode #15: comm syz.4.2818: mark_inode_dirty error [ 166.048800][T11286] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.049799][T11286] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2818: Invalid inode table block 0 in block_group 0 [ 166.098321][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.098587][T11286] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.116077][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.116385][T11286] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 166.161786][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.161903][T11286] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2818: Invalid inode table block 0 in block_group 0 [ 166.182880][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.183067][T11286] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.200307][T11286] loop4: lost filesystem error report for type 5 error -117 [ 166.203594][T11286] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.2818: mark_inode_dirty error [ 166.222278][T11286] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.222393][T11286] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 166.242073][T11286] EXT4-fs (loop4): 1 truncate cleaned up [ 166.256846][T11286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.305758][T11299] xt_hashlimit: size too large, truncated to 1048576 [ 166.391698][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.561378][T11309] syzkaller0: entered promiscuous mode [ 166.568500][T11309] syzkaller0: entered allmulticast mode [ 166.679962][T11315] xt_hashlimit: size too large, truncated to 1048576 [ 166.865269][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2833'. [ 167.063028][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.077475][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.111052][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 167.138197][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2838'. [ 167.155568][T11339] loop3: detected capacity change from 0 to 512 [ 167.186848][T11339] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 167.187748][T11338] tipc: Enabled bearer , priority 0 [ 167.218543][T11338] syzkaller0: entered promiscuous mode [ 167.231477][T11338] syzkaller0: entered allmulticast mode [ 167.252702][T11338] tipc: Resetting bearer [ 167.270922][T11337] tipc: Resetting bearer [ 167.286620][ T3692] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 167.303259][T11337] tipc: Disabling bearer [ 167.319885][T11341] syzkaller0: entered promiscuous mode [ 167.327787][T11341] syzkaller0: entered allmulticast mode [ 167.461748][T11353] syzkaller0: entered promiscuous mode [ 167.467374][T11353] syzkaller0: entered allmulticast mode [ 167.500477][T11355] xt_hashlimit: size too large, truncated to 1048576 [ 167.695973][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 167.695986][ T28] audit: type=1400 audit(1785638773.595:627): avc: denied { wake_alarm } for pid=11367 comm="syz.1.2851" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.706860][T11366] xt_hashlimit: size too large, truncated to 1048576 [ 167.750342][ T28] audit: type=1326 audit(1785638773.645:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 167.830908][ T28] audit: type=1326 audit(1785638773.645:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 167.890432][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.900067][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.903380][ T28] audit: type=1326 audit(1785638773.645:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 167.920938][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 167.975879][T11376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2854'. [ 167.998193][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2854'. [ 168.008686][ T28] audit: type=1326 audit(1785638773.645:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.045751][T11376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2854'. [ 168.079981][ T28] audit: type=1326 audit(1785638773.645:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.104962][T11379] syzkaller0: entered promiscuous mode [ 168.129961][T11381] xt_TCPMSS: Only works on TCP SYN packets [ 168.130786][T11379] syzkaller0: entered allmulticast mode [ 168.137435][ T28] audit: type=1326 audit(1785638773.645:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.189822][ T28] audit: type=1326 audit(1785638773.645:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.228530][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2857'. [ 168.262412][ T28] audit: type=1326 audit(1785638773.645:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.307986][ T28] audit: type=1326 audit(1785638773.645:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.1.2851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ae7ae019 code=0x7ffc0000 [ 168.341959][T11385] syzkaller0: entered promiscuous mode [ 168.349120][T11385] syzkaller0: entered allmulticast mode [ 168.465066][T11388] syzkaller0: entered promiscuous mode [ 168.471007][T11388] syzkaller0: entered allmulticast mode [ 168.528783][T11395] loop3: detected capacity change from 0 to 512 [ 168.543156][T11393] tipc: Enabled bearer , priority 0 [ 168.555721][T11395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.569133][T11390] syzkaller0: entered promiscuous mode [ 168.576972][T11390] syzkaller0: entered allmulticast mode [ 168.583224][T11395] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.593817][T11390] tipc: Resetting bearer [ 168.611562][T11389] tipc: Resetting bearer [ 168.621958][T11389] tipc: Disabling bearer [ 168.652181][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.730298][T11409] xt_TCPMSS: Only works on TCP SYN packets [ 168.752494][T11404] loop5: detected capacity change from 0 to 256 [ 168.978118][T11404] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.110841][T11419] syzkaller0: entered promiscuous mode [ 169.139412][T11419] syzkaller0: entered allmulticast mode [ 169.200798][T11421] tipc: Enabling of bearer rejected, failed to enable media [ 169.234630][T11425] FAULT_INJECTION: forcing a failure. [ 169.234630][T11425] name failslab, interval 1, probability 0, space 0, times 0 [ 169.247548][T11425] CPU: 1 UID: 0 PID: 11425 Comm: syz.4.2873 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.247575][T11425] Tainted: [W]=WARN [ 169.247580][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.247590][T11425] Call Trace: [ 169.247595][T11425] [ 169.247607][T11425] __dump_stack+0x1d/0x30 [ 169.247627][T11425] dump_stack_lvl+0x95/0xd0 [ 169.247715][T11425] dump_stack+0x15/0x1b [ 169.247729][T11425] should_fail_ex+0x25e/0x270 [ 169.247751][T11425] ? ip_set_create+0x1ee/0x970 [ 169.247795][T11425] should_failslab+0x8c/0xb0 [ 169.247849][T11425] __kmalloc_cache_noprof+0x7b/0x3d0 [ 169.247868][T11425] ? ip_set_create+0x1ee/0x970 [ 169.247891][T11425] ip_set_create+0x1ee/0x970 [ 169.247912][T11425] ? memchr+0x28/0x50 [ 169.247974][T11425] ? __nla_parse+0x40/0x60 [ 169.247996][T11425] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 169.248154][T11425] netlink_rcv_skb+0x11e/0x220 [ 169.248187][T11425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 169.248234][T11425] nfnetlink_rcv+0x15f/0x1740 [ 169.248274][T11425] ? __kfree_skb+0x109/0x150 [ 169.248296][T11425] ? kmem_cache_free+0xca/0x380 [ 169.248315][T11425] ? __kfree_skb+0x109/0x150 [ 169.248394][T11425] ? nlmon_xmit+0x4f/0x60 [ 169.248478][T11425] ? consume_skb+0x4b/0x130 [ 169.248499][T11425] ? nlmon_xmit+0x4f/0x60 [ 169.248516][T11425] ? dev_hard_start_xmit+0x34e/0x380 [ 169.248541][T11425] ? __dev_queue_xmit+0x1360/0x1e90 [ 169.248595][T11425] ? __dev_queue_xmit+0x151/0x1e90 [ 169.248652][T11425] ? ref_tracker_free+0x380/0x3f0 [ 169.248677][T11425] ? __netlink_deliver_tap+0x4e6/0x510 [ 169.248698][T11425] netlink_unicast+0x5a7/0x680 [ 169.248717][T11425] netlink_sendmsg+0x5be/0x6f0 [ 169.248796][T11425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.248816][T11425] ____sys_sendmsg+0x532/0x580 [ 169.248841][T11425] ___sys_sendmsg+0x195/0x1e0 [ 169.248865][T11425] __x64_sys_sendmsg+0xd4/0x160 [ 169.248921][T11425] x64_sys_call+0x194c/0x3020 [ 169.249007][T11425] do_syscall_64+0x136/0x3c0 [ 169.249060][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.249157][T11425] RIP: 0033:0x7fbfcf38e019 [ 169.249171][T11425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.249185][T11425] RSP: 002b:00007fbfcdde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.249202][T11425] RAX: ffffffffffffffda RBX: 00007fbfcf615fa0 RCX: 00007fbfcf38e019 [ 169.249276][T11425] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 169.249286][T11425] RBP: 00007fbfcdde7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.249301][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.249311][T11425] R13: 00007fbfcf616038 R14: 00007fbfcf615fa0 R15: 00007ffc2a37d2b8 [ 169.249326][T11425] [ 169.568448][T11437] xt_hashlimit: size too large, truncated to 1048576 [ 169.615526][T11440] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200) [ 169.631284][T11439] syzkaller0: entered promiscuous mode [ 169.646558][T11439] syzkaller0: entered allmulticast mode [ 169.652635][T11440] FAT-fs (loop5): Filesystem has been set read-only [ 169.703268][T11435] loop4: detected capacity change from 0 to 1024 [ 169.749410][T11435] EXT4-fs: Ignoring removed bh option [ 169.764821][T11435] ext4: Unknown parameter 'appraise' [ 169.784499][T11435] loop4: detected capacity change from 0 to 1024 [ 169.786644][T11453] FAULT_INJECTION: forcing a failure. [ 169.786644][T11453] name failslab, interval 1, probability 0, space 0, times 0 [ 169.797493][T11435] EXT4-fs: Ignoring removed bh option [ 169.807422][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.1.2880 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.807455][T11453] Tainted: [W]=WARN [ 169.807462][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.807474][T11453] Call Trace: [ 169.807481][T11453] [ 169.807489][T11453] __dump_stack+0x1d/0x30 [ 169.807534][T11453] dump_stack_lvl+0x95/0xd0 [ 169.807554][T11453] dump_stack+0x15/0x1b [ 169.807578][T11453] should_fail_ex+0x25e/0x270 [ 169.807604][T11453] ? ip_set_create+0x1ee/0x970 [ 169.807674][T11453] should_failslab+0x8c/0xb0 [ 169.807729][T11453] __kmalloc_cache_noprof+0x7b/0x3d0 [ 169.807760][T11453] ? ip_set_create+0x1ee/0x970 [ 169.807848][T11453] ip_set_create+0x1ee/0x970 [ 169.807950][T11453] ? memchr+0x28/0x50 [ 169.807978][T11453] ? __nla_parse+0x40/0x60 [ 169.808005][T11453] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 169.808088][T11453] netlink_rcv_skb+0x11e/0x220 [ 169.808180][T11453] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 169.808283][T11453] nfnetlink_rcv+0x15f/0x1740 [ 169.808303][T11453] ? __kfree_skb+0x109/0x150 [ 169.808401][T11453] ? kmem_cache_free+0xca/0x380 [ 169.808424][T11453] ? __kfree_skb+0x109/0x150 [ 169.808449][T11453] ? nlmon_xmit+0x4f/0x60 [ 169.808471][T11453] ? consume_skb+0x4b/0x130 [ 169.808526][T11453] ? nlmon_xmit+0x4f/0x60 [ 169.808548][T11453] ? dev_hard_start_xmit+0x34e/0x380 [ 169.808584][T11453] ? __dev_queue_xmit+0x1360/0x1e90 [ 169.808611][T11453] ? __dev_queue_xmit+0x151/0x1e90 [ 169.808692][T11453] ? ref_tracker_free+0x380/0x3f0 [ 169.808780][T11453] ? __netlink_deliver_tap+0x4e6/0x510 [ 169.808806][T11453] netlink_unicast+0x5a7/0x680 [ 169.808876][T11453] netlink_sendmsg+0x5be/0x6f0 [ 169.808903][T11453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.808927][T11453] ____sys_sendmsg+0x532/0x580 [ 169.808949][T11453] ___sys_sendmsg+0x195/0x1e0 [ 169.809046][T11453] __x64_sys_sendmsg+0xd4/0x160 [ 169.809069][T11453] x64_sys_call+0x194c/0x3020 [ 169.809091][T11453] do_syscall_64+0x136/0x3c0 [ 169.809160][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.809180][T11453] RIP: 0033:0x7f99ae7ae019 [ 169.809252][T11453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.809269][T11453] RSP: 002b:00007f99ad207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.809290][T11453] RAX: ffffffffffffffda RBX: 00007f99aea35fa0 RCX: 00007f99ae7ae019 [ 169.809317][T11453] RDX: 0000000024000042 RSI: 00002000000000c0 RDI: 0000000000000003 [ 169.809331][T11453] RBP: 00007f99ad207090 R08: 0000000000000000 R09: 0000000000000000 [ 169.809344][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.809407][T11453] R13: 00007f99aea36038 R14: 00007f99aea35fa0 R15: 00007ffea25f7168 [ 169.809427][T11453] [ 169.825734][T11456] xt_TCPMSS: Only works on TCP SYN packets [ 169.876547][T11435] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 169.903881][T11458] loop1: detected capacity change from 0 to 1024 [ 169.946787][T11435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.950902][T11458] EXT4-fs: Ignoring removed bh option [ 169.955219][T11435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.989739][T11458] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.156068][T11458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 170.176609][T11468] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 170.185572][T11458] System zones: 0-1, 3-12 [ 170.196728][T11458] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.2882: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.215458][T11458] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.216901][T11458] EXT4-fs (loop1): Remounting filesystem read-only [ 170.226084][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 170.226109][ C1] EXT4-fs (loop1): initial error at time 1785638776: ext4_map_blocks:833: inode 3: block 1 [ 170.226147][ C1] EXT4-fs (loop1): last error at time 1785638776: ext4_map_blocks:833: inode 3: block 1 [ 170.247206][T11472] tipc: Enabling of bearer rejected, failed to enable media [ 170.268487][T11458] EXT4-fs (loop1): 1 orphan inode deleted [ 170.278257][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.369515][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.425257][T11489] xt_hashlimit: size too large, truncated to 1048576 [ 170.498548][T11494] loop4: detected capacity change from 0 to 256 [ 170.508475][T11495] syzkaller0: entered promiscuous mode [ 170.515217][T11495] syzkaller0: entered allmulticast mode [ 170.638331][T11506] tipc: Started in network mode [ 170.643402][T11506] tipc: Node identity 629046d395d5, cluster identity 4711 [ 170.657220][T11506] tipc: Enabled bearer , priority 0 [ 170.707763][T11506] syzkaller0: entered promiscuous mode [ 170.713485][T11506] syzkaller0: entered allmulticast mode [ 170.716672][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 170.786293][T11515] loop3: detected capacity change from 0 to 1764 [ 170.844802][T11506] tipc: Resetting bearer [ 170.851236][T11518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11518 comm=syz.3.2899 [ 170.864035][T11505] tipc: Resetting bearer [ 170.872550][T11518] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 170.880924][T11505] tipc: Disabling bearer [ 170.914180][T11514] syzkaller0: entered promiscuous mode [ 170.919751][T11514] syzkaller0: entered allmulticast mode [ 170.943352][T11522] loop1: detected capacity change from 0 to 512 [ 170.951220][T11520] tipc: Enabling of bearer rejected, failed to enable media [ 170.998354][T11522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.014329][T11522] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.040066][T11522] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.2901: iget: bad i_size value: 2533274857506816 [ 171.075468][T11522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41581 sclass=netlink_route_socket pid=11522 comm=syz.1.2901 [ 171.135360][T11540] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2904'. [ 171.166681][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.189354][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.198090][T11550] xt_hashlimit: size too large, truncated to 1048576 [ 171.208127][T11552] xt_hashlimit: size too large, truncated to 1048576 [ 171.299225][T11557] loop0: detected capacity change from 0 to 1764 [ 171.627776][T11582] syzkaller0: entered promiscuous mode [ 171.637578][T11582] syzkaller0: entered allmulticast mode [ 171.703888][T11588] loop3: detected capacity change from 0 to 1764 [ 171.764461][T11590] xt_hashlimit: size too large, truncated to 1048576 [ 171.805960][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.107183][T11611] SELinux: syz.5.2929 (11611) wrote to checkreqprot. This is no longer supported. [ 172.120056][T11616] syzkaller0: entered promiscuous mode [ 172.125714][T11616] syzkaller0: entered allmulticast mode [ 172.156531][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.169262][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.178742][T11620] batadv0: entered promiscuous mode [ 172.191045][T11620] __nla_validate_parse: 65 callbacks suppressed [ 172.191096][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2933'. [ 172.207747][T11620] batadv0: left promiscuous mode [ 172.264223][T11624] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.266792][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 172.295094][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 172.305897][T11624] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.2934'. [ 172.316705][T11624] netlink: 'syz.4.2934': attribute type 1 has an invalid length. [ 172.332333][T11624] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2934'. [ 172.349084][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2937'. [ 172.366092][T11632] loop4: detected capacity change from 0 to 1024 [ 172.393349][T11623] loop3: detected capacity change from 0 to 1024 [ 172.403452][T11623] EXT4-fs: Ignoring removed nobh option [ 172.410336][T11623] EXT4-fs: Ignoring removed bh option [ 172.417967][T11623] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 172.425980][T11632] EXT4-fs: Ignoring removed bh option [ 172.446911][T11632] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.461652][T11623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 172.469050][T11632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 172.470525][T11623] System zones: [ 172.478329][T11632] System zones: 0-1, 3-12 [ 172.482455][T11636] syzkaller0: entered promiscuous mode [ 172.486945][T11632] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.2934: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.492233][T11623] 0-1, 3-12 [ 172.494951][T11636] syzkaller0: entered allmulticast mode [ 172.507789][T11632] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 172.513607][T11623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.517944][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 172.526290][T11632] EXT4-fs (loop4): Remounting filesystem read-only [ 172.536268][ C0] EXT4-fs (loop4): initial error at time 1785638778: ext4_map_blocks:833: inode 3: block 1 [ 172.559275][ C0] EXT4-fs (loop4): last error at time 1785638778: ext4_map_blocks:833: inode 3: block 1 [ 172.575527][T11632] EXT4-fs (loop4): 1 orphan inode deleted [ 172.582407][T11632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.662111][T11641] xt_hashlimit: size too large, truncated to 1048576 [ 172.683283][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.708242][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 172.708257][ T28] audit: type=1400 audit(1785638778.615:759): avc: denied { ioctl } for pid=11643 comm="syz.4.2940" path="socket:[35996]" dev="sockfs" ino=35996 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.806485][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.995190][T11660] syzkaller0: entered promiscuous mode [ 173.005885][T11660] syzkaller0: entered allmulticast mode [ 173.230465][T11671] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 173.259358][T11671] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 173.328366][T11671] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.537600][T11671] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: inode #5: comm syz.0.2951: unexpected bad inode w/o EXT4_IGET_BAD [ 173.667510][T11671] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 173.667767][T11671] EXT4-fs (loop0): no journal found [ 173.676919][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 173.676942][ C0] EXT4-fs (loop0): initial error at time 1785638779: ext4_get_journal_inode:5900: inode 5 [ 173.676977][ C0] EXT4-fs (loop0): last error at time 1785638779: ext4_get_journal_inode:5900: inode 5 [ 173.723021][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.737790][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.742502][T11671] EXT4-fs (loop0): can't get journal size [ 173.763324][T11681] batadv0: entered promiscuous mode [ 173.770007][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 173.772984][T11671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.780448][T11681] batadv0: left promiscuous mode [ 173.922511][T11683] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2954'. [ 173.942910][T11683] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 174.026059][T11690] xt_hashlimit: size too large, truncated to 1048576 [ 174.038931][ T28] audit: type=1400 audit(1785638779.945:760): avc: denied { read } for pid=11669 comm="syz.0.2951" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.101185][ T28] audit: type=1400 audit(1785638779.945:761): avc: denied { open } for pid=11669 comm="syz.0.2951" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.153007][ T28] audit: type=1400 audit(1785638779.945:762): avc: denied { ioctl } for pid=11669 comm="syz.0.2951" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.201549][ T28] audit: type=1400 audit(1785638779.985:763): avc: denied { read } for pid=11693 comm="syz.5.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.236004][ T28] audit: type=1400 audit(1785638780.055:764): avc: denied { getopt } for pid=11693 comm="syz.5.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.263714][T11699] tipc: Enabling of bearer rejected, failed to enable media [ 174.272454][T11699] syzkaller0: entered promiscuous mode [ 174.278332][T11699] syzkaller0: entered allmulticast mode [ 174.304861][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.428916][T11710] syzkaller0: entered promiscuous mode [ 174.438951][T11710] syzkaller0: entered allmulticast mode [ 174.488960][T11714] xt_hashlimit: size too large, truncated to 1048576 [ 174.569272][T11718] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2964: invalid indirect mapped block 4294967295 (level 1) [ 174.583487][T11718] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.587974][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 174.603608][ C1] EXT4-fs (loop0): initial error at time 1785638780: ext4_free_branches:1023: inode 11 [ 174.608114][T11718] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2964: invalid indirect mapped block 4294967295 (level 1) [ 174.613483][ C1] EXT4-fs (loop0): last error at time 1785638780: ext4_free_branches:1023: inode 11 [ 174.653781][T11718] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.654273][T11718] EXT4-fs (loop0): 2 truncates cleaned up [ 174.689207][T11718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.741879][T11723] set_capacity_and_notify: 2 callbacks suppressed [ 174.741894][T11723] loop3: detected capacity change from 0 to 256 [ 174.788433][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 174.800519][ T28] audit: type=1400 audit(1785638780.705:765): avc: denied { watch } for pid=11722 comm="syz.3.2965" path="/587/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 174.857022][T11723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2965'. [ 174.908817][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.953537][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.957297][T11729] xt_hashlimit: size too large, truncated to 1048576 [ 174.972705][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.992382][T11733] batadv0: entered promiscuous mode [ 175.004353][T11733] batadv0: left promiscuous mode [ 175.391036][T11748] syzkaller0: entered promiscuous mode [ 175.396673][T11748] syzkaller0: entered allmulticast mode [ 175.432367][T11750] tipc: Enabling of bearer rejected, failed to enable media [ 175.441188][T11750] syzkaller0: entered promiscuous mode [ 175.446948][T11750] syzkaller0: entered allmulticast mode [ 175.558375][T11758] xt_hashlimit: size too large, truncated to 1048576 [ 175.661285][T11760] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 175.921966][T11773] loop3: detected capacity change from 0 to 512 [ 175.941248][ T28] audit: type=1400 audit(1785638781.845:766): avc: denied { connect } for pid=11777 comm="syz.0.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.972737][T11780] syzkaller0: entered promiscuous mode [ 175.979130][T11773] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.999944][T11780] syzkaller0: entered allmulticast mode [ 176.016895][T11760] loop4: detected capacity change from 0 to 1024 [ 176.021054][T11778] loop0: detected capacity change from 0 to 4096 [ 176.052828][T11773] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 176.053079][T11783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.065392][ T28] audit: type=1400 audit(1785638781.975:767): avc: denied { setattr } for pid=11771 comm="syz.3.2984" name="L2TP/IP" dev="sockfs" ino=35489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.095289][T11760] EXT4-fs: Ignoring removed bh option [ 176.109910][T11783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.114078][T11760] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.133035][T11760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 176.142385][T11760] System zones: 0-1, 3-12 [ 176.147102][T11778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.158268][T11760] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.2980: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.174382][T11760] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.175109][T11760] EXT4-fs (loop4): Remounting filesystem read-only [ 176.184518][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 176.184546][ C0] EXT4-fs (loop4): initial error at time 1785638782: ext4_map_blocks:833: inode 3: block 1 [ 176.184688][ C0] EXT4-fs (loop4): last error at time 1785638782: ext4_map_blocks:833: inode 3: block 1 [ 176.217283][T11778] tmpfs: Bad value for 'size' [ 176.222415][T11760] Quota error (device loop4): write_blk: dquota write failed [ 176.239946][T11760] EXT4-fs (loop4): 1 orphan inode deleted [ 176.255063][T11760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.291432][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.328188][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.362269][T11795] xt_hashlimit: size too large, truncated to 1048576 [ 176.548443][T11808] PM: suspend entry (deep) [ 176.549289][T11812] bridge0: port 3(gretap0) entered blocking state [ 176.559896][T11812] bridge0: port 3(gretap0) entered disabled state [ 176.570173][T11812] gretap0: entered allmulticast mode [ 176.576839][T11812] gretap0: entered promiscuous mode [ 176.582366][T11812] bridge0: port 3(gretap0) entered blocking state [ 176.588895][T11812] bridge0: port 3(gretap0) entered forwarding state [ 176.624309][ T3679] Filesystems sync: 0.070 seconds [ 176.654487][T11818] syzkaller0: entered promiscuous mode [ 176.660280][T11818] syzkaller0: entered allmulticast mode [ 176.669061][T11808] Freezing user space processes [ 176.713120][T11808] Freezing user space processes completed (elapsed 0.038 seconds) [ 176.721063][T11808] OOM killer disabled. [ 176.725110][T11808] Freezing remaining freezable tasks [ 176.732094][T11808] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 176.740554][T11808] printk: Suspending console(s) (use no_console_suspend to debug) [ 176.790699][T11808] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 176.790744][T11808] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 176.790817][T11808] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 176.790854][T11808] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 176.791018][T11808] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 176.791174][T11808] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 176.791290][T11808] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 176.791345][T11808] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 176.791367][T11808] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 176.791444][T11808] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 176.791494][T11808] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 176.791537][T11808] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 176.791632][T11808] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 176.791653][T11808] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 176.791705][T11808] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 176.791881][T11808] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 176.838101][ T3690] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 177.353525][T11808] ACPI: PM: Preparing to enter system sleep state S3 [ 177.353869][T11808] ACPI: PM: Saving platform NVS memory [ 177.353922][T11808] Disabling non-boot CPUs ... [ 177.357868][T11808] smpboot: CPU 1 is now offline [ 177.362014][T11808] ACPI: PM: Low-level resume complete [ 177.362070][T11808] ACPI: PM: Restoring platform NVS memory [ 177.378300][T11808] Enabling non-boot CPUs ... [ 177.378424][T11808] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 177.381913][T11808] CPU1 is up [ 177.382083][T11808] ACPI: PM: Waking up from system sleep state S3 [ 177.409014][ T3730] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 177.519511][ T3730] usb usb1: PM: dpm_run_callback(): usb_dev_resume returns -107 [ 177.519548][ T3730] usb usb1: PM: failed to resume async: error -107 [ 177.586106][T11808] OOM killer enabled. [ 177.586727][T11808] Restarting tasks: Starting [ 177.608526][T11820] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.620712][T11773] syz.3.2984 (11773) used greatest stack depth: 8328 bytes left [ 177.625200][T11808] Restarting tasks: Done [ 177.625907][T11808] random: crng reseeded on system resumption [ 177.642117][T11808] PM: suspend exit [ 177.658385][T11820] __nla_validate_parse: 5 callbacks suppressed [ 177.658463][T11820] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.3001'. [ 177.662875][T11820] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 177.668727][T11820] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3001'. [ 177.745325][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 177.745340][ T28] audit: type=1326 audit(1785638783.653:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.755312][ T28] audit: type=1326 audit(1785638783.653:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.762880][ T28] audit: type=1326 audit(1785638783.653:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.776165][ T28] audit: type=1326 audit(1785638783.653:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.779956][ T28] audit: type=1326 audit(1785638783.663:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.789544][ T28] audit: type=1326 audit(1785638783.663:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.795951][T11861] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.3004'. [ 177.798039][T11861] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 177.800326][T11861] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3004'. [ 177.801084][ T28] audit: type=1326 audit(1785638783.663:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.816250][ T28] audit: type=1326 audit(1785638783.663:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.820017][ T28] audit: type=1326 audit(1785638783.663:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.3.3007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8201e7e019 code=0x7ffc0000 [ 177.858875][T11871] xt_hashlimit: size too large, truncated to 1048576 [ 177.899323][T11875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.905292][T11875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.909552][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 177.999143][T11861] loop0: detected capacity change from 0 to 1024 [ 178.007725][T11861] EXT4-fs: Ignoring removed bh option [ 178.015118][T11820] loop1: detected capacity change from 0 to 1024 [ 178.026341][T11861] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.037695][T11861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 178.039738][T11861] System zones: 0-1, 3-12 [ 178.042866][T11820] EXT4-fs: Ignoring removed bh option [ 178.049984][T11820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.056669][T11861] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.3004: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.059294][T11820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 178.059583][T11861] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.061364][T11820] System zones: [ 178.061799][T11861] EXT4-fs (loop0): Remounting filesystem read-only [ 178.061994][T11861] Quota error (device loop0): write_blk: dquota write failed [ 178.063405][T11820] 0-1, 3-12 [ 178.065743][T11820] [ 178.066203][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 178.066352][ C1] EXT4-fs (loop0): initial error at time 1785638783: ext4_map_blocks:833: inode 3: block 1 [ 178.066599][ C1] EXT4-fs (loop0): last error at time 1785638783: ext4_map_blocks:833: inode 3: block 1 [ 178.075695][T11861] EXT4-fs (loop0): 1 orphan inode deleted [ 178.084885][T11861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.095865][T11820] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.3001: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.099358][T11820] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.099838][T11820] EXT4-fs (loop1): Remounting filesystem read-only [ 178.104126][T11820] EXT4-fs (loop1): 1 orphan inode deleted [ 178.107875][T11820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.132331][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.178038][T11884] xt_hashlimit: size too large, truncated to 1048576 [ 178.179690][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.216817][T11886] syzkaller0: entered promiscuous mode [ 178.217836][T11886] syzkaller0: entered allmulticast mode [ 178.435205][T11897] xt_hashlimit: size too large, truncated to 1048576 [ 178.632001][T11907] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 178.644349][T11907] loop3: detected capacity change from 0 to 1024 [ 178.839865][T11912] loop4: detected capacity change from 0 to 256 [ 178.858472][T11913] loop0: detected capacity change from 0 to 1024 [ 178.864562][T11913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.870321][T11913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.964683][T11913] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 178.966176][T11913] EXT4-fs (loop0): orphan cleanup on readonly fs [ 178.969802][T11913] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.3012: Invalid inode table block 0 in block_group 0 [ 178.977067][T11913] fserror_report: 1 callbacks suppressed [ 178.977135][T11913] loop0: lost filesystem error report for type 5 error -117 [ 178.978982][T11913] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 178.981558][T11913] loop0: lost filesystem error report for type 5 error -117 [ 178.981642][T11913] EXT4-fs error (device loop0): ext4_quota_write:7430: inode #3: comm syz.0.3012: mark_inode_dirty error [ 178.984350][T11913] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.985931][T11913] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3012: Failed to acquire dquot type 0 [ 178.987438][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 178.987458][ C1] EXT4-fs (loop0): initial error at time 1785638784: __ext4_get_inode_loc:4886 [ 178.987483][ C1] EXT4-fs (loop0): last error at time 1785638784: ext4_quota_write:7430: inode 3 [ 178.993294][T11913] loop0: lost filesystem error report for type 5 error -117 [ 178.993402][T11913] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.3012: Invalid inode table block 0 in block_group 0 [ 178.996603][T11913] loop0: lost filesystem error report for type 5 error -117 [ 178.996683][T11913] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 179.000600][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.000676][T11913] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #15: comm syz.0.3012: mark_inode_dirty error [ 179.003540][T11913] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.003622][T11913] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.3012: Invalid inode table block 0 in block_group 0 [ 179.008626][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.008761][T11913] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 179.011534][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.011691][T11913] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 179.014232][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.014335][T11913] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.3012: Invalid inode table block 0 in block_group 0 [ 179.017396][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.017481][T11913] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 179.019949][T11913] loop0: lost filesystem error report for type 5 error -117 [ 179.020030][T11913] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.3012: mark_inode_dirty error [ 179.022626][T11913] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.022708][T11913] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 179.025489][T11913] EXT4-fs (loop0): 1 truncate cleaned up [ 179.026707][T11913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.138018][T11921] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3023'. [ 179.232204][T10476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.368565][T11936] xt_hashlimit: size too large, truncated to 1048576 [ 179.376850][T11938] tipc: Enabling of bearer rejected, failed to enable media [ 179.381274][T11938] syzkaller0: entered promiscuous mode [ 179.382175][T11938] syzkaller0: entered allmulticast mode [ 179.417009][T11848] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.479093][T11848] bond0: (slave netdevsim2): Releasing backup interface [ 179.481409][T11848] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 179.483390][T11848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.546391][T11848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.591366][T11848] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.756499][T11848] bridge_slave_1: left allmulticast mode [ 179.757485][T11848] bridge_slave_1: left promiscuous mode [ 179.763474][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.767463][T11848] bridge_slave_0: left allmulticast mode [ 179.768466][T11848] bridge_slave_0: left promiscuous mode [ 179.769398][T11848] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.773570][T11941] xt_hashlimit: size too large, truncated to 1048576 [ 179.897311][T11848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.901710][T11848] bond_slave_0: left promiscuous mode [ 179.905014][T11848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.909485][T11848] bond_slave_1: left promiscuous mode [ 179.911234][T11848] bond0 (unregistering): Released all slaves [ 179.914115][T11848] bond1 (unregistering): Released all slaves [ 179.929297][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 179.983838][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.984958][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.986755][T11930] bridge_slave_0: entered allmulticast mode [ 179.988162][T11930] bridge_slave_0: entered promiscuous mode [ 179.990365][T11848] tipc: Left network mode [ 179.992782][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.993794][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.996511][T11930] bridge_slave_1: entered allmulticast mode [ 180.009754][T11930] bridge_slave_1: entered promiscuous mode [ 180.034616][T11848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.035958][T11848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.038838][T11848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.040734][T11848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.046239][T11848] veth1_macvtap: left promiscuous mode [ 180.047111][T11848] veth0_macvtap: left promiscuous mode [ 180.048370][T11848] veth1_vlan: left promiscuous mode [ 180.049258][T11848] veth0_vlan: left promiscuous mode [ 180.067895][T11977] FAULT_INJECTION: forcing a failure. [ 180.067895][T11977] name failslab, interval 1, probability 0, space 0, times 0 [ 180.072606][T11977] CPU: 0 UID: 0 PID: 11977 Comm: syz.5.3033 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 180.072731][T11977] Tainted: [W]=WARN [ 180.072738][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.072752][T11977] Call Trace: [ 180.072759][T11977] [ 180.072768][T11977] __dump_stack+0x1d/0x30 [ 180.072791][T11977] dump_stack_lvl+0x95/0xd0 [ 180.072808][T11977] dump_stack+0x15/0x1b [ 180.072892][T11977] should_fail_ex+0x25e/0x270 [ 180.072916][T11977] should_failslab+0x8c/0xb0 [ 180.072999][T11977] __kvmalloc_node_noprof+0x15b/0x590 [ 180.073028][T11977] ? ip_set_alloc+0x24/0x30 [ 180.073125][T11977] ? ip_set_alloc+0x24/0x30 [ 180.073151][T11977] ip_set_alloc+0x24/0x30 [ 180.073235][T11977] hash_ipmac_create+0x2c1/0x770 [ 180.073264][T11977] ? __pfx_hash_ipmac_create+0x10/0x10 [ 180.073287][T11977] ip_set_create+0x3cc/0x970 [ 180.073366][T11977] ? __nla_parse+0x40/0x60 [ 180.073392][T11977] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 180.073424][T11977] netlink_rcv_skb+0x11e/0x220 [ 180.073450][T11977] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.073546][T11977] nfnetlink_rcv+0x15f/0x1740 [ 180.073567][T11977] ? __kfree_skb+0x109/0x150 [ 180.073593][T11977] ? kmem_cache_free+0xca/0x380 [ 180.073613][T11977] ? __kfree_skb+0x109/0x150 [ 180.073738][T11977] ? nlmon_xmit+0x4f/0x60 [ 180.073757][T11977] ? consume_skb+0x4b/0x130 [ 180.073798][T11977] ? nlmon_xmit+0x4f/0x60 [ 180.073819][T11977] ? dev_hard_start_xmit+0x34e/0x380 [ 180.073981][T11977] ? __dev_queue_xmit+0x1360/0x1e90 [ 180.074049][T11977] ? __dev_queue_xmit+0x151/0x1e90 [ 180.074077][T11977] ? ref_tracker_free+0x380/0x3f0 [ 180.074103][T11977] ? __netlink_deliver_tap+0x4e6/0x510 [ 180.074197][T11977] netlink_unicast+0x5a7/0x680 [ 180.074217][T11977] netlink_sendmsg+0x5be/0x6f0 [ 180.074243][T11977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.074301][T11977] ____sys_sendmsg+0x532/0x580 [ 180.074319][T11977] ___sys_sendmsg+0x195/0x1e0 [ 180.074349][T11977] __x64_sys_sendmsg+0xd4/0x160 [ 180.074378][T11977] x64_sys_call+0x194c/0x3020 [ 180.074399][T11977] do_syscall_64+0x136/0x3c0 [ 180.074523][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.074542][T11977] RIP: 0033:0x7ff9ad85e019 [ 180.074604][T11977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.074622][T11977] RSP: 002b:00007ff9ac2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.074644][T11977] RAX: ffffffffffffffda RBX: 00007ff9adae5fa0 RCX: 00007ff9ad85e019 [ 180.074657][T11977] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 180.074669][T11977] RBP: 00007ff9ac2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.074682][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.074696][T11977] R13: 00007ff9adae6038 R14: 00007ff9adae5fa0 R15: 00007ffe8c89cf58 [ 180.074759][T11977] [ 180.245756][T11975] loop0: detected capacity change from 0 to 256 [ 180.297705][T11848] team0 (unregistering): Port device team_slave_1 removed [ 180.303337][T11848] team0 (unregistering): Port device team_slave_0 removed [ 180.374586][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.393691][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.415126][T11930] team0: Port device team_slave_0 added [ 180.423804][T11930] team0: Port device team_slave_1 added [ 180.460022][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.472969][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.486262][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.490864][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.495015][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.507231][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.561248][T11930] hsr_slave_0: entered promiscuous mode [ 180.565738][T11930] hsr_slave_1: entered promiscuous mode [ 180.570234][T11930] debugfs: 'hsr0' already exists in 'hsr' [ 180.574252][T11930] Cannot create hsr debugfs directory [ 180.641180][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 180.711128][T11848] IPVS: stop unused estimator thread 0... [ 180.857235][T12014] loop5: detected capacity change from 0 to 512 [ 180.868083][T12014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.872152][T12014] EXT4-fs (loop5): 1 truncate cleaned up [ 180.882345][T12014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.009652][T12028] loop1: detected capacity change from 0 to 1024 [ 181.013607][T12028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.018826][T12028] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.040132][T12028] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 181.041445][T12028] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.049641][T12028] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3031: Invalid inode table block 0 in block_group 0 [ 181.051767][T12028] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 181.053184][T12028] EXT4-fs error (device loop1): ext4_quota_write:7430: inode #3: comm syz.1.3031: mark_inode_dirty error [ 181.062363][T12028] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 181.062468][T12028] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3031: Failed to acquire dquot type 0 [ 181.066042][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 181.067096][ C1] EXT4-fs (loop1): initial error at time 1785638786: __ext4_get_inode_loc:4886 [ 181.068331][ C1] EXT4-fs (loop1): last error at time 1785638786: ext4_quota_write:7430: inode 3 [ 181.076185][T12028] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3031: Invalid inode table block 0 in block_group 0 [ 181.086275][T12028] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 181.095204][T12028] EXT4-fs error (device loop1): ext4_ext_truncate:4557: inode #15: comm syz.1.3031: mark_inode_dirty error [ 181.101499][T12028] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.102016][T12028] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3031: Invalid inode table block 0 in block_group 0 [ 181.108967][T12028] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 181.114601][T12028] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 181.117948][T12028] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3031: Invalid inode table block 0 in block_group 0 [ 181.122131][T12028] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 181.127503][T12028] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.3031: mark_inode_dirty error [ 181.129342][T12028] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.129585][T12028] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 181.135100][T12028] EXT4-fs (loop1): 1 truncate cleaned up [ 181.137302][T12028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.181997][T12034] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.3042'. [ 181.195394][T12034] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 181.209890][T12034] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3042'. [ 181.253482][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.300927][T11930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.306996][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.308862][T11930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.311813][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.314793][T11930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.318059][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.319821][T11930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.323044][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.378113][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.414822][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.424084][T11847] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.425227][T11847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.430723][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.431790][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.523167][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 181.595041][T12077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.595831][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.742704][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.883521][T11930] veth0_vlan: entered promiscuous mode [ 181.898180][T11930] veth1_vlan: entered promiscuous mode [ 181.922741][T11930] veth0_macvtap: entered promiscuous mode [ 181.930813][T11930] veth1_macvtap: entered promiscuous mode [ 181.940234][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.945391][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.946099][T12130] xt_TCPMSS: Only works on TCP SYN packets [ 181.987150][T11848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.989209][T11848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.990725][T11847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.992073][T11847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.049525][T12137] syzkaller0: entered promiscuous mode [ 182.050390][T12137] syzkaller0: entered allmulticast mode [ 182.102714][T12141] xt_hashlimit: size too large, truncated to 1048576 [ 182.133235][T12143] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3058'. [ 182.334741][T12149] xt_hashlimit: size too large, truncated to 1048576 [ 182.405213][T12153] loop4: detected capacity change from 0 to 512 [ 182.406665][T12153] vfat: Unknown parameter 'i' [ 182.429632][T12153] loop4: detected capacity change from 0 to 512 [ 182.459254][T12153] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3061: iget: bad i_size value: 38620345925642 [ 182.461968][T12153] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.462164][T12153] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3061: couldn't read orphan inode 15 (err -117) [ 182.466057][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 182.467103][ C0] EXT4-fs (loop4): initial error at time 1785638788: ext4_orphan_get:1399: inode 15 [ 182.468529][ C0] EXT4-fs (loop4): last error at time 1785638788: ext4_orphan_get:1399: inode 15 [ 182.482654][T12153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.488676][T12156] loop1: detected capacity change from 0 to 1024 [ 182.491192][T12156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.494176][T12152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3061: bg 0: block 5: invalid block bitmap [ 182.498517][T12156] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.504305][T12156] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 182.505772][T12156] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.509554][T12153] EXT4-fs (loop4): shut down requested (0) [ 182.513354][T12156] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3052: Invalid inode table block 0 in block_group 0 [ 182.519115][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.520726][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.522682][T12156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 182.526048][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 182.527316][ C1] EXT4-fs (loop1): initial error at time 1785638788: __ext4_get_inode_loc:4886 [ 182.528768][ C1] EXT4-fs (loop1): last error at time 1785638788: ext4_reserve_inode_write:6435 [ 182.529165][T12156] EXT4-fs error (device loop1): ext4_quota_write:7430: inode #3: comm syz.1.3052: mark_inode_dirty error [ 182.541405][T12156] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.541526][T12156] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3052: Failed to acquire dquot type 0 [ 182.545179][T12156] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3052: Invalid inode table block 0 in block_group 0 [ 182.547635][T12156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 182.549259][T12156] EXT4-fs error (device loop1): ext4_ext_truncate:4557: inode #15: comm syz.1.3052: mark_inode_dirty error [ 182.551150][T12156] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3052: Invalid inode table block 0 in block_group 0 [ 182.553058][T12156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 182.554526][T12156] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 182.555899][T12156] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3052: Invalid inode table block 0 in block_group 0 [ 182.557899][T12156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 182.559876][T12156] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.3052: mark_inode_dirty error [ 182.561876][T12156] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 182.563603][T12156] EXT4-fs (loop1): 1 truncate cleaned up [ 182.573567][T12156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.587296][T12159] loop3: detected capacity change from 0 to 256 [ 182.604083][T12164] syzkaller0: entered promiscuous mode [ 182.608764][T12164] syzkaller0: entered allmulticast mode [ 182.623475][T12164] tipc: Enabling of bearer rejected, failed to enable media [ 182.625398][T12166] xt_TCPMSS: Only works on TCP SYN packets [ 182.706657][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.734536][T12174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.736184][T12174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.738762][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 182.829194][T12172] loop5: detected capacity change from 0 to 512 [ 182.899773][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 182.932516][T12172] EXT4-fs (loop5): 1 orphan inode deleted [ 182.941081][T12172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.968538][T12178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.993376][T12182] loop1: detected capacity change from 0 to 256 [ 183.088819][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.117902][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.139166][T12185] xt_hashlimit: size too large, truncated to 1048576 [ 183.310306][T12187] xt_hashlimit: size too large, truncated to 1048576 [ 183.312390][T12192] xt_hashlimit: size too large, truncated to 1048576 [ 183.453600][T12201] xt_TCPMSS: Only works on TCP SYN packets [ 183.500530][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 183.500648][ T28] audit: type=1326 audit(1785638789.413:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.507137][ T28] audit: type=1326 audit(1785638789.423:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.512809][ T28] audit: type=1326 audit(1785638789.423:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.521108][ T28] audit: type=1326 audit(1785638789.423:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.527896][ T28] audit: type=1326 audit(1785638789.423:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.542691][ T28] audit: type=1326 audit(1785638789.423:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.551888][ T28] audit: type=1326 audit(1785638789.423:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.563883][ T28] audit: type=1326 audit(1785638789.443:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12202 comm="syz.0.3078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f920a42e019 code=0x7ffc0000 [ 183.572636][T12205] syzkaller0: entered promiscuous mode [ 183.573496][T12205] syzkaller0: entered allmulticast mode [ 183.580892][T12205] tipc: Enabling of bearer rejected, failed to enable media [ 183.711597][T12210] syzkaller0: entered promiscuous mode [ 183.712523][T12210] syzkaller0: entered allmulticast mode [ 183.725049][T12210] tipc: Enabling of bearer rejected, failed to enable media [ 183.843402][T12217] loop4: detected capacity change from 0 to 512 [ 183.905361][T12222] syzkaller0: entered promiscuous mode [ 183.908346][T12222] syzkaller0: entered allmulticast mode [ 184.316661][T12227] smc: net device vlan1 applied user defined pnetid SYZ2 [ 184.317959][T12227] smc: net device vlan1 erased user defined pnetid SYZ2 [ 184.319257][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3088'. [ 184.324950][T12227] EXT4-fs: Ignoring removed nobh option [ 184.325873][T12227] EXT4-fs: quotafile must be on filesystem root [ 184.373623][ T28] audit: type=1326 audit(1785638790.283:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.5.3089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 184.377436][ T28] audit: type=1326 audit(1785638790.283:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.5.3089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad85e019 code=0x7ffc0000 [ 184.449548][T12233] xt_hashlimit: size too large, truncated to 1048576 [ 185.269719][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881071d3000: rx timeout, send abort [ 185.271111][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881071d3000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.333281][T12247] xt_hashlimit: size too large, truncated to 1048576 [ 185.385304][T12249] set_capacity_and_notify: 2 callbacks suppressed [ 185.385377][T12249] loop1: detected capacity change from 0 to 256 [ 185.447593][T12257] FAULT_INJECTION: forcing a failure. [ 185.447593][T12257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.453235][T12257] CPU: 1 UID: 0 PID: 12257 Comm: syz.3.3100 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.453292][T12257] Tainted: [W]=WARN [ 185.453299][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.453390][T12257] Call Trace: [ 185.453398][T12257] [ 185.453406][T12257] __dump_stack+0x1d/0x30 [ 185.453430][T12257] dump_stack_lvl+0x95/0xd0 [ 185.453469][T12257] dump_stack+0x15/0x1b [ 185.453488][T12257] should_fail_ex+0x25e/0x270 [ 185.453667][T12257] should_fail+0xb/0x20 [ 185.453742][T12257] should_fail_usercopy+0x1a/0x20 [ 185.453770][T12257] _copy_from_user+0x1c/0xb0 [ 185.453791][T12257] do_ipt_set_ctl+0x42a/0x970 [ 185.453819][T12257] nf_setsockopt+0x199/0x1b0 [ 185.453880][T12257] ip_setsockopt+0x102/0x110 [ 185.453906][T12257] udp_setsockopt+0x89/0xa0 [ 185.453930][T12257] sock_common_setsockopt+0x69/0x80 [ 185.453952][T12257] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.453981][T12257] __sys_setsockopt+0x184/0x200 [ 185.454017][T12257] __x64_sys_setsockopt+0x64/0x80 [ 185.454046][T12257] x64_sys_call+0x2327/0x3020 [ 185.454116][T12257] do_syscall_64+0x136/0x3c0 [ 185.454142][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.454163][T12257] RIP: 0033:0x7f3f0cf8e019 [ 185.454215][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.454233][T12257] RSP: 002b:00007f3f0b9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.454253][T12257] RAX: ffffffffffffffda RBX: 00007f3f0d215fa0 RCX: 00007f3f0cf8e019 [ 185.454343][T12257] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.454356][T12257] RBP: 00007f3f0b9e7090 R08: 00000000000002f8 R09: 0000000000000000 [ 185.454370][T12257] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000001 [ 185.454430][T12257] R13: 00007f3f0d216038 R14: 00007f3f0d215fa0 R15: 00007ffc8a03ab68 [ 185.454583][T12257] [ 185.493747][T12259] syzkaller0: entered promiscuous mode [ 185.494612][T12259] syzkaller0: entered allmulticast mode [ 185.558391][T12263] loop3: detected capacity change from 0 to 256 [ 185.826705][T12277] xt_TCPMSS: Only works on TCP SYN packets [ 185.988527][T12284] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.3107'. [ 186.525380][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3111'. [ 186.543458][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3111'. [ 186.638226][T12302] xt_hashlimit: size too large, truncated to 1048576 [ 186.652543][T12301] syzkaller0: entered promiscuous mode [ 186.653418][T12301] syzkaller0: entered allmulticast mode [ 186.838250][T12309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.847660][T12309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.858240][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3117'. [ 186.935091][T12319] xt_TCPMSS: Only works on TCP SYN packets [ 187.094338][T12328] loop1: detected capacity change from 0 to 512 [ 187.111553][T12328] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.113081][T12328] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 187.114915][T12328] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.116775][T12328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.118436][T12328] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.121222][T12328] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 187.123383][T12328] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3125: bad orphan inode 16 [ 187.125507][T12328] fserror_report: 24 callbacks suppressed [ 187.125559][T12328] loop1: lost filesystem error report for type 5 error -117 [ 187.129825][T12328] ext4_test_bit(bit=15, block=18) = 1 [ 187.132045][T12328] is_bad_inode(inode)=0 [ 187.132787][T12328] NEXT_ORPHAN(inode)=0 [ 187.133654][T12328] max_ino=32 [ 187.134397][T12328] i_nlink=2 [ 187.139024][T12328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.163317][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.184174][T12335] syzkaller0: entered promiscuous mode [ 187.185076][T12335] syzkaller0: entered allmulticast mode [ 187.329985][T12339] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3128'. [ 187.417709][T12345] xt_hashlimit: size too large, truncated to 1048576 [ 187.423866][T12341] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.3129'. [ 187.427122][T12341] netlink: 'syz.1.3129': attribute type 1 has an invalid length. [ 187.430017][T12341] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3129'. [ 187.602238][T12352] syzkaller0: entered promiscuous mode [ 187.603134][T12352] syzkaller0: entered allmulticast mode [ 187.692407][T12359] syzkaller0: entered promiscuous mode [ 187.693403][T12359] syzkaller0: entered allmulticast mode [ 187.781775][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.784687][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.789497][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 187.800857][T12365] xt_hashlimit: size too large, truncated to 1048576 [ 187.861174][T12372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.864206][T12372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.870042][ T23] dummy0: entered promiscuous mode [ 187.871531][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 187.874438][ T23] dummy0: left promiscuous mode [ 187.918892][T12375] x_tables: duplicate underflow at hook 3 [ 188.198405][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 188.254058][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 188.258993][T12406] loop4: detected capacity change from 0 to 512 [ 188.270801][T12406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.272819][T12406] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.285518][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.324607][T12419] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.325666][T12419] syzkaller1: linktype set to 776 [ 188.423375][T12430] syzkaller0: entered promiscuous mode [ 188.424639][T12432] FAULT_INJECTION: forcing a failure. [ 188.424639][T12432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.425771][T12430] syzkaller0: entered allmulticast mode [ 188.426959][T12432] CPU: 0 UID: 0 PID: 12432 Comm: syz.5.3159 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 188.426990][T12432] Tainted: [W]=WARN [ 188.426998][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.427010][T12432] Call Trace: [ 188.427016][T12432] [ 188.427024][T12432] __dump_stack+0x1d/0x30 [ 188.427123][T12432] dump_stack_lvl+0x95/0xd0 [ 188.427142][T12432] dump_stack+0x15/0x1b [ 188.427160][T12432] should_fail_ex+0x25e/0x270 [ 188.427235][T12432] should_fail+0xb/0x20 [ 188.427250][T12432] should_fail_usercopy+0x1a/0x20 [ 188.427274][T12432] _copy_from_iter+0xcc/0xe70 [ 188.427374][T12432] ? __alloc_skb+0x511/0x6f0 [ 188.427400][T12432] ? __alloc_skb+0x205/0x6f0 [ 188.427427][T12432] netlink_sendmsg+0x4a4/0x6f0 [ 188.427484][T12432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.427537][T12432] ____sys_sendmsg+0x532/0x580 [ 188.427558][T12432] ___sys_sendmsg+0x195/0x1e0 [ 188.427587][T12432] __x64_sys_sendmsg+0xd4/0x160 [ 188.427609][T12432] x64_sys_call+0x194c/0x3020 [ 188.427749][T12432] do_syscall_64+0x136/0x3c0 [ 188.427773][T12432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.427796][T12432] RIP: 0033:0x7ff9ad85e019 [ 188.427824][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.427843][T12432] RSP: 002b:00007ff9ac2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.427863][T12432] RAX: ffffffffffffffda RBX: 00007ff9adae5fa0 RCX: 00007ff9ad85e019 [ 188.427878][T12432] RDX: 0000000000048800 RSI: 0000200000000280 RDI: 0000000000000004 [ 188.427891][T12432] RBP: 00007ff9ac2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.427904][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.427985][T12432] R13: 00007ff9adae6038 R14: 00007ff9adae5fa0 R15: 00007ffe8c89cf58 [ 188.428004][T12432] [ 188.511236][T12436] loop5: detected capacity change from 0 to 1024 [ 188.520698][T12436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.538056][T12436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 188.539419][T12436] System zones: 0-1, 3-12 [ 188.540653][T12436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.545202][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 188.545216][ T28] audit: type=1400 audit(1785638794.453:871): avc: denied { write } for pid=12435 comm="syz.5.3161" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.592513][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.647207][T12421] loop4: detected capacity change from 0 to 2048 [ 188.705894][T12421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.724791][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.771458][T12463] loop4: detected capacity change from 0 to 256 [ 188.795599][T12465] netlink: 'syz.3.3169': attribute type 1 has an invalid length. [ 188.805315][T12465] veth0_to_batadv: entered promiscuous mode [ 188.807915][T12465] veth0_to_batadv: entered allmulticast mode [ 188.814689][ T28] audit: type=1400 audit(1785638794.723:872): avc: denied { read write } for pid=12464 comm="syz.3.3169" name="file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 188.818064][ T28] audit: type=1400 audit(1785638794.723:873): avc: denied { open } for pid=12464 comm="syz.3.3169" path="/14/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 188.824292][T12466] macvlan2: entered promiscuous mode [ 188.825161][T12466] macvlan2: entered allmulticast mode [ 188.875860][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 188.877603][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 188.878929][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 188.880274][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 188.931913][ T28] audit: type=1400 audit(1785638794.843:874): avc: denied { unmount } for pid=5127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.946583][T12472] loop3: detected capacity change from 0 to 4096 [ 188.951953][T12472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.085022][T12476] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.096280][T12476] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 189.211161][T12477] xt_hashlimit: size too large, truncated to 1048576 [ 189.463672][T12474] PM: suspend entry (deep) [ 189.982059][T11849] Filesystems sync: 0.503 seconds [ 190.027144][T12474] Freezing user space processes [ 190.441034][T12474] Freezing user space processes completed (elapsed 0.411 seconds) [ 190.442220][T12474] OOM killer disabled. [ 190.442849][T12474] Freezing remaining freezable tasks [ 190.445228][T12474] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 190.447127][T12474] printk: Suspending console(s) (use no_console_suspend to debug) [ 190.488064][T12474] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 190.488104][T12474] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 190.488189][T12474] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 190.488227][T12474] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 190.488353][T12474] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 190.488389][T12474] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 190.488504][T12474] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 190.488540][T12474] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 190.488611][T12474] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 190.488649][T12474] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 190.488849][T12474] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 190.488941][T12474] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 190.488982][T12474] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 190.489128][T12474] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 190.489171][T12474] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 190.489410][T12474] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 190.527619][T11843] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 191.054633][T12474] ACPI: PM: Preparing to enter system sleep state S3 [ 191.054746][T12474] ACPI: PM: Saving platform NVS memory [ 191.054790][T12474] Disabling non-boot CPUs ... [ 191.058929][T12474] smpboot: CPU 1 is now offline [ 191.063985][T12474] ACPI: PM: Low-level resume complete [ 191.064070][T12474] ACPI: PM: Restoring platform NVS memory [ 191.081020][T12474] Enabling non-boot CPUs ... [ 191.081274][T12474] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 191.085286][T12474] CPU1 is up [ 191.085450][T12474] ACPI: PM: Waking up from system sleep state S3 [ 191.087728][ T3720] ================================================================== [ 191.087765][ T3720] BUG: KCSAN: data-race in acpi_ut_trace / acpi_ut_trace_ptr [ 191.087806][ T3720] [ 191.087812][ T3720] read-write to 0xffffffff89406508 of 4 bytes by task 11837 on cpu 1: [ 191.087830][ T3720] acpi_ut_trace+0x44/0x180 [ 191.087858][ T3720] acpi_ns_build_internal_name+0x64/0x5d0 [ 191.087885][ T3720] acpi_ns_internalize_name+0x265/0x310 [ 191.087911][ T3720] acpi_ns_get_node_unlocked+0xed/0x2d0 [ 191.087931][ T3720] acpi_ns_get_node+0x76/0xc0 [ 191.087944][ T3720] acpi_get_handle+0xfd/0x180 [ 191.087958][ T3720] acpi_has_method+0x46/0x80 [ 191.087971][ T3720] acpi_pci_set_power_state+0x5d/0x190 [ 191.087987][ T3720] pci_power_up+0x40/0x3b0 [ 191.088002][ T3720] pci_pm_power_up_and_verify_state+0x29/0x130 [ 191.088016][ T3720] pci_pm_resume_noirq+0xcb/0x320 [ 191.088029][ T3720] dpm_run_callback+0x53/0x2f0 [ 191.088042][ T3720] device_resume_noirq+0x851/0x880 [ 191.088056][ T3720] async_resume_noirq+0x2c/0x40 [ 191.088069][ T3720] async_run_entry_fn+0x52/0x180 [ 191.088085][ T3720] process_scheduled_works+0x4d4/0x9a0 [ 191.088100][ T3720] worker_thread+0x569/0x750 [ 191.088115][ T3720] kthread+0x221/0x270 [ 191.088131][ T3720] ret_from_fork+0x146/0x330 [ 191.088147][ T3720] ret_from_fork_asm+0x1a/0x30 [ 191.088161][ T3720] [ 191.088165][ T3720] read-write to 0xffffffff89406508 of 4 bytes by task 3720 on cpu 0: [ 191.088175][ T3720] acpi_ut_trace_ptr+0x49/0x180 [ 191.088191][ T3720] acpi_ns_get_node+0x3c/0xc0 [ 191.088204][ T3720] acpi_get_handle+0xfd/0x180 [ 191.088218][ T3720] acpi_has_method+0x46/0x80 [ 191.088230][ T3720] acpi_pci_set_power_state+0x5d/0x190 [ 191.088244][ T3720] pci_power_up+0x40/0x3b0 [ 191.088259][ T3720] pci_pm_power_up_and_verify_state+0x29/0x130 [ 191.088272][ T3720] pci_pm_resume_noirq+0xcb/0x320 [ 191.088284][ T3720] dpm_run_callback+0x53/0x2f0 [ 191.088297][ T3720] device_resume_noirq+0x851/0x880 [ 191.088310][ T3720] async_resume_noirq+0x2c/0x40 [ 191.088323][ T3720] async_run_entry_fn+0x52/0x180 [ 191.088338][ T3720] process_scheduled_works+0x4d4/0x9a0 [ 191.088353][ T3720] worker_thread+0x569/0x750 [ 191.088367][ T3720] kthread+0x221/0x270 [ 191.088377][ T3720] ret_from_fork+0x146/0x330 [ 191.088390][ T3720] ret_from_fork_asm+0x1a/0x30 [ 191.088403][ T3720] [ 191.088406][ T3720] value changed: 0x00000003 -> 0x00000000 [ 191.088413][ T3720] [ 191.088415][ T3720] Reported by Kernel Concurrency Sanitizer on: [ 191.088425][ T3720] CPU: 0 UID: 0 PID: 3720 Comm: kworker/u8:73 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 191.088442][ T3720] Tainted: [W]=WARN [ 191.088447][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.088455][ T3720] Workqueue: async async_run_entry_fn [ 191.088473][ T3720] ================================================================== [ 191.120720][T11837] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 191.230077][T11832] usb usb1: PM: dpm_run_callback(): usb_dev_resume returns -107 [ 191.230116][T11832] usb usb1: PM: failed to resume async: error -107 [ 191.337142][T12474] OOM killer enabled. [ 191.337711][T12474] Restarting tasks: Starting [ 191.369363][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 191.400142][T12474] Restarting tasks: Done [ 191.400918][T12474] random: crng reseeded on system resumption [ 191.401898][T12474] PM: suspend exit [ 191.544077][ T28] audit: type=1400 audit(1785638797.457:875): avc: denied { write } for pid=12471 comm="syz.3.3170" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.581490][T12472] xt_hashlimit: size too large, truncated to 1048576 [ 191.745778][T11930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.