last executing test programs: 34.104456151s ago: executing program 0 (id=1154): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001489e0365b276e00010000000000000000000500000a914226bcad55a8220f31e55c85c202ce5e52d6a6110001000000000000fa4504000000f0d20000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x8}, 0x18) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f0000000100)) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_mptcp(0x2, 0x1, 0x106) 33.150194875s ago: executing program 0 (id=1163): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000020000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 32.997068348s ago: executing program 0 (id=1168): madvise(&(0x7f00003c7000/0x4000)=nil, 0x4000, 0x6c) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) 32.877210169s ago: executing program 0 (id=1171): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000480)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ff303030303032fd33a1ddfe6717c3d234022f30303030302c6e6f606f74732cb7f973636172642c6e66733d6e6f738f176d945097ec0dd5eadb028dfd7ea6ef584b372f5d74d4250c9b6f8f839859f3492898b4b06691432b63bab01154fdffffffffffffff5b47720a85ad56c37ed0", @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x291, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x2, 0x80805, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6, 0x10}, 0xc) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "57033e", 0x28, 0x3a, 0xff, @private0, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback}}}}}}, 0x0) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x9, &(0x7f0000000240)) 32.274169058s ago: executing program 0 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000003a00", @ANYRESDEC=r1], 0xffdd) 32.010850652s ago: executing program 0 (id=1183): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000002000000bc1cd3233561e3c8b44ea8c6490f50b2000000005cd3c19f35dc812fc9129ee858d03b57fd6ca37a"], 0x2a6602) r1 = socket(0xa, 0x5, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x48c0, 0x0) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000140)={0xc029, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)=""/15, 0xf}, {0x0}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f0000000340)=""/216, 0xd8}], 0x5, &(0x7f00000007c0)=""/242, 0xf2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.977324232s ago: executing program 32 (id=1183): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000002000000bc1cd3233561e3c8b44ea8c6490f50b2000000005cd3c19f35dc812fc9129ee858d03b57fd6ca37a"], 0x2a6602) r1 = socket(0xa, 0x5, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x48c0, 0x0) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000140)={0xc029, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)=""/15, 0xf}, {0x0}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f0000000340)=""/216, 0xd8}], 0x5, &(0x7f00000007c0)=""/242, 0xf2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.053891698s ago: executing program 2 (id=1354): mkdir(&(0x7f0000000bc0)='./bus\x00', 0x109) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(&(0x7f0000000480)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 8.701797743s ago: executing program 5 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0xef, 0x0, &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwKWJISHKBjAxGXNn7p1O50dnWmpr288nGTjnzr3n3O/cc2bOvaf3BrBrjaf/JBF/i4j7EXGgnl25wnj9vyePlmafPlqajUq1euGXpLbe4zSfybfbl2UmChGFj5KWAusWbt66MlMul25EpZafWrz6/tTCzVsvzl+duVy6XLo2fe7cmdOnzr48/dKKsiNiuGdQHepL43o89uH1o0dev3jvzdnB1sKa4+gq3+rXSs9VI/9su3iuubwdYH9TOmmP6/am7gx9G86aYTHt/0vl4xe3eoeATVOtVqtD3d+uVFvdaVsCbFtJbPUeAFsj/6FPz3/zV31JcTOGH1vu4fn6CdDjR0vV2zE4+6QR/2AUsnWKLee3qVXGTGsyHhHvVn77NH1Fv9chAACewbfns2FgEi3jv0Icblrv79kcymhE/CMiDkbEPyPiUET8K2LFuiskEdVV6j/UuqBR/1fZLELhwXpj60c6/nslm9vKX1m9+SqjA1luf0Q+YC6dzD6TiSgOXZovl051KX9Pj/qbx3/pK60/Hwtm+/FgsGWwOTezOLO+aNs9vBMxNtgafzKYHrh8GieJiCMRMbaGckeb0vMvfH60kWk5regdf021w5TehsyfVT+LeL5+/CvRiH9kxSRi0jw/WWibn5wajnLp5FTaCk523Mnvf7j7Vrf6e8b/9U+tm7x29psLzx54Jj3+e5vaf+Tzt8vxjyYRSWO+diGiOrC2Ou7++HGt3PET7e+tt/3vSd6ppfP+9cHM4uKNUxF7kjfal08vb5vn8/XT+CdOdO7/B7Nt0k/i3xGRNuL/RMR/IwbyfT8WEccjokNoDd+9+v/3ur3XZ/v/06Txz3X8/kuydlA7/svz9X0m8vLTJQNXjt1/OtZ54j6L/8Dqx/9MLTWRLen8/Zes+Irod0834CMEAACAv7xC1P72vzDZSBcKk5P1a0CHYm+hfH1h8X8RcW2ufo/AaBQLl+bLpfyC3GgUk/z652hTfrolfzq7bvzJwEgtPzl7vTy31cHDLrev1ueTtv6f+nmN13mBbWgH3YcGrFGv/n/43ibtCLDp/P7D7tXU/7s92aLiL2VgZ/L7D7tXp/5/O75Y9d4F3xmw/VX1ZdjVVu//vZ+3CWxfg/F2I1277bnj3bbATtT999+ZAexgvW+SH1rzvf/LiepQ57eGo8MTA4bXVUXPxEiHurYkkY6sNrDAYkT0t/LIeqrIh4Ddn/BQWFuBQ9H+1kCstlXS+TkOEVHpulX6qfTcn8uH+238pRvJ0/qDMnsEmD8TZaObzZfL/bTY5+Hukvi93+bnfB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhR/ggAAP//EXfPWQ==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ppoll(&(0x7f0000000180)=[{r4}], 0x1, &(0x7f00000002c0), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.894188084s ago: executing program 5 (id=1362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in6=@private1, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x2, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 5.870872204s ago: executing program 1 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000300)={&(0x7f0000000b00)=@delchain={0x24, 0x5f, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 5.859069324s ago: executing program 2 (id=1365): bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.770088246s ago: executing program 1 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080000000190780a010102ac1414aa050090780100000047000000000000000011000064010100ffffffff440c03010a0101014e210000443cbc018f5ec6e0000001000000000000000000000000ac1414000000000000000000000000080000000000000000ac1e00010000000000000000fffffffc0000001d000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 5.769814546s ago: executing program 2 (id=1368): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000080a000000000000000000001420000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.548226909s ago: executing program 2 (id=1370): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000640), 0x6e, 0x0}}, {{&(0x7f0000000a80), 0x6e, 0x0, 0xfffffffffffffe22, &(0x7f0000000400)}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/136, 0x88}], 0x2, &(0x7f0000000700)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000500), 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/55}, {&(0x7f00000009c0)=""/127}], 0x0, &(0x7f0000000b00)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred]}}, {{&(0x7f0000000d00), 0x0, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/139}, {&(0x7f0000000e40)=""/249}, {&(0x7f0000000f40)=""/77}, {&(0x7f0000000fc0)=""/122}], 0x0, &(0x7f0000001180)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000001200), 0x0, &(0x7f0000002540)=[{&(0x7f0000001280)=""/81}, {&(0x7f0000001300)=""/232}, {&(0x7f0000001400)=""/4096}, {&(0x7f0000002400)=""/10}, {&(0x7f0000002440)=""/117}, {&(0x7f00000024c0)=""/128}], 0x0, &(0x7f00000025c0)=[@cred, @cred, @cred, @cred, @rights, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000002680), 0x0, &(0x7f0000002980)=[{&(0x7f0000002700)=""/143}, {&(0x7f00000027c0)=""/46}, {&(0x7f0000002800)=""/231}, {&(0x7f0000002900)=""/118}], 0x0, &(0x7f00000029c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred]}}, {{&(0x7f0000002b00)=@abs, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b80)}]}}, {{&(0x7f0000002c00)=@abs, 0x0, &(0x7f00000046c0)=[{&(0x7f0000002c80)=""/202}, {&(0x7f0000003300)=""/4096}, {&(0x7f0000004300)=""/92}, {&(0x7f0000004380)=""/25}, {&(0x7f00000043c0)=""/159}, {&(0x7f0000004480)=""/11}, {&(0x7f00000044c0)=""/189}, {&(0x7f0000004580)=""/150}, {&(0x7f0000004640)=""/116}], 0x0, &(0x7f0000004780)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}], 0x3, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x62040200) 5.047327956s ago: executing program 5 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a80)=@newlink={0x38, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x51042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macvlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="340000001020ce5c7400010800005133d82d079ffb610000f1b28a6716400142c550c8e459c4393832e44ffd9ae3d84c98faa354f63e6560110c2a946116ba3c633f3631653d42fe899d5c008261b21beec47a", @ANYRES64=r4, @ANYBLOB="80400100000001000c002b8008000100", @ANYRESDEC=0x0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}}) r7 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0x0, 0x1e8, 0xf8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0x0, 0xff, 0x0, 0xff000000], 'pimreg1\x00', 'wg1\x00', {}, {0xff}, 0x1d, 0x5, 0x1, 0x10}, 0x0, 0xa8, 0xf0, 0x7000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x3f, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {0xff}, {0xff}}, 0x0, 0xf0, 0x120, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x6, 0x5ea, 0x2}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x771, &(0x7f0000001280)="$eJzs3M9rHGUfAPDvTLJJm+Z9Ny+84I+DCC1YKN0kzaU9NV68FQoFrzUkmxAyyYbspnZjwdazUJuLgiDi2aMXD0Kpf4A3KSh4F0RrBMXLymx+1Ka7m02TZrX9fGCy32eemfk+393Jww7sTADPrVfzP0nEcERcjoji1vo0Igaa0bGIm5vbbTy4MZ0vSTQaV35O8t1io1HcOVay9XoimrvEixFxrxBx5r3H81brawtTWVZe2WqP1haXR6v1taH5xam58lx5aXziwtj5iYnzYxN71vBCl7WeevPC8TvfvLG+/u0Xtduv9J9NYrJZd2zV1uVh9mXzPSnE5K71S08jWQ8lvR4AAABdyb/n90VEf/NbajH6mlFrX/5+pEMDAAAADkljsAEAAAA885Lo0HmsUycAAADw77D9O4Dte3s73wc7cOi/P/jp9YgYaZW/v3kPccSxKETE0EbyyJ0JyeZucCA3b0XE3cnd599n+Rl284DHHtvVfvQe6cP/X2L/7ubzz2Sr+SfdmX+ixfzTv/3shANqP/89zN/XZv673GWOrz55qdA2/62Il/tb5U928idt8r/VZf7b6+/f2WubVvn/nmv7+RBnH38+xOTsfNbx8QP3/jx9v11fXv9Qu/zNo7b+/POu5T0r3/TOxq8L7eaSPP/pk50//1bvf35OfLA1jjQi7my95u31XTlOLn73daf6ZyIaT/L5f9pl/T98Pni9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgKY2I4UjS0k6cpqVSxImI+H8MpVmlWjszW1ldmsn7IkaikM7OZ+WxiChutpO8Pd6MH7bP7WpPRMT/vj++mXQ+K5emK9lMr4sHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgx4mIGI4kLUVEGhG/FdO0VIro72LfwSMYHwAAAHBIRno9AAAAAOCpc/0PAAAAz74W1/+FbvZLnsJYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfW5UuX8qWx8eDGdN6euVZfXahcOztTri6UFlenS9OVleXSXKUyl5VL05XFvY6XVSrL4xdi9fporVytjVbra1cXK6tLtavzi1Nz5avlwpFUBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH4NN5ckLUVE2ozTtFSK+E9EjEQhmZ3PymMR8d+IuF8sDObt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgENXra8tTGVZeUUgEBxZ8G5E/AOG0SHo9cwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvVOtrC1NZVl6p9nokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6YxIR+fJa8dTwrs6+geSPYh4MRMTbH1/58PpUrbYyHjGQ/LKzvvbR1vpzPSkAAAAAngcX97Px9nX69nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAt6r1tYWpLCuvHCy4GPW1RtJmm17XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJm/AgAA///ossUV") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="851700002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @private=0xa010103}}}, 0x108) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty}}}, 0x108) 4.308212127s ago: executing program 5 (id=1376): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000001940)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r0, &(0x7f00000000c0), 0x0, 0x0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x1f, 0x0, 0x50}, 0x80) 4.195204209s ago: executing program 3 (id=1379): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x1000000000000, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c0003c3bfa30000000000000703000020feffff7a0bf0fff8ffffff71a4f0ff000000006c040000000000006d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000041000000b7000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd5ef5681b36a30c6471a4bc4d82e4fee5bef7af9aa0d7f300c095199fe3ff31e9883a2a98e64e39732c9cc00eec363e4a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe3326a404000000000000006d31cb467600ade7ee63e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62f84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49e7e383dc5049036b98fb685123b2731514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59601894183a0f95b72df859d5cf25a02a9f6ebb047b96d338666590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c0200a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d14017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744dccc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19fa367256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08c63b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a9245f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31cb6b9ce97f03ca91a01ba2c60ca99e8ebc15ece1ff1675767999d146aef7799738b292fd64bbca48568304b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c655a22d490300800a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d99000518a130f9d01c4b45294fbba468df3e1b393cb4e62e7545010000000000000094bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58588cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d9953243e2bb42b197cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1021829f1a57d3f18f4edaeb5d37918e6fddc785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db6019037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2b8100000000000000f5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f3366bca2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6e0e0d383ffce01881a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c71411c928d8b894d9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f24b72edcff33a40c1b791830ac2478734c8dc0c40ad4072c08dbcfbbb8dc071897d76a410dab1dc7d2aa509b9ef21ac2b2389c2aac7048addbac53cedba2c20fbe18acd5b546102e3e3af296681b0db7ce9b878024bcd504480de0a65df48ae310633c9f7accfa2a5527af3df8cdbc2817cae9b6ff827ea5f850a23fc0f46650d99eaad66119015ef840893fc3348d4fbce1b6b6906bcddff1e825d923b64fd383b1e776a566f2b702f2f4a464ecf3408ed97ffe8b1c813713f1712c48be3ebe6ad7c24c7467c7474c589a08f883a5e7bda74fc0c741eb2bc408a4a9b0b66bec9bee32d7f620942258a7f5cafa2e3bd7b2197c3c77df319e494ef46dfc4eae680d219536f0aa8b1ba291eb2abb0adf8154e00000000000000000000000000000000000046cb14b77f134ec5857b2e683fe6d5cccbf99508e8c8404863528c24da235923f18de34b48e89125a20a216836f6bcd1efc1dd74ac924d8ecfa6fe5f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.156711309s ago: executing program 3 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="8958c2420000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0x1003, &(0x7f0000004000)=""/4099, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000001010400000000000000000200000024000180030001e8708f0bf5d7da8008000100e000000108000200e00000010c0002800500010000ddc0f1437fc7a5a7be2084cb00f527fe12b33bce330678f1d56be5c6cb01ebf9"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x569c02, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0x8ffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r7, r7, 0x0, 0xe3aa6ea) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) 3.882189573s ago: executing program 1 (id=1381): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6, 0x1a}, 0x28) 2.944140807s ago: executing program 1 (id=1383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000001000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8fffffdb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.885961968s ago: executing program 4 (id=1384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000740)=""/174, &(0x7f0000000800)=0xae) (async, rerun: 32) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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") (rerun: 64) 2.573574362s ago: executing program 1 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb, r3}, 0x38) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}}, 0x4040000) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000030181000000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x4, 0x0, &(0x7f00000003c0)="131c8701", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r5, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 2.462801884s ago: executing program 4 (id=1386): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getpid() rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x80, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x917, 0xf2da}, 0x800, 0x10001, 0xda, 0x5, 0x400d, 0xb42, 0xe, 0x0, 0x7fff, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'tunl0\x00', {}, {}, 0xff, 0x2, 0x16}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "07a80355d28bbcff9b5a838ad1d898e7f3872ead90a72898f058d8d95a35"}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff, 'ip6erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x21, 0x1, 0xa}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xfe000000, 0x7f], 0x1}}, @common=@ttl={{0x28}, {0x2, 0x40}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @private}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', r2, 0x2f, 0xad, 0x36, 0x0, 0x0, @mcast2, @mcast2, 0x80, 0x8000, 0x7, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x11c) close(r3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.336429685s ago: executing program 2 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000649ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x61) rmdir(0x0) 2.330413486s ago: executing program 5 (id=1388): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0x6) r1 = msgget$private(0x0, 0x7ac) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000013032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 2.190006388s ago: executing program 1 (id=1389): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpgrp(0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xd0ff}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x8001) 1.937487362s ago: executing program 3 (id=1390): r0 = getpid() r1 = creat(&(0x7f0000000040)='./file0\x00', 0x11f) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x3ce57dcc}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7ff, 0xe}, 0x10fcc8, 0x10001, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x74, 0x3ff, 0x3, 0xf, 0x341d162f, 0x8, "90c0ec9151d2a54e17050981e797d6d384610ac4c7c734a5c8e0687c400f682774d2519992c93666d1262e5c81430b4c93ed124eb22bc46a74846cee978422ea4782bbed305b99fad459a9e756febd0891332cd6519622b286fb4078f444d0b288ac6ffc242bfd04031469ba6fcdd2e677785cb9"}}, 0x18c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 0x5e}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="427d1199acd1"}]}, 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x20040090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESOCT=r1], 0x48}}, 0x4000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1aca, 0x1f480, 0x0, 0x396}) mknod(&(0x7f0000000100)='./file0\x00', 0x80, 0xfffffffd) 1.211066772s ago: executing program 2 (id=1391): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x80000000}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0x10], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendto$inet6(r3, &(0x7f0000000240)="c2", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e26, 0xf, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x2, @perf_config_ext={0x9, 0x80000000}, 0x40, 0x0, 0x10000, 0x6, 0x1, 0x6, 0x51ba, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r5, &(0x7f0000000fc0)=""/224, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x670, 0x1c8, 0x1c8, 0x1c8, 0x468, 0xf8, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, &(0x7f0000000700), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @common=@dst={{0x48}, {0x8, 0x1, 0x1, [0x9, 0x9, 0x401, 0x9, 0x6, 0x0, 0x2, 0x9, 0x3, 0x2, 0x6, 0x6, 0xfffd, 0x1, 0x3, 0x9], 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@empty, 0x8, 0x36}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8c, 0x20}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@mcast2, 0x29, 0x1c}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xffffffff], 'bridge0\x00', 'syz_tun\x00', {0xff}, {}, 0x2, 0x4, 0x1}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"fe0d"}}, @common=@icmp6={{0x28}, {0x11, '=L'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x36, 0x2, @ipv4=@loopback, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x2}, 0x203, 0xe7e, 0x0, 0x3, 0x4, 0x43, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1000a, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) socket$inet6(0xa, 0x2, 0x6) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x2) 751.008089ms ago: executing program 4 (id=1392): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x8001, @private2, 0x9}]}, &(0x7f0000000180)=0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, &(0x7f0000000500)=0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x107) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0xb1, 0x2, 0x1000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="0000944c6802885ee602d43a4122aac4"}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x800000000000000, 0x0, 0x20041004}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', r7, r4, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x178, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in=@local, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d4, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x1, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x7a, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x170, 0x80, "210466d38547aa140db9a200970d05726a26834027e3000000c538c7cb7ade0f521cafcf8d53fac4aa4b282b5b39"}}, @offload={0xc, 0x1c, {r8}}]}, 0x178}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 718.44554ms ago: executing program 3 (id=1393): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) 671.41605ms ago: executing program 3 (id=1394): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x689}], 0x2}, 0x5) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 650.62617ms ago: executing program 4 (id=1395): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000a14010027bd0000fedbdf2508000100010000000800150000000000"], 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0702000000000000000001000000040008801c00048050c4470d6cd629f7d2e1e90500030001010000180003000000000005000300010000000800010003"], 0x44}}, 0x400c800) (async) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x1}, 0x1}) (async) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) (async) syz_emit_ethernet(0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6710000000a62f01fe8000000000000000000000000000aaff0200000000000000000000000000013a0a04"], 0x0) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9], 0xbb8}}, 0x20008000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 522.018822ms ago: executing program 4 (id=1396): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x581242, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="010000000000fedbdf250300000004ee00906d9c5f5ca9cbcc89a500a2da6fff0f374c87950feed75e085bfb13abdd2a08f82d52a0f84f4398fbbbc56188d9dd41dc160862ab4512f7968601ad4f239adc64b57951f234492c7d9056904ebf5b37714582aa0cf8686d1d34d25589be497bb7270022260698918f07f14c4a18ff6182daf6ccad8b8f99836fef358fbf88c2f48cf3196715b36530d54ef8d85b4d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xbe7b67b710869515) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet_udp(0x2, 0x2, 0x0) 370.684364ms ago: executing program 4 (id=1397): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0xf4) (async) r1 = creat(0x0, 0xf4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1e054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x4, @perf_config_ext={0x0, 0x5e}, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1e054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffe, 0x4, @perf_config_ext={0x0, 0x5e}, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010003704000000a68e3226800000000060f28d638d56c35cc4e08e0ab20d173c412044f9e431f5ecfea6a72bcb37403e97cf2f6cc6c45105af1ce4ff7dbf352764ba3292be8d41ab27ed7135dc107ebf26562fd49f89c6d81bdb556f8ca8b406007c68cb6d944718f5cc3ab7d4ea665186259b22b60c76b81c213858d51cd1a1ee1051a407c00e07796ba08edc3452c1f9fdb7b129e88c1166b63fffd9f8dbcf18ea067c6cafe39802d244a289eef00504e818aa8b5d00", @ANYRES32=0x0, @ANYBLOB="83000500012c00001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40850) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) (async) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) pipe(0x0) (async) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x0, 0x3f}, 0x28) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) 111.123058ms ago: executing program 5 (id=1398): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES16=0x0, @ANYBLOB="0a0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c8c1}, 0x0) 0s ago: executing program 3 (id=1399): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) kernel console output (not intermixed with test programs): l free blocks count 0 [ 204.033485][ T30] EXT4-fs (loop4): Free/Dirty block details [ 204.052752][ T30] EXT4-fs (loop4): free_blocks=0 [ 204.067099][ T30] EXT4-fs (loop4): dirty_blocks=160 [ 204.081696][ T30] EXT4-fs (loop4): Block reservation details [ 204.094194][ T30] EXT4-fs (loop4): i_reserved_data_blocks=160 [ 204.155419][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 204.178250][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.194545][ T6627] xt_CT: No such helper "syz1" [ 204.315150][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 204.324089][ T6627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.899'. [ 204.725884][ T6649] loop0: detected capacity change from 0 to 512 [ 204.770902][ T6649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.821354][ T6649] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.905: iget: bad i_size value: 38620345925642 [ 204.851372][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 204.866303][ T6649] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.868999][ T6649] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.905: couldn't read orphan inode 15 (err -117) [ 204.878451][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 204.878594][ C1] EXT4-fs (loop0): initial error at time 1782536725: ext4_orphan_get:1399: inode 15 [ 204.878868][ C1] EXT4-fs (loop0): last error at time 1782536725: ext4_orphan_get:1399: inode 15 [ 204.880671][ T6627] loop3: detected capacity change from 0 to 4096 [ 204.910539][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 204.924795][ T6649] loop0: lost filesystem error report for type 5 error -117 [ 204.947864][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.978071][ T6647] FAULT_INJECTION: forcing a failure. [ 204.978071][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 204.980471][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.020618][ T28] audit: type=1400 audit(1782536726.086:836): avc: denied { write } for pid=6626 comm="syz.3.899" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.024852][ T6647] CPU: 0 UID: 0 PID: 6647 Comm: syz.2.904 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 205.024972][ T6647] Tainted: [W]=WARN [ 205.025001][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.025057][ T6647] Call Trace: [ 205.025086][ T6647] [ 205.025110][ T6647] __dump_stack+0x1d/0x30 [ 205.025193][ T6647] dump_stack_lvl+0x95/0xd0 [ 205.025339][ T6647] dump_stack+0x15/0x1b [ 205.025404][ T6647] should_fail_ex+0x25e/0x270 [ 205.025510][ T6647] should_failslab+0x8c/0xb0 [ 205.025583][ T6647] __kmalloc_noprof+0xd4/0x4a0 [ 205.025658][ T6647] ? lwtunnel_state_alloc+0x1d/0x30 [ 205.025762][ T6647] ? lwtunnel_state_alloc+0x1d/0x30 [ 205.025900][ T6647] ? __nla_parse+0x40/0x60 [ 205.026006][ T6647] lwtunnel_state_alloc+0x1d/0x30 [ 205.026135][ T6647] ip_tun_build_state+0xc8/0x3d0 [ 205.026234][ T6647] lwtunnel_build_state+0x127/0x200 [ 205.026330][ T6647] fib_nh_match+0x1eb/0xa30 [ 205.026428][ T6647] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 205.026581][ T6647] ? fib_table_delete+0x15c/0x740 [ 205.026780][ T6647] fib_table_delete+0x468/0x740 [ 205.026873][ T6647] inet_rtm_delroute+0x173/0x1f0 [ 205.026995][ T6647] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 205.027093][ T6647] rtnetlink_rcv_msg+0x64b/0x720 [ 205.027266][ T6647] netlink_rcv_skb+0x11e/0x220 [ 205.027331][ T6647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.027459][ T6647] rtnetlink_rcv+0x1c/0x30 [ 205.027585][ T6647] netlink_unicast+0x5a7/0x680 [ 205.027704][ T6647] netlink_sendmsg+0x5be/0x6f0 [ 205.027831][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.027912][ T6647] ____sys_sendmsg+0x532/0x580 [ 205.028019][ T6647] ___sys_sendmsg+0x195/0x1e0 [ 205.028305][ T6647] __x64_sys_sendmsg+0xd4/0x160 [ 205.028412][ T6647] x64_sys_call+0x194c/0x3020 [ 205.028548][ T6647] do_syscall_64+0x136/0x3c0 [ 205.028647][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.028827][ T6647] RIP: 0033:0x7efce3dace59 [ 205.028890][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.028959][ T6647] RSP: 002b:00007efce27ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.029025][ T6647] RAX: ffffffffffffffda RBX: 00007efce4025fa0 RCX: 00007efce3dace59 [ 205.029077][ T6647] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 205.029138][ T6647] RBP: 00007efce27ff090 R08: 0000000000000000 R09: 0000000000000000 [ 205.029234][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.029279][ T6647] R13: 00007efce4026038 R14: 00007efce4025fa0 R15: 00007fff8ca73618 [ 205.029352][ T6647] [ 205.043996][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.345268][ T28] audit: type=1400 audit(1782536726.156:837): avc: denied { write } for pid=6648 comm="syz.0.905" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.368672][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.378259][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.387629][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.398526][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.407395][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.415548][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.424576][ T6647] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 205.638101][ T114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 205.651647][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.745684][ T114] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 196 with error 28 [ 205.763815][ T114] EXT4-fs (loop0): This should not happen!! Data will be lost [ 205.763815][ T114] [ 205.805635][ T114] EXT4-fs (loop0): Total free blocks count 0 [ 205.826018][ T114] EXT4-fs (loop0): Free/Dirty block details [ 205.852713][ T114] EXT4-fs (loop0): free_blocks=0 [ 205.891102][ T114] EXT4-fs (loop0): dirty_blocks=196 [ 205.909289][ T114] EXT4-fs (loop0): Block reservation details [ 205.930558][ T114] EXT4-fs (loop0): i_reserved_data_blocks=196 [ 206.091437][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 206.473960][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 206.519984][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.597615][ T6683] loop2: detected capacity change from 0 to 512 [ 206.647399][ T6687] loop3: detected capacity change from 0 to 1024 [ 206.672510][ T6683] netlink: 144 bytes leftover after parsing attributes in process `syz.2.913'. [ 206.696953][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.720148][ T28] audit: type=1400 audit(1782536727.786:838): avc: denied { append } for pid=6682 comm="syz.2.913" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.744162][ T28] audit: type=1400 audit(1782536727.786:839): avc: denied { write } for pid=6686 comm="syz.3.914" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.897095][ T6698] loop4: detected capacity change from 0 to 128 [ 206.926697][ T6698] EXT4-fs: Ignoring removed nobh option [ 206.952788][ T6698] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.994012][ T6698] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.130235][ T6703] netlink: 56 bytes leftover after parsing attributes in process `syz.4.917'. [ 207.139345][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 207.178068][ T6703] netlink: 31 bytes leftover after parsing attributes in process `syz.4.917'. [ 207.239394][ T6703] netlink: 31 bytes leftover after parsing attributes in process `syz.4.917'. [ 207.369854][ T6705] xt_CT: No such helper "syz1" [ 207.420358][ T28] audit: type=1400 audit(1782536727.846:840): avc: denied { read } for pid=6682 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.440175][ T28] audit: type=1400 audit(1782536727.956:841): avc: denied { create } for pid=6695 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.459663][ T28] audit: type=1400 audit(1782536727.966:842): avc: denied { ioctl } for pid=6695 comm="syz.4.917" path="socket:[14760]" dev="sockfs" ino=14760 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.459730][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 207.493126][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.919'. [ 207.502155][ T28] audit: type=1400 audit(1782536728.146:843): avc: denied { write } for pid=6695 comm="syz.4.917" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.524962][ T28] audit: type=1400 audit(1782536728.276:844): avc: denied { map } for pid=6695 comm="syz.4.917" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 207.530522][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.776983][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.070959][ T6702] loop2: detected capacity change from 0 to 512 [ 208.507802][ T28] audit: type=1400 audit(1782536728.356:845): avc: denied { execute } for pid=6695 comm="syz.4.917" path="/161/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.589631][ T6716] tipc: Enabling of bearer rejected, failed to enable media [ 208.616978][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.716872][ T6707] loop0: detected capacity change from 0 to 4096 [ 208.801694][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.808949][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 209.058287][ T6739] batadv0: entered promiscuous mode [ 209.081316][ T6739] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 209.127041][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.729195][ T6754] loop0: detected capacity change from 0 to 512 [ 209.784368][ T6754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.818846][ T6754] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.932: iget: bad i_size value: 38620345925642 [ 209.833876][ T6754] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.836572][ T6754] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.932: couldn't read orphan inode 15 (err -117) [ 209.846093][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 209.846328][ C1] EXT4-fs (loop0): initial error at time 1782536730: ext4_orphan_get:1399: inode 15 [ 209.846569][ C1] EXT4-fs (loop0): last error at time 1782536730: ext4_orphan_get:1399: inode 15 [ 209.886707][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.893045][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 210.066907][ T6754] loop0: lost filesystem error report for type 5 error -117 [ 210.220895][ T6758] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 210.234906][ T6758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.242549][ T6759] vhci_hcd: connection closed [ 210.242565][ T6758] vhci_hcd vhci_hcd.0: Device attached [ 210.272061][ T49] vhci_hcd vhci_hcd.4: stop threads [ 210.288537][ T49] vhci_hcd vhci_hcd.4: release socket [ 210.309666][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 210.419773][ T6754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.451925][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 210.451939][ T28] audit: type=1400 audit(1782536731.516:848): avc: denied { write } for pid=6752 comm="syz.0.932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.559858][ T6779] xt_CT: No such helper "syz1" [ 210.631166][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 210.640046][ T6788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.943'. [ 211.479039][ T6095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 211.522405][ T6095] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 396 with error 28 [ 211.570383][ T6095] EXT4-fs (loop0): This should not happen!! Data will be lost [ 211.570383][ T6095] [ 211.589683][ T6788] loop3: detected capacity change from 0 to 4096 [ 211.599131][ T6095] EXT4-fs (loop0): Total free blocks count 0 [ 211.626269][ T6095] EXT4-fs (loop0): Free/Dirty block details [ 211.642911][ T6095] EXT4-fs (loop0): free_blocks=0 [ 211.658963][ T6095] EXT4-fs (loop0): dirty_blocks=396 [ 211.668715][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.681940][ T6095] EXT4-fs (loop0): Block reservation details [ 211.688394][ T6095] EXT4-fs (loop0): i_reserved_data_blocks=396 [ 211.694746][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.698780][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 211.721361][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.722719][ T28] audit: type=1400 audit(1782536732.786:849): avc: denied { write } for pid=6778 comm="syz.3.943" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.962723][ T6826] netlink: 83 bytes leftover after parsing attributes in process `syz.1.957'. [ 211.995609][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.054773][ T28] audit: type=1326 audit(1782536733.126:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.098504][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.111890][ T28] audit: type=1326 audit(1782536733.126:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.139707][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.172041][ T28] audit: type=1326 audit(1782536733.146:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.177337][ T6816] loop0: detected capacity change from 0 to 512 [ 212.200361][ T28] audit: type=1326 audit(1782536733.146:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.235752][ T28] audit: type=1326 audit(1782536733.146:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.264061][ T28] audit: type=1326 audit(1782536733.146:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.289477][ T28] audit: type=1326 audit(1782536733.296:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.314868][ T28] audit: type=1326 audit(1782536733.296:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.1.960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5f3fce59 code=0x7ffc0000 [ 212.465605][ T6816] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.952: corrupted inode contents [ 212.491354][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.493703][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 212.509327][ C0] EXT4-fs (loop0): initial error at time 1782536733: ext4_do_update_inode:5742: inode 16 [ 212.519204][ C0] EXT4-fs (loop0): last error at time 1782536733: ext4_do_update_inode:5742: inode 16 [ 212.524060][ T6816] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.952: mark_inode_dirty error [ 212.544171][ T6855] ip6t_srh: unknown srh match flags 5802 [ 212.554907][ T6857] validate_nla: 41 callbacks suppressed [ 212.554966][ T6857] netlink: 'syz.4.965': attribute type 83 has an invalid length. [ 212.571293][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.583664][ T6816] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.952: corrupted inode contents [ 212.608800][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.611056][ T6816] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.952: mark_inode_dirty error [ 212.637532][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.640542][ T6816] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.952: corrupted inode contents [ 212.668981][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.670560][ T6816] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 212.690009][ T6816] loop0: lost filesystem error report for type 5 error -117 [ 212.692234][ T6816] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.952: corrupted inode contents [ 212.715180][ T6859] loop4: detected capacity change from 0 to 2048 [ 212.736122][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.739001][ T6816] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.952: mark_inode_dirty error [ 212.764053][ T6862] loop3: detected capacity change from 0 to 164 [ 212.775628][ T6859] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 212.784572][ T6816] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.790135][ T6816] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 212.827799][ T6862] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 212.881439][ T6816] loop0: lost filesystem error report for type 5 error -117 [ 212.902462][ T6816] EXT4-fs (loop0): 1 truncate cleaned up [ 212.937915][ T114] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 212.951092][ T6859] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 212.957647][ T6859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.973277][ T114] loop0: lost filesystem error report for type 5 error -117 [ 212.992083][ T6859] vhci_hcd vhci_hcd.0: Device attached [ 212.996932][ T6816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.011805][ T6865] vhci_hcd: connection closed [ 213.023237][ T12] vhci_hcd vhci_hcd.4: stop threads [ 213.034836][ T12] vhci_hcd vhci_hcd.4: release socket [ 213.045770][ T6816] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.058863][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 213.096187][ T6868] loop3: detected capacity change from 0 to 1024 [ 213.119274][ T6868] EXT4-fs: Ignoring removed bh option [ 213.163218][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.238689][ T6873] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 213.246453][ T6873] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 213.356218][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.464883][ T6879] syzkaller0: entered promiscuous mode [ 213.470789][ T6854] Set syz1 is full, maxelem 65536 reached [ 213.476719][ T6879] syzkaller0: entered allmulticast mode [ 213.610866][ T6883] vlan2: entered promiscuous mode [ 213.619785][ T6890] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 213.622240][ T6883] batadv0: entered promiscuous mode [ 213.629185][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'. [ 213.642381][ T6890] netlink: 112 bytes leftover after parsing attributes in process `syz.1.976'. [ 213.651660][ T6890] netlink: 200 bytes leftover after parsing attributes in process `syz.1.976'. [ 213.660816][ T6891] SELinux: failed to load policy [ 213.667820][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'. [ 213.682721][ T6888] lo speed is unknown, defaulting to 1000 [ 213.695658][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 213.701786][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.845914][ T6900] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 213.868234][ T6900] team0: Device wg2 is of different type [ 213.927028][ T6905] netlink: 'syz.3.982': attribute type 2 has an invalid length. [ 213.934801][ T6905] netlink: 119 bytes leftover after parsing attributes in process `syz.3.982'. [ 213.962625][ T6910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=6910 comm=syz.4.983 [ 214.005486][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 214.022588][ T6910] loop4: detected capacity change from 0 to 2048 [ 214.067880][ T6917] loop3: detected capacity change from 0 to 512 [ 214.098139][ T6917] EXT4-fs (loop3): 1 truncate cleaned up [ 214.104409][ T6917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.245432][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.473918][ T6931] lo speed is unknown, defaulting to 1000 [ 215.659750][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 215.659816][ T28] audit: type=1400 audit(1782536736.726:896): avc: denied { write } for pid=6919 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.403122][ T6935] loop2: detected capacity change from 0 to 1024 [ 216.452939][ T6935] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 216.464122][ T6935] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 216.500816][ T6935] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 216.516894][ T6935] System zones: 0-1, 4-36, 102-102 [ 216.541553][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.593513][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 216.640923][ T6949] netlink: 68 bytes leftover after parsing attributes in process `syz.3.995'. [ 216.907439][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 216.907855][ T28] audit: type=1400 audit(1782536737.976:897): avc: denied { bind } for pid=6954 comm="syz.3.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.983669][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.021617][ T6964] __nla_validate_parse: 1 callbacks suppressed [ 217.021632][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 217.047402][ T6964] vlan2: entered promiscuous mode [ 217.059046][ T6964] gretap0: entered promiscuous mode [ 217.072745][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.111842][ T6965] lo speed is unknown, defaulting to 1000 [ 217.122987][ T6967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=6967 comm=syz.1.1003 [ 217.222630][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 217.224151][ T6971] loop0: detected capacity change from 0 to 512 [ 217.273718][ T6971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.289862][ T6971] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1004: iget: bad i_size value: 38620345925642 [ 217.305089][ T6971] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.305902][ T6971] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1004: couldn't read orphan inode 15 (err -117) [ 217.306444][ T6977] wireguard0: entered promiscuous mode [ 217.315295][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 217.315363][ C1] EXT4-fs (loop0): initial error at time 1782536738: ext4_orphan_get:1399: inode 15 [ 217.315503][ C1] EXT4-fs (loop0): last error at time 1782536738: ext4_orphan_get:1399: inode 15 [ 217.316247][ T6971] loop0: lost filesystem error report for type 5 error -117 [ 217.324521][ T6971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.330276][ T6977] wireguard0: entered allmulticast mode [ 217.342011][ T28] audit: type=1400 audit(1782536738.406:898): avc: denied { write } for pid=6970 comm="syz.0.1004" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.466467][ T30] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 217.479745][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 217.497168][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 217.497168][ T30] [ 217.507328][ T30] EXT4-fs (loop0): Total free blocks count 0 [ 217.513382][ T30] EXT4-fs (loop0): Free/Dirty block details [ 217.521469][ T30] EXT4-fs (loop0): free_blocks=0 [ 217.526627][ T30] EXT4-fs (loop0): dirty_blocks=124 [ 217.531924][ T30] EXT4-fs (loop0): Block reservation details [ 217.535689][ T6984] syzkaller0: entered promiscuous mode [ 217.538440][ T30] EXT4-fs (loop0): i_reserved_data_blocks=124 [ 217.543959][ T6984] syzkaller0: entered allmulticast mode [ 217.554645][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 217.567596][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.580517][ T6979] tipc: Started in network mode [ 217.593502][ T6979] tipc: Node identity e67a38633da1, cluster identity 4711 [ 217.605493][ T6979] tipc: Enabled bearer , priority 0 [ 217.621903][ T6978] tipc: Resetting bearer [ 217.635634][ T6978] tipc: Disabling bearer [ 217.718505][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'. [ 217.749577][ T6994] syzkaller0: entered promiscuous mode [ 217.762380][ T6994] syzkaller0: entered allmulticast mode [ 217.769459][ T28] audit: type=1400 audit(1782536738.836:899): avc: denied { create } for pid=7001 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 217.833362][ T28] audit: type=1400 audit(1782536738.856:900): avc: denied { write } for pid=7001 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 217.929668][ T7016] loop4: detected capacity change from 0 to 256 [ 217.940427][ T7016] vfat: Unknown parameter '' [ 218.019508][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 218.039181][ T7020] loop3: detected capacity change from 0 to 512 [ 218.087348][ T7020] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.148246][ T7019] loop0: detected capacity change from 0 to 512 [ 218.160605][ T7019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.161565][ T3296] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 218.187756][ T7019] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1019: iget: bad i_size value: 38620345925642 [ 218.206945][ T7019] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.209756][ T7019] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1019: couldn't read orphan inode 15 (err -117) [ 218.223654][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 218.237910][ C1] EXT4-fs (loop0): initial error at time 1782536739: ext4_orphan_get:1399: inode 15 [ 218.247391][ C1] EXT4-fs (loop0): last error at time 1782536739: ext4_orphan_get:1399: inode 15 [ 218.257722][ T7019] loop0: lost filesystem error report for type 5 error -117 [ 218.291275][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.325275][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 218.341786][ T7038] sctp: [Deprecated]: syz.1.1026 (pid 7038) Use of int in maxseg socket option. [ 218.341786][ T7038] Use struct sctp_assoc_value instead [ 218.348080][ T28] audit: type=1400 audit(1782536739.406:901): avc: denied { write } for pid=7018 comm="syz.0.1019" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.442370][ T7030] bridge3: port 1(veth5) entered blocking state [ 218.455212][ T7030] bridge3: port 1(veth5) entered disabled state [ 218.467945][ T7030] veth5: entered allmulticast mode [ 218.490264][ T7030] veth5: entered promiscuous mode [ 218.497003][ T6093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 218.516102][ T6093] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 218.530449][ T6093] EXT4-fs (loop0): This should not happen!! Data will be lost [ 218.530449][ T6093] [ 218.542144][ T7046] bridge3: port 2(veth0_to_bond) entered blocking state [ 218.543980][ T6093] EXT4-fs (loop0): Total free blocks count 0 [ 218.550182][ T7046] bridge3: port 2(veth0_to_bond) entered disabled state [ 218.555918][ T6093] EXT4-fs (loop0): Free/Dirty block details [ 218.563111][ T7045] loop3: detected capacity change from 0 to 128 [ 218.571495][ T6093] EXT4-fs (loop0): free_blocks=0 [ 218.606743][ T7046] veth0_to_bond: entered promiscuous mode [ 218.608251][ T6093] EXT4-fs (loop0): dirty_blocks=236 [ 218.640125][ T6093] EXT4-fs (loop0): Block reservation details [ 218.646891][ T6093] EXT4-fs (loop0): i_reserved_data_blocks=236 [ 218.681397][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 218.701524][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.758405][ T7057] loop3: detected capacity change from 0 to 512 [ 218.787193][ T7057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.822470][ T7057] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1032: iget: bad i_size value: 38620345925642 [ 218.851660][ T7061] syzkaller0: entered promiscuous mode [ 218.857312][ T7061] syzkaller0: entered allmulticast mode [ 218.916997][ T7057] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.917794][ T7057] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1032: couldn't read orphan inode 15 (err -117) [ 218.927249][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 218.927371][ C0] EXT4-fs (loop3): initial error at time 1782536739: ext4_orphan_get:1399: inode 15 [ 218.927665][ C0] EXT4-fs (loop3): last error at time 1782536739: ext4_orphan_get:1399: inode 15 [ 218.994508][ T7057] loop3: lost filesystem error report for type 5 error -117 [ 219.000229][ T7057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.045046][ T28] audit: type=1400 audit(1782536740.116:902): avc: denied { write } for pid=7056 comm="syz.3.1032" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.185334][ T6093] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 219.212429][ T6093] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 164 with error 28 [ 219.225368][ T7078] loop0: detected capacity change from 0 to 128 [ 219.225525][ T6093] EXT4-fs (loop3): This should not happen!! Data will be lost [ 219.225525][ T6093] [ 219.241747][ T6093] EXT4-fs (loop3): Total free blocks count 0 [ 219.247987][ T6093] EXT4-fs (loop3): Free/Dirty block details [ 219.254177][ T6093] EXT4-fs (loop3): free_blocks=0 [ 219.276156][ T6093] EXT4-fs (loop3): dirty_blocks=164 [ 219.291447][ T6093] EXT4-fs (loop3): Block reservation details [ 219.297985][ T7078] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1040'. [ 219.307358][ T6093] EXT4-fs (loop3): i_reserved_data_blocks=164 [ 219.317182][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 219.330842][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.461886][ T7084] loop3: detected capacity change from 0 to 164 [ 219.519660][ T7084] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 219.553509][ T7088] loop2: detected capacity change from 0 to 8192 [ 219.606920][ T7088] loop2: p1 p2 p3 [ 219.614005][ T7088] loop2: p1 size 67111168 extends beyond EOD, truncated [ 219.627493][ T7088] loop2: p2 size 8388608 extends beyond EOD, truncated [ 219.635801][ T7088] loop2: p3 start 4294901760 is beyond EOD, truncated [ 219.689136][ T6198] udevd[6198]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.699456][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 220.067835][ T7108] loop2: detected capacity change from 0 to 512 [ 220.244121][ T7114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.255387][ T7114] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1050: iget: bad i_size value: 38620345925642 [ 220.268226][ T7114] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.268393][ T7114] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1050: couldn't read orphan inode 15 (err -117) [ 220.277591][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.277636][ C1] EXT4-fs (loop2): initial error at time 1782536741: ext4_orphan_get:1399: inode 15 [ 220.277674][ C1] EXT4-fs (loop2): last error at time 1782536741: ext4_orphan_get:1399: inode 15 [ 220.314759][ T7114] loop2: lost filesystem error report for type 5 error -117 [ 220.316777][ T7114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.337756][ T28] audit: type=1400 audit(1782536741.406:903): avc: denied { write } for pid=7113 comm="syz.2.1050" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.461388][ T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 220.474512][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2044 with error 28 [ 220.487629][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 220.487629][ T49] [ 220.497634][ T49] EXT4-fs (loop2): Total free blocks count 0 [ 220.503967][ T49] EXT4-fs (loop2): Free/Dirty block details [ 220.509988][ T49] EXT4-fs (loop2): free_blocks=0 [ 220.515215][ T49] EXT4-fs (loop2): dirty_blocks=2044 [ 220.520654][ T49] EXT4-fs (loop2): Block reservation details [ 220.528343][ T49] EXT4-fs (loop2): i_reserved_data_blocks=2044 [ 220.541581][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 220.542310][ T7103] ip6erspan0: entered allmulticast mode [ 220.561170][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.647731][ T7121] ext4: Unknown parameter 'nouser_xattr' [ 220.710718][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 220.740932][ T7122] netlink: 'syz.1.1052': attribute type 30 has an invalid length. [ 220.769619][ T28] audit: type=1326 audit(1782536741.836:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1052" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e5f3fce59 code=0x0 [ 220.924343][ T7134] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1055'. [ 221.013798][ T7136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.035504][ T7136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.052393][ T7140] EXT4-fs: quotafile must be on filesystem root [ 221.069458][ T7136] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 221.120217][ T7136] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 221.127738][ T7136] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1057: bad orphan inode 768 [ 221.140408][ T7136] loop4: lost filesystem error report for type 5 error -117 [ 221.212440][ T7136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.309828][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.340949][ T7147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.370448][ T7147] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1061: iget: bad i_size value: 38620345925642 [ 221.385192][ T7147] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.385426][ T7147] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1061: couldn't read orphan inode 15 (err -117) [ 221.394688][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 221.394711][ C0] EXT4-fs (loop0): initial error at time 1782536742: ext4_orphan_get:1399: inode 15 [ 221.394749][ C0] EXT4-fs (loop0): last error at time 1782536742: ext4_orphan_get:1399: inode 15 [ 221.432244][ T7147] loop0: lost filesystem error report for type 5 error -117 [ 221.434312][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.492811][ T28] audit: type=1400 audit(1782536742.556:905): avc: denied { write } for pid=7146 comm="syz.0.1061" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.640324][ T28] audit: type=1400 audit(1782536742.706:906): avc: denied { write } for pid=7158 comm="syz.1.1064" path="socket:[16601]" dev="sockfs" ino=16601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 221.789066][ T30] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 221.813657][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28 [ 221.859771][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 221.859771][ T30] [ 221.899826][ T30] EXT4-fs (loop0): Total free blocks count 0 [ 221.926085][ T30] EXT4-fs (loop0): Free/Dirty block details [ 221.950954][ T30] EXT4-fs (loop0): free_blocks=0 [ 221.969459][ T30] EXT4-fs (loop0): dirty_blocks=568 [ 221.992264][ T30] EXT4-fs (loop0): Block reservation details [ 222.017829][ T30] EXT4-fs (loop0): i_reserved_data_blocks=568 [ 222.040164][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 222.056238][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 222.084659][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.110530][ T7142] tipc: Enabled bearer , priority 10 [ 222.136437][ T28] audit: type=1400 audit(1782536743.196:907): avc: denied { write } for pid=7141 comm="syz.2.1058" lport=44518 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.169801][ T7149] xt_hashlimit: size too large, truncated to 1048576 [ 222.635857][ T7168] set_capacity_and_notify: 7 callbacks suppressed [ 222.635875][ T7168] loop0: detected capacity change from 0 to 512 [ 222.684175][ T28] audit: type=1400 audit(1782536743.756:908): avc: denied { ioctl } for pid=7169 comm="syz.4.1068" path="socket:[15626]" dev="sockfs" ino=15626 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.824115][ T7162] loop3: detected capacity change from 0 to 512 [ 222.847161][ T7168] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 1: comm syz.0.1065: invalid block [ 223.094336][ T7177] loop4: detected capacity change from 0 to 1024 [ 223.117311][ T7168] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.133639][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 223.149317][ C0] EXT4-fs (loop0): initial error at time 1782536744: __ext4_iget:5533: inode 11: block 1 [ 223.159195][ C0] EXT4-fs (loop0): last error at time 1782536744: __ext4_iget:5533: inode 11: block 1 [ 223.250100][ T7177] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 223.278011][ T7168] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1065: couldn't read orphan inode 11 (err -117) [ 223.306128][ T7168] loop0: lost filesystem error report for type 5 error -117 [ 223.307511][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.363823][ T7177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.702548][ T3396] tipc: Node number set to 3688577123 [ 224.438679][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.460247][ T7162] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.473064][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.846473][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.481649][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1072'. [ 226.866077][ T7196] loop2: detected capacity change from 0 to 1024 [ 226.873213][ T7196] EXT4-fs: Ignoring removed orlov option [ 227.527506][ T7201] loop3: detected capacity change from 0 to 512 [ 227.534695][ T7196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.547403][ T7201] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.555385][ T7201] EXT4-fs (loop3): 1 orphan inode deleted [ 227.563677][ T28] audit: type=1400 audit(1782536748.626:909): avc: denied { write } for pid=7195 comm="syz.2.1074" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.854331][ T7201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.949083][ T7189] loop0: detected capacity change from 0 to 764 [ 228.547479][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.914230][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.943696][ T28] audit: type=1400 audit(1782536748.956:910): avc: denied { bind } for pid=7197 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.978585][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.033861][ T7207] veth0_to_bond: entered allmulticast mode [ 229.041677][ T7206] loop4: detected capacity change from 0 to 512 [ 229.049372][ T28] audit: type=1400 audit(1782536749.976:911): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.071781][ T28] audit: type=1400 audit(1782536749.986:912): avc: denied { write } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.117242][ T7209] netlink: 'syz.3.1076': attribute type 46 has an invalid length. [ 229.143980][ T7206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.185288][ T7206] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1075: iget: bad i_size value: 38620345925642 [ 229.208776][ T7206] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.210376][ T7206] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1075: couldn't read orphan inode 15 (err -117) [ 229.219665][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 229.219686][ C1] EXT4-fs (loop4): initial error at time 1782536750: ext4_orphan_get:1399: inode 15 [ 229.219726][ C1] EXT4-fs (loop4): last error at time 1782536750: ext4_orphan_get:1399: inode 15 [ 229.257866][ T7206] loop4: lost filesystem error report for type 5 error -117 [ 229.257955][ T28] audit: type=1400 audit(1782536749.986:913): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.275488][ T7206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.287782][ T28] audit: type=1400 audit(1782536749.996:914): avc: denied { write } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.287820][ T28] audit: type=1400 audit(1782536749.996:915): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.367082][ T28] audit: type=1400 audit(1782536749.996:916): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.417474][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.428033][ T7228] loop3: detected capacity change from 0 to 128 [ 229.436532][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.438607][ T28] audit: type=1400 audit(1782536749.996:917): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.491762][ T7228] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.517997][ T28] audit: type=1400 audit(1782536749.996:918): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.565312][ T7228] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.576744][ T6095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 229.615030][ T6095] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 404 with error 28 [ 229.637625][ T7219] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 229.664168][ T6095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 229.664168][ T6095] [ 229.698122][ T6095] EXT4-fs (loop4): Total free blocks count 0 [ 229.715159][ T6095] EXT4-fs (loop4): Free/Dirty block details [ 229.731913][ T6095] EXT4-fs (loop4): free_blocks=0 [ 229.739485][ T7232] syzkaller0: entered promiscuous mode [ 229.740580][ T6095] EXT4-fs (loop4): dirty_blocks=408 [ 229.757634][ T6095] EXT4-fs (loop4): Block reservation details [ 229.763956][ T6095] EXT4-fs (loop4): i_reserved_data_blocks=408 [ 229.764620][ T7232] syzkaller0: entered allmulticast mode [ 229.775366][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 229.788600][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.895933][ T7235] xt_hashlimit: size too large, truncated to 1048576 [ 229.918514][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.979429][ T7240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.063274][ T7241] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1087'. [ 230.072418][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.081207][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.097328][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.109931][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.177633][ T7247] loop3: detected capacity change from 0 to 164 [ 230.216782][ T7247] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 230.263033][ T7250] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 230.295735][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.323831][ T7250] veth0_to_bond: left allmulticast mode [ 230.330291][ T7250] veth0_to_bond: left promiscuous mode [ 230.336329][ T7250] bridge3: port 2(veth0_to_bond) entered disabled state [ 230.356137][ T7250] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 230.370205][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 230.391888][ T7256] bond0: entered promiscuous mode [ 230.417084][ T7256] bond0: entered allmulticast mode [ 230.525680][ T7261] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1093'. [ 230.580644][ T7265] loop2: detected capacity change from 0 to 128 [ 230.647246][ T7273] syzkaller0: entered promiscuous mode [ 230.669939][ T7273] syzkaller0: entered allmulticast mode [ 230.712671][ T7273] tipc: Enabled bearer , priority 10 [ 230.733781][ T7272] tipc: Resetting bearer [ 230.766817][ T7272] tipc: Disabling bearer [ 230.773252][ T7282] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.780970][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1103'. [ 230.791257][ T7282] vhci_hcd vhci_hcd.0: invalid port number 255 [ 230.800107][ T7282] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 230.812964][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.822412][ T7282] team0: Port device bond0 added [ 230.921142][ T7282] loop0: detected capacity change from 0 to 512 [ 230.932659][ T7282] /dev/loop0: Can't open blockdev [ 230.999079][ T7291] loop2: detected capacity change from 0 to 512 [ 231.036501][ T7291] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 231.058342][ T7308] loop4: detected capacity change from 0 to 512 [ 231.072238][ T7291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.080701][ T7291] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.097107][ T7291] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 231.127076][ T7291] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.1105: inode has both inline data and extents flags [ 231.160771][ T7308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 231.183930][ T7291] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 231.184183][ T7291] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1105: couldn't read orphan inode 16 (err -117) [ 231.193934][ T7309] lo speed is unknown, defaulting to 1000 [ 231.205679][ T7291] loop2: lost filesystem error report for type 5 error -117 [ 231.212257][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.273951][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 231.274340][ C1] EXT4-fs (loop4): initial error at time 1782536752: ext4_mb_generate_buddy:1317 [ 231.275229][ C1] EXT4-fs (loop4): last error at time 1782536752: ext4_mb_generate_buddy:1317 [ 231.335790][ T7308] EXT4-fs (loop4): Remounting filesystem read-only [ 231.344632][ T7308] EXT4-fs (loop4): 1 truncate cleaned up [ 231.364441][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.468509][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 231.585961][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.854415][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.926119][ T7332] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 231.949717][ T7343] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 231.976407][ T7332] bond1 (unregistering): Released all slaves [ 232.045182][ T7346] loop2: detected capacity change from 0 to 128 [ 232.051767][ T7346] vfat: Unknown parameter '00000000000000000000003' [ 232.068281][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 232.087132][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 232.102952][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 232.119841][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 232.136242][ T7343] bond2: entered promiscuous mode [ 232.141823][ T7343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.399104][ T7357] loop3: detected capacity change from 0 to 512 [ 232.406275][ T7357] EXT4-fs: dax option not supported [ 232.543425][ T7343] bond2: (slave bridge1): making interface the new active one [ 232.596800][ T7343] bridge1: entered promiscuous mode [ 232.617204][ T7343] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 232.717931][ T7363] lo speed is unknown, defaulting to 1000 [ 232.866496][ T7381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.902211][ T7381] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.931404][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 232.931421][ T28] audit: type=1400 audit(1782536753.996:936): avc: denied { write } for pid=7380 comm="syz.3.1130" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.979225][ T7381] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 233.016165][ T7381] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 23 with error 28 [ 233.048816][ T7381] EXT4-fs (loop3): This should not happen!! Data will be lost [ 233.048816][ T7381] [ 233.071146][ T7381] EXT4-fs (loop3): Total free blocks count 0 [ 233.085331][ T7381] EXT4-fs (loop3): Free/Dirty block details [ 233.102941][ T7381] EXT4-fs (loop3): free_blocks=65280 [ 233.118000][ T7381] EXT4-fs (loop3): dirty_blocks=28 [ 233.130977][ T7381] EXT4-fs (loop3): Block reservation details [ 233.150253][ T7381] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 233.162831][ T28] audit: type=1400 audit(1782536754.216:937): avc: denied { bind } for pid=7398 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.167461][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 233.195363][ T7392] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 7 with error 28 [ 233.230143][ T7401] set_capacity_and_notify: 1 callbacks suppressed [ 233.230159][ T7401] loop4: detected capacity change from 0 to 512 [ 233.252670][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 233.288590][ T7401] EXT4-fs: Ignoring removed bh option [ 233.301900][ T7401] EXT4-fs: dax option not supported [ 233.324687][ T28] audit: type=1400 audit(1782536754.396:938): avc: denied { setopt } for pid=7398 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.559787][ T6095] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.590341][ T7408] loop3: detected capacity change from 0 to 128 [ 233.691365][ T7408] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.716441][ T7408] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.771409][ T7408] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.050243][ T7435] loop2: detected capacity change from 0 to 512 [ 234.134821][ T7435] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.292510][ T7439] @0: renamed from bond_slave_1 [ 234.405839][ T7441] loop3: detected capacity change from 0 to 1024 [ 234.451514][ T7441] EXT4-fs (loop3): inodes count not valid: 4 vs 32 [ 235.505324][ T7456] wg2: Caught tx_queue_len zero misconfig [ 235.611108][ T7456] Process accounting resumed [ 235.615853][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 235.627825][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.720954][ T28] audit: type=1400 audit(1782536756.786:939): avc: denied { wake_alarm } for pid=7465 comm="syz.1.1162" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.755829][ T7469] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 235.811965][ T7475] loop2: detected capacity change from 0 to 512 [ 235.825990][ T7469] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 235.852657][ T7475] EXT4-fs: Ignoring removed oldalloc option [ 235.883174][ T7482] wireguard0: entered promiscuous mode [ 235.898328][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.900838][ T7482] wireguard0: entered allmulticast mode [ 235.923911][ T7475] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.972817][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.016161][ T7491] loop0: detected capacity change from 0 to 128 [ 236.042175][ T28] audit: type=1400 audit(1782536757.106:940): avc: denied { accept } for pid=7494 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.062206][ T7495] lo: Caught tx_queue_len zero misconfig [ 236.114965][ T7497] syzkaller0: entered promiscuous mode [ 236.120501][ T7497] syzkaller0: entered allmulticast mode [ 236.134282][ T7491] loop0: detected capacity change from 128 to 0 [ 236.144065][ T7495] sctp: [Deprecated]: syz.2.1169 (pid 7495) Use of int in maxseg socket option. [ 236.144065][ T7495] Use struct sctp_assoc_value instead [ 236.147770][ T7503] FAT-fs (loop0): Directory bread(block 66) failed [ 236.166039][ T7503] FAT-fs (loop0): Directory bread(block 67) failed [ 236.172701][ T7503] FAT-fs (loop0): Directory bread(block 68) failed [ 236.179407][ T7503] FAT-fs (loop0): Directory bread(block 69) failed [ 236.186530][ T7503] FAT-fs (loop0): Directory bread(block 70) failed [ 236.193281][ T7503] FAT-fs (loop0): Directory bread(block 71) failed [ 236.201531][ T7503] FAT-fs (loop0): Directory bread(block 72) failed [ 236.224443][ T7503] FAT-fs (loop0): Directory bread(block 73) failed [ 236.244953][ T7503] FAT-fs (loop0): Directory bread(block 74) failed [ 236.254642][ T7491] xt_hashlimit: size too large, truncated to 1048576 [ 236.261446][ T7503] FAT-fs (loop0): Directory bread(block 75) failed [ 236.345975][ T6093] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.422252][ T28] audit: type=1400 audit(1782536757.486:941): avc: denied { name_connect } for pid=7521 comm="syz.3.1179" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 236.625809][ T114] FAT-fs (loop0): bread failed in fat_clusters_flush [ 236.639058][ T4802] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 236.646202][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.681509][ T7529] loop4: detected capacity change from 0 to 512 [ 236.684000][ T7527] team0: Port device bond0 added [ 236.692479][ T28] audit: type=1326 audit(1782536757.756:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.4.1182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ea8ce59 code=0x7ffc0000 [ 236.726969][ T28] audit: type=1326 audit(1782536757.796:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.4.1182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ea8ce59 code=0x7ffc0000 [ 236.755936][ T28] audit: type=1326 audit(1782536757.796:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.4.1182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ea8ce59 code=0x7ffc0000 [ 236.781674][ T28] audit: type=1326 audit(1782536757.796:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.4.1182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f362ea8ce59 code=0x7ffc0000 [ 236.815737][ T7530] bridge0: port 3(team0) entered blocking state [ 236.822195][ T7530] bridge0: port 3(team0) entered disabled state [ 236.828717][ T7530] team0: entered allmulticast mode [ 236.833926][ T7530] team_slave_0: entered allmulticast mode [ 236.840173][ T7530] team_slave_1: entered allmulticast mode [ 236.846409][ T7530] bond0: entered allmulticast mode [ 236.851578][ T7530] bond_slave_0: entered allmulticast mode [ 236.857417][ T7530] bond_slave_1: entered allmulticast mode [ 236.876304][ T7530] team0: entered promiscuous mode [ 236.881522][ T7530] team_slave_0: entered promiscuous mode [ 236.887460][ T7530] team_slave_1: entered promiscuous mode [ 236.893363][ T7530] bond0: entered promiscuous mode [ 236.898671][ T7530] bond_slave_0: entered promiscuous mode [ 236.904621][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.913041][ T7530] bond_slave_1: entered promiscuous mode [ 236.919496][ T7530] bridge0: port 3(team0) entered blocking state [ 236.925938][ T7530] bridge0: port 3(team0) entered forwarding state [ 236.969936][ T7536] loop4: detected capacity change from 0 to 512 [ 237.001872][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.041122][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.047003][ T7543] __nla_validate_parse: 3 callbacks suppressed [ 237.047048][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1187'. [ 237.135107][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.142641][ T7549] bridge0: port 3(gretap0) entered blocking state [ 237.143698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.150704][ T7549] bridge0: port 3(gretap0) entered disabled state [ 237.186042][ T7549] gretap0: entered allmulticast mode [ 237.194731][ T7556] loop3: detected capacity change from 0 to 1024 [ 237.197007][ T7549] gretap0: entered promiscuous mode [ 237.217459][ T7556] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 237.217459][ T7556] [ 237.235944][ T7549] bridge0: port 3(gretap0) entered blocking state [ 237.243475][ T7549] bridge0: port 3(gretap0) entered forwarding state [ 237.332527][ T7537] lo speed is unknown, defaulting to 1000 [ 237.395989][ T6095] gretap0: left allmulticast mode [ 237.401407][ T6095] bridge0: port 3(gretap0) entered disabled state [ 237.426504][ T6095] bridge_slave_1: left allmulticast mode [ 237.430997][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 237.438139][ T6095] bridge_slave_1: left promiscuous mode [ 237.454956][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.464357][ T7571] netlink: 'syz.1.1195': attribute type 30 has an invalid length. [ 237.475016][ T6095] bridge_slave_0: left allmulticast mode [ 237.484972][ T6095] bridge_slave_0: left promiscuous mode [ 237.497169][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.760759][ T7580] netlink: 463 bytes leftover after parsing attributes in process `syz.3.1198'. [ 237.854529][ T129] SELinux: failure in sel_netif_sid_slow(), invalid network interface (88) [ 237.885457][ T6095] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 237.893698][ T6095] bridge1 (unregistering): left promiscuous mode [ 237.903087][ T6095] team0: Port device bond0 removed [ 237.909230][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.920576][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.929809][ T6095] bond0 (unregistering): Released all slaves [ 237.938292][ T6095] bond1 (unregistering): Released all slaves [ 237.943952][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.954431][ T6095] bond2 (unregistering): Released all slaves [ 238.023070][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1198'. [ 238.033993][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1198'. [ 238.064400][ T6095] tipc: Left network mode [ 238.137131][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 238.137146][ T28] audit: type=1400 audit(1782536759.206:1045): avc: denied { write } for pid=7584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.178423][ T7594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.194034][ T6095] hsr_slave_0: left promiscuous mode [ 238.201644][ T6095] hsr_slave_1: left promiscuous mode [ 238.209859][ T28] audit: type=1400 audit(1782536759.276:1046): avc: denied { write } for pid=7593 comm="syz.3.1199" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.237599][ T28] audit: type=1400 audit(1782536759.306:1047): avc: denied { write } for pid=7601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.260005][ T28] audit: type=1400 audit(1782536759.306:1048): avc: denied { ioctl } for pid=7593 comm="syz.3.1199" path="/268/file2/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.318017][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 238.371940][ T28] audit: type=1400 audit(1782536759.436:1049): avc: denied { write } for pid=7593 comm="syz.3.1199" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.398172][ T28] audit: type=1400 audit(1782536759.466:1050): avc: denied { write } for pid=7593 comm="syz.3.1199" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.420770][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 238.456636][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 238.462836][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.470778][ T6093] smc: removing ib device sz1 [ 238.479337][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.488835][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.500872][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.510315][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.564400][ T7600] FAULT_INJECTION: forcing a failure. [ 238.564400][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 238.601215][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.4.1200 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.601251][ T7600] Tainted: [W]=WARN [ 238.601258][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.601278][ T7600] Call Trace: [ 238.601284][ T7600] [ 238.601294][ T7600] __dump_stack+0x1d/0x30 [ 238.601355][ T7600] dump_stack_lvl+0x95/0xd0 [ 238.601398][ T7600] dump_stack+0x15/0x1b [ 238.601416][ T7600] should_fail_ex+0x25e/0x270 [ 238.601496][ T7600] should_failslab+0x8c/0xb0 [ 238.601519][ T7600] __kmalloc_noprof+0xd4/0x4a0 [ 238.601546][ T7600] ? lwtunnel_state_alloc+0x1d/0x30 [ 238.601580][ T7600] ? lwtunnel_state_alloc+0x1d/0x30 [ 238.601687][ T7600] ? __nla_parse+0x40/0x60 [ 238.601768][ T7600] lwtunnel_state_alloc+0x1d/0x30 [ 238.601793][ T7600] ip_tun_build_state+0xc8/0x3d0 [ 238.601832][ T7600] lwtunnel_build_state+0x127/0x200 [ 238.601874][ T7600] fib_nh_match+0x1eb/0xa30 [ 238.601940][ T7600] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 238.601978][ T7600] ? fib_table_delete+0x473/0x740 [ 238.602008][ T7600] fib_table_delete+0x468/0x740 [ 238.602052][ T7600] inet_rtm_delroute+0x173/0x1f0 [ 238.602084][ T7600] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 238.602115][ T7600] rtnetlink_rcv_msg+0x64b/0x720 [ 238.602219][ T7600] netlink_rcv_skb+0x11e/0x220 [ 238.602246][ T7600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.602315][ T7600] rtnetlink_rcv+0x1c/0x30 [ 238.602349][ T7600] netlink_unicast+0x5a7/0x680 [ 238.602394][ T7600] netlink_sendmsg+0x5be/0x6f0 [ 238.602454][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.602480][ T7600] ____sys_sendmsg+0x532/0x580 [ 238.602566][ T7600] ___sys_sendmsg+0x195/0x1e0 [ 238.602665][ T7600] __x64_sys_sendmsg+0xd4/0x160 [ 238.602763][ T7600] x64_sys_call+0x194c/0x3020 [ 238.602815][ T7600] do_syscall_64+0x136/0x3c0 [ 238.602846][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.602910][ T7600] RIP: 0033:0x7f362ea8ce59 [ 238.602931][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.602955][ T7600] RSP: 002b:00007f362d4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.602976][ T7600] RAX: ffffffffffffffda RBX: 00007f362ed05fa0 RCX: 00007f362ea8ce59 [ 238.602993][ T7600] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 238.603010][ T7600] RBP: 00007f362d4df090 R08: 0000000000000000 R09: 0000000000000000 [ 238.603026][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.603042][ T7600] R13: 00007f362ed06038 R14: 00007f362ed05fa0 R15: 00007fffa80fc3c8 [ 238.603068][ T7600] [ 238.603544][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.876983][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.885790][ T7600] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 238.921087][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 239.105373][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.472804][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.647126][ T28] audit: type=1400 audit(1782536760.716:1051): avc: denied { write } for pid=7610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.714363][ T7623] set_capacity_and_notify: 1 callbacks suppressed [ 239.714384][ T7623] loop2: detected capacity change from 0 to 128 [ 239.809325][ T7621] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.847317][ T28] audit: type=1400 audit(1782536760.856:1052): avc: denied { write } for pid=7635 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.902928][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 239.931268][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 240.047315][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.056422][ T28] audit: type=1400 audit(1782536761.126:1053): avc: denied { block_suspend } for pid=7641 comm="syz.3.1208" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.083071][ T7646] loop2: detected capacity change from 0 to 512 [ 240.098860][ T7643] 9p: Bad value for 'rfdno' [ 240.120104][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.148712][ T7646] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 1: comm syz.2.1209: invalid block [ 240.165736][ T7537] bridge_slave_0: entered allmulticast mode [ 240.186392][ T7537] bridge_slave_0: entered promiscuous mode [ 240.195452][ T7646] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.200007][ T7646] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1209: couldn't read orphan inode 11 (err -117) [ 240.209265][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 240.209290][ C1] EXT4-fs (loop2): initial error at time 1782536761: __ext4_iget:5533: inode 11: block 1 [ 240.209337][ C1] EXT4-fs (loop2): last error at time 1782536761: __ext4_iget:5533: inode 11: block 1 [ 240.257106][ T7627] xt_hashlimit: size too large, truncated to 1048576 [ 240.270149][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.281790][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.301889][ T7537] bridge_slave_1: entered allmulticast mode [ 240.316592][ T7537] bridge_slave_1: entered promiscuous mode [ 240.378955][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.391475][ T7646] loop2: lost filesystem error report for type 5 error -117 [ 240.392160][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.426885][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.435203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.449590][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.503979][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.530896][ T28] audit: type=1400 audit(1782536761.596:1054): avc: denied { write } for pid=7649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.571458][ T7537] team0: Port device team_slave_0 added [ 240.592364][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.610119][ T7537] team0: Port device team_slave_1 added [ 240.616505][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 240.647936][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.662140][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.719539][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.742045][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.755156][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.799521][ T7667] loop2: detected capacity change from 0 to 512 [ 240.806471][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.840401][ T7667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.858791][ T7673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.866053][ T7673] IPv6: NLM_F_CREATE should be set when creating new route [ 240.898543][ T7667] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1211: iget: bad i_size value: 38620345925642 [ 240.912958][ T7537] hsr_slave_0: entered promiscuous mode [ 240.924970][ T7537] hsr_slave_1: entered promiscuous mode [ 240.935803][ T7537] debugfs: 'hsr0' already exists in 'hsr' [ 240.941735][ T7667] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.943678][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.958832][ T7667] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1211: couldn't read orphan inode 15 (err -117) [ 240.959698][ C0] EXT4-fs (loop2): initial error at time 1782536762: ext4_orphan_get:1399: inode 15 [ 240.981215][ C0] EXT4-fs (loop2): last error at time 1782536762: ext4_orphan_get:1399: inode 15 [ 240.983956][ T7537] Cannot create hsr debugfs directory [ 240.997207][ T7671] loop3: detected capacity change from 0 to 512 [ 241.000088][ T7667] loop2: lost filesystem error report for type 5 error -117 [ 241.015877][ T7671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.071688][ T7667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.104821][ T7687] loop4: detected capacity change from 0 to 128 [ 241.107161][ T7671] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1214: iget: bad i_size value: 38620345925642 [ 241.194504][ T7671] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.199628][ T7671] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1214: couldn't read orphan inode 15 (err -117) [ 241.209321][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 241.209454][ C0] EXT4-fs (loop3): initial error at time 1782536762: ext4_orphan_get:1399: inode 15 [ 241.209670][ C0] EXT4-fs (loop3): last error at time 1782536762: ext4_orphan_get:1399: inode 15 [ 241.252294][ T7671] loop3: lost filesystem error report for type 5 error -117 [ 241.259874][ T7671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.326547][ T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 241.339852][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28 [ 241.359272][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 241.359272][ T49] [ 241.389453][ T49] EXT4-fs (loop2): Total free blocks count 0 [ 241.401072][ T49] EXT4-fs (loop2): Free/Dirty block details [ 241.417929][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 241.427754][ T49] EXT4-fs (loop2): free_blocks=0 [ 241.433649][ T7537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.435731][ T49] EXT4-fs (loop2): dirty_blocks=276 [ 241.458264][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.465593][ T7695] loop4: detected capacity change from 0 to 512 [ 241.472217][ T7537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.472579][ T49] EXT4-fs (loop2): Block reservation details [ 241.494326][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.495699][ T7695] EXT4-fs: Ignoring removed bh option [ 241.520240][ T49] EXT4-fs (loop2): i_reserved_data_blocks=276 [ 241.528216][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 241.544755][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.549768][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.561405][ T7537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.586898][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.616642][ T7537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.629425][ T7695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.650111][ T49] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 241.663040][ T7695] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.663136][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.673026][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 241.721248][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 241.721248][ T49] [ 241.739594][ T7718] veth0: Caught tx_queue_len zero misconfig [ 241.741262][ T49] EXT4-fs (loop3): Total free blocks count 0 [ 241.777567][ T49] EXT4-fs (loop3): Free/Dirty block details [ 241.816024][ T49] EXT4-fs (loop3): free_blocks=0 [ 241.828244][ T49] EXT4-fs (loop3): dirty_blocks=68 [ 241.852019][ T49] EXT4-fs (loop3): Block reservation details [ 241.874395][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.874929][ T49] EXT4-fs (loop3): i_reserved_data_blocks=68 [ 241.902956][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.910491][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 241.926944][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.943169][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.950309][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.976548][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.983755][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.033017][ T7729] netlink: 780 bytes leftover after parsing attributes in process `syz.3.1222'. [ 242.042405][ T7537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.053582][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.063344][ T7537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.157697][ T7736] loop2: detected capacity change from 0 to 164 [ 242.165464][ T7732] hub 8-0:1.0: USB hub found [ 242.186713][ T7736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 242.195502][ T7732] hub 8-0:1.0: 8 ports detected [ 242.251066][ T7741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1227'. [ 242.418282][ T7756] loop3: detected capacity change from 0 to 512 [ 242.427659][ T7756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.441365][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.451971][ T7756] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1230: iget: bad i_size value: 38620345925642 [ 242.486177][ T7756] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.488638][ T7756] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1230: couldn't read orphan inode 15 (err -117) [ 242.498547][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 242.498604][ C0] EXT4-fs (loop3): initial error at time 1782536763: ext4_orphan_get:1399: inode 15 [ 242.498693][ C0] EXT4-fs (loop3): last error at time 1782536763: ext4_orphan_get:1399: inode 15 [ 242.569722][ T7756] loop3: lost filesystem error report for type 5 error -117 [ 242.574272][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.602076][ T7756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.774557][ T7537] veth0_vlan: entered promiscuous mode [ 242.792200][ T7537] veth1_vlan: entered promiscuous mode [ 242.819902][ T6084] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 242.837573][ T6084] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 148 with error 28 [ 242.858358][ T7537] veth0_macvtap: entered promiscuous mode [ 242.874646][ T7537] veth1_macvtap: entered promiscuous mode [ 242.880458][ T6084] EXT4-fs (loop3): This should not happen!! Data will be lost [ 242.880458][ T6084] [ 242.897446][ T6084] EXT4-fs (loop3): Total free blocks count 0 [ 242.906597][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.921332][ T6084] EXT4-fs (loop3): Free/Dirty block details [ 242.932581][ T6084] EXT4-fs (loop3): free_blocks=0 [ 242.937815][ T6084] EXT4-fs (loop3): dirty_blocks=152 [ 242.943059][ T6084] EXT4-fs (loop3): Block reservation details [ 242.950481][ T6084] EXT4-fs (loop3): i_reserved_data_blocks=152 [ 242.958346][ T7788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1236'. [ 242.974423][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.978883][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 242.982881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.999765][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.046514][ T7791] loop2: detected capacity change from 0 to 1024 [ 243.071369][ T7791] EXT4-fs: Ignoring removed orlov option [ 243.089580][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.115076][ T6093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.129668][ T3431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.152321][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.175061][ T3431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.192820][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 243.192835][ T28] audit: type=1400 audit(1782536764.256:1065): avc: denied { write } for pid=7789 comm="syz.2.1239" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.236338][ T28] audit: type=1400 audit(1782536764.306:1066): avc: denied { search } for pid=7792 comm="syz.4.1240" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.295013][ T3431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.343746][ T28] audit: type=1400 audit(1782536764.406:1067): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.366816][ T28] audit: type=1400 audit(1782536764.416:1068): avc: denied { write } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.394178][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.408398][ T7818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1247'. [ 243.419660][ T28] audit: type=1400 audit(1782536764.416:1069): avc: denied { write } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.475103][ T28] audit: type=1400 audit(1782536764.416:1070): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.524566][ T28] audit: type=1400 audit(1782536764.416:1071): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.580959][ T28] audit: type=1400 audit(1782536764.416:1072): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.603671][ T28] audit: type=1400 audit(1782536764.416:1073): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.626014][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.634446][ T28] audit: type=1400 audit(1782536764.416:1074): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.682896][ T7811] loop5: detected capacity change from 0 to 512 [ 243.741407][ T7811] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.764940][ T7811] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 243.792722][ T7811] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 243.846479][ T7811] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 243.860028][ T7811] System zones: 0-2, 18-18, 34-35 [ 243.890879][ T7811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.972215][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 243.981238][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1249'. [ 244.901341][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.095403][ T7844] loop3: detected capacity change from 0 to 164 [ 245.510062][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.535284][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.543554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.574229][ T7838] loop2: detected capacity change from 0 to 512 [ 245.755981][ T7846] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 245.800132][ T7838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.817731][ T7838] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1251: iget: bad i_size value: 38620345925642 [ 245.831063][ T7838] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.831945][ T7838] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1251: couldn't read orphan inode 15 (err -117) [ 245.841593][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 245.841675][ C1] EXT4-fs (loop2): initial error at time 1782536766: ext4_orphan_get:1399: inode 15 [ 245.841825][ C1] EXT4-fs (loop2): last error at time 1782536766: ext4_orphan_get:1399: inode 15 [ 245.882785][ T7838] loop2: lost filesystem error report for type 5 error -117 [ 245.884352][ T7838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.959022][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.986975][ T7850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1256'. [ 246.068013][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 246.079398][ T3431] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 246.103367][ T3431] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 140 with error 28 [ 246.119313][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 246.136551][ T3431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 246.136551][ T3431] [ 246.155608][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 246.166460][ T3431] EXT4-fs (loop2): Total free blocks count 0 [ 246.180050][ T3431] EXT4-fs (loop2): Free/Dirty block details [ 246.194619][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 246.203840][ T3431] EXT4-fs (loop2): free_blocks=0 [ 246.215458][ T3431] EXT4-fs (loop2): dirty_blocks=140 [ 246.222304][ T3431] EXT4-fs (loop2): Block reservation details [ 246.234448][ T3431] EXT4-fs (loop2): i_reserved_data_blocks=140 [ 246.248301][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 246.284110][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.348443][ T7877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.368435][ T7882] IPv6: addrconf: prefix option has invalid lifetime [ 246.521477][ T7889] loop4: detected capacity change from 0 to 1764 [ 246.574030][ T7886] loop5: detected capacity change from 0 to 512 [ 246.640392][ T7893] loop2: detected capacity change from 0 to 764 [ 246.658285][ T7886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1266: invalid indirect mapped block 11 (level 0) [ 246.698087][ T7886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.703561][ T7886] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1266: attempt to clear invalid blocks 1024 len 1 [ 246.711469][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 246.711608][ C0] EXT4-fs (loop5): initial error at time 1782536767: ext4_free_branches:1023: inode 13 [ 246.711759][ C0] EXT4-fs (loop5): last error at time 1782536767: ext4_free_branches:1023: inode 13 [ 246.785718][ T7886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.788665][ T7886] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 246.817948][ T7886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1266: invalid indirect mapped block 1819239214 (level 0) [ 246.833493][ T7886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.845165][ T7886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1266: invalid indirect mapped block 33554432 (level 2) [ 246.882514][ T7893] 8021q: VLANs not supported on ip_vti0 [ 246.888472][ T7886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.899188][ T7886] EXT4-fs (loop5): 1 truncate cleaned up [ 246.942280][ T7886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.229104][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.369052][ T7929] loop3: detected capacity change from 0 to 2364 [ 247.629977][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.642303][ T7938] __nla_validate_parse: 144 callbacks suppressed [ 247.642373][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 247.651264][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.721857][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 247.730825][ T7942] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1284'. [ 247.860385][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c314a00: rx timeout, send abort [ 248.352607][ T7942] loop5: detected capacity change from 0 to 4096 [ 248.361209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c87b800: rx timeout, send abort [ 248.373629][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c314a00: abort rx timeout. Force session deactivation [ 248.407647][ T30] net_ratelimit: 4 callbacks suppressed [ 248.407666][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.421733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.518073][ T7942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.551349][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 248.551377][ T28] audit: type=1400 audit(1782536769.616:1085): avc: denied { write } for pid=7939 comm="syz.5.1284" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.619310][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.674644][ T7943] loop2: detected capacity change from 0 to 1024 [ 248.675588][ T28] audit: type=1400 audit(1782536769.696:1086): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 248.704646][ T28] audit: type=1400 audit(1782536769.696:1087): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.729819][ T28] audit: type=1400 audit(1782536769.696:1088): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.755232][ T28] audit: type=1400 audit(1782536769.696:1089): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.807890][ T7943] EXT4-fs: Ignoring removed oldalloc option [ 249.136901][ T7943] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 249.194940][ T28] audit: type=1400 audit(1782536769.696:1090): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.307617][ T7943] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 249.381650][ T28] audit: type=1400 audit(1782536769.696:1091): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.624279][ T28] audit: type=1400 audit(1782536769.696:1092): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.704568][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.744572][ T28] audit: type=1400 audit(1782536770.156:1093): avc: denied { create } for pid=7949 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.764722][ T28] audit: type=1400 audit(1782536770.186:1094): avc: denied { bind } for pid=7949 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.785307][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.138305][ T7958] FAULT_INJECTION: forcing a failure. [ 250.138305][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 250.227816][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.5.1287 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 250.227857][ T7958] Tainted: [W]=WARN [ 250.227866][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.227883][ T7958] Call Trace: [ 250.227927][ T7958] [ 250.227938][ T7958] __dump_stack+0x1d/0x30 [ 250.227965][ T7958] dump_stack_lvl+0x95/0xd0 [ 250.227986][ T7958] dump_stack+0x15/0x1b [ 250.228010][ T7958] should_fail_ex+0x25e/0x270 [ 250.228103][ T7958] should_failslab+0x8c/0xb0 [ 250.228126][ T7958] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 250.228153][ T7958] ? __alloc_skb+0x2db/0x6f0 [ 250.228183][ T7958] ? __alloc_skb+0x2db/0x6f0 [ 250.228276][ T7958] __alloc_skb+0x2db/0x6f0 [ 250.228305][ T7958] ? __alloc_skb+0x205/0x6f0 [ 250.228329][ T7958] netlink_alloc_large_skb+0xbf/0xf0 [ 250.228415][ T7958] netlink_sendmsg+0x40c/0x6f0 [ 250.228445][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.228499][ T7958] ____sys_sendmsg+0x532/0x580 [ 250.228531][ T7958] ___sys_sendmsg+0x195/0x1e0 [ 250.228598][ T7958] __x64_sys_sendmsg+0xd4/0x160 [ 250.228633][ T7958] x64_sys_call+0x194c/0x3020 [ 250.228660][ T7958] do_syscall_64+0x136/0x3c0 [ 250.228695][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.228748][ T7958] RIP: 0033:0x7f8e8af9ce59 [ 250.228769][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.228793][ T7958] RSP: 002b:00007f8e899f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.228818][ T7958] RAX: ffffffffffffffda RBX: 00007f8e8b215fa0 RCX: 00007f8e8af9ce59 [ 250.228899][ T7958] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 250.228915][ T7958] RBP: 00007f8e899f7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.228928][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.228940][ T7958] R13: 00007f8e8b216038 R14: 00007f8e8b215fa0 R15: 00007fff1c4b9408 [ 250.228961][ T7958] [ 250.931720][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.016147][ T7985] tipc: Failed to remove unknown binding: 66,0,0/0:2452803866/2452803868 [ 251.041261][ T7985] tipc: Failed to remove unknown binding: 66,0,0/0:2452803866/2452803867 [ 251.067994][ T7985] tipc: Failed to remove unknown binding: 66,0,0/0:2452803866/2452803868 [ 251.090703][ T7985] tipc: Failed to remove unknown binding: 66,0,0/0:2452803866/2452803867 [ 251.295656][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.304041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.267164][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.891356][ T7999] loop4: detected capacity change from 0 to 8192 [ 253.001022][ T7999] loop4: p1 p2 p3 [ 253.015027][ T7999] loop4: p2 start 9961480 is beyond EOD, truncated [ 253.022775][ T7999] loop4: p3 start 117772289 is beyond EOD, truncated [ 253.198556][ T8006] batadv_slave_0: entered promiscuous mode [ 253.307875][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.330745][ T8006] batadv_slave_0: left promiscuous mode [ 253.583645][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 253.583710][ T28] audit: type=1400 audit(1782536774.646:1099): avc: denied { write } for pid=8025 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.688703][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.805550][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.973125][ T8036] loop3: detected capacity change from 0 to 512 [ 254.107938][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.189061][ T8031] veth3: entered allmulticast mode [ 254.283344][ T8036] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.1309: No space for directory leaf checksum. Please run e2fsck -D. [ 254.347332][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.365198][ T8036] EXT4-fs error (device loop3): ext4_readdir:225: inode #2: comm syz.3.1309: path /297/file1: directory fails checksum at offset 0 [ 254.417719][ T28] audit: type=1400 audit(1782536775.486:1100): avc: denied { write } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.469682][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.496308][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.504587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.549294][ T8056] loop4: detected capacity change from 0 to 512 [ 254.562615][ T28] audit: type=1400 audit(1782536775.626:1101): avc: denied { write } for pid=8054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.687722][ T8056] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 254.871491][ T8075] loop2: detected capacity change from 0 to 512 [ 254.901045][ T8075] EXT4-fs (loop2): invalid journal inode [ 254.930281][ T8075] EXT4-fs (loop2): can't get journal size [ 254.975006][ T8075] EXT4-fs (loop2): 1 truncate cleaned up [ 255.002166][ T8075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.024259][ T28] audit: type=1400 audit(1782536776.086:1102): avc: denied { write } for pid=8065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.087850][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 255.130407][ T28] audit: type=1400 audit(1782536776.196:1103): avc: denied { write } for pid=8086 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.192740][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.232369][ T28] audit: type=1400 audit(1782536776.226:1104): avc: denied { write } for pid=8074 comm="syz.2.1316" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.380819][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.428717][ T28] audit: type=1400 audit(1782536776.496:1105): avc: denied { write } for pid=8091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.510323][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1321'. [ 255.513831][ T8114] loop2: detected capacity change from 0 to 512 [ 255.530447][ T28] audit: type=1400 audit(1782536776.566:1106): avc: denied { write } for pid=8112 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.560019][ T8114] vfat: Unknown parameter '0xffffffffffffffffxJc7v 3Zd|DJ;:k:Dl/y9? Vf;+G#m#߂~i ʶ' [ 255.624515][ T8121] validate_nla: 42 callbacks suppressed [ 255.624533][ T8121] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 255.648233][ T8121] bridge0: port 3(team0) entered disabled state [ 255.665831][ T8121] team0: left allmulticast mode [ 255.688948][ T8121] team_slave_0: left allmulticast mode [ 255.709872][ T8121] team_slave_1: left allmulticast mode [ 255.724607][ T8121] bond0: left allmulticast mode [ 255.730359][ T8121] bond_slave_0: left allmulticast mode [ 255.746566][ T8121] bond_slave_1: left allmulticast mode [ 255.768887][ T8121] team0: left promiscuous mode [ 255.789274][ T8121] team_slave_0: left promiscuous mode [ 255.807564][ T8136] netlink: 'syz.2.1328': attribute type 2 has an invalid length. [ 255.810100][ T8121] team_slave_1: left promiscuous mode [ 255.836559][ T8121] bond0: left promiscuous mode [ 255.861390][ T8121] bond_slave_0: left promiscuous mode [ 255.884009][ T8121] bond_slave_1: left promiscuous mode [ 255.895432][ T28] audit: type=1326 audit(1782536776.966:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce3dace59 code=0x0 [ 255.903947][ T8121] bridge0: port 3(team0) entered disabled state [ 255.961499][ T8121] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.097614][ T8146] loop4: detected capacity change from 0 to 4096 [ 256.300926][ T8146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.429672][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.127727][ T8170] loop5: detected capacity change from 0 to 512 [ 257.138073][ T8172] loop2: detected capacity change from 0 to 256 [ 257.176864][ T8170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.319645][ T8175] loop3: detected capacity change from 0 to 512 [ 257.358436][ T8175] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.1340: invalid block [ 257.713897][ T8175] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.723112][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.740475][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 257.746940][ C0] EXT4-fs (loop3): initial error at time 1782536778: __ext4_iget:5533: inode 11: block 1 [ 257.756857][ C0] EXT4-fs (loop3): last error at time 1782536778: __ext4_iget:5533: inode 11: block 1 [ 257.766655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.866881][ T8178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 257.910846][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.993812][ T8175] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1340: couldn't read orphan inode 11 (err -117) [ 258.138492][ T8175] loop3: lost filesystem error report for type 5 error -117 [ 258.139932][ T8175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.217307][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.238703][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.329449][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 258.476573][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.496791][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 258.584355][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 258.998597][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.027161][ T8199] loop4: detected capacity change from 0 to 512 [ 259.187142][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.271352][ T8199] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.373537][ T8199] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 259.381975][ T28] audit: type=1400 audit(1782536780.436:1108): avc: denied { setopt } for pid=8210 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.426192][ T8199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.611032][ T28] audit: type=1400 audit(1782536780.506:1109): avc: denied { bind } for pid=8212 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.640095][ T8216] loop3: detected capacity change from 0 to 512 [ 259.652946][ T28] audit: type=1400 audit(1782536780.506:1110): avc: denied { node_bind } for pid=8212 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 259.677011][ T8190] xt_hashlimit: size too large, truncated to 1048576 [ 259.784368][ T8216] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1352: bad orphan inode 15 [ 259.794683][ T8216] loop3: lost filesystem error report for type 5 error -117 [ 259.795222][ T8216] ext4_test_bit(bit=14, block=18) = 1 [ 259.807947][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 259.807973][ C0] EXT4-fs (loop3): initial error at time 1782536780: ext4_orphan_get:1425 [ 259.808022][ C0] EXT4-fs (loop3): last error at time 1782536780: ext4_orphan_get:1425 [ 259.831346][ T8216] is_bad_inode(inode)=0 [ 259.835536][ T8216] NEXT_ORPHAN(inode)=1023 [ 259.839892][ T8216] max_ino=32 [ 259.843148][ T8216] i_nlink=0 [ 259.847207][ T8216] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.1352: corrupted xattr block 19: invalid header [ 259.860798][ T8216] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.865719][ T8216] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 259.884508][ T8216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 259.896824][ T8216] ext4 filesystem being mounted at /306/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 260.020129][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.146664][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 260.256505][ T8230] loop5: detected capacity change from 0 to 512 [ 260.259157][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.273764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.286694][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 260.302800][ T8230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.343474][ T8230] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1357: iget: bad i_size value: 38620345925642 [ 260.359177][ T8230] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.359987][ T8230] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1357: couldn't read orphan inode 15 (err -117) [ 260.369560][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 260.369599][ C0] EXT4-fs (loop5): initial error at time 1782536781: ext4_orphan_get:1399: inode 15 [ 260.369734][ C0] EXT4-fs (loop5): last error at time 1782536781: ext4_orphan_get:1399: inode 15 [ 260.710014][ T8240] loop3: detected capacity change from 0 to 512 [ 260.819174][ T8224] tipc: Can't bind to reserved service type 0 [ 261.302347][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.317960][ T8230] loop5: lost filesystem error report for type 5 error -117 [ 261.326664][ T8230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.630230][ T28] audit: type=1400 audit(1782536782.696:1111): avc: denied { write } for pid=8229 comm="syz.5.1357" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.398803][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.398995][ T8240] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1356: corrupted inode contents [ 262.422649][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.423733][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 262.439963][ C0] EXT4-fs (loop3): initial error at time 1782536783: ext4_do_update_inode:5742: inode 16 [ 262.450283][ C0] EXT4-fs (loop3): last error at time 1782536783: ext4_do_update_inode:5742: inode 16 [ 262.463944][ T8240] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.1356: mark_inode_dirty error [ 262.475945][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.478156][ T8240] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1356: corrupted inode contents [ 262.500184][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.501439][ T8240] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1356: mark_inode_dirty error [ 262.523097][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.527789][ T8240] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1356: corrupted inode contents [ 262.550122][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.551742][ T8240] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 262.570541][ T8240] loop3: lost filesystem error report for type 5 error -117 [ 262.572797][ T8240] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1356: corrupted inode contents [ 262.594146][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.597873][ T8240] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.1356: mark_inode_dirty error [ 262.618983][ T8240] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.620757][ T8240] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 262.639857][ T8240] loop3: lost filesystem error report for type 5 error -117 [ 262.649836][ T8240] EXT4-fs (loop3): 1 truncate cleaned up [ 262.676842][ T8240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.691777][ T8240] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.751076][ T114] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 262.818238][ T114] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 262.884823][ T30] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 262.960057][ T8240] syz.3.1356 (8240) used greatest stack depth: 9088 bytes left [ 262.990706][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 36 with error 28 [ 263.029726][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 263.029726][ T30] [ 263.074784][ T30] EXT4-fs (loop5): Total free blocks count 0 [ 263.156212][ T30] EXT4-fs (loop5): Free/Dirty block details [ 263.162166][ T30] EXT4-fs (loop5): free_blocks=0 [ 263.167165][ T30] EXT4-fs (loop5): dirty_blocks=40 [ 263.172296][ T30] EXT4-fs (loop5): Block reservation details [ 263.178310][ T30] EXT4-fs (loop5): i_reserved_data_blocks=40 [ 263.202060][ T7537] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 263.217788][ T8266] tipc: Started in network mode [ 263.223108][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.226141][ T8266] tipc: Node identity aaaaaaaaaa32, cluster identity 1027 [ 263.234963][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.248451][ T8266] tipc: Enabled bearer , priority 10 [ 263.270920][ T28] audit: type=1400 audit(1782536784.336:1112): avc: denied { getopt } for pid=8265 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.433222][ T8273] macvtap1: entered promiscuous mode [ 263.439544][ T8273] macvtap1: entered allmulticast mode [ 263.456473][ T8273] dummy0: entered allmulticast mode [ 263.474007][ T8273] team0: Device macvtap1 failed to register rx_handler [ 263.519896][ T8273] dummy0: left allmulticast mode [ 263.954798][ T8273] syz.1.1366 (8273) used greatest stack depth: 9024 bytes left [ 263.994375][ T8284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8284 comm=syz.5.1373 [ 264.059000][ T8284] loop5: detected capacity change from 0 to 2048 [ 264.094763][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.102998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.243654][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.605474][ T3396] tipc: Node number set to 10005162 [ 264.607701][ T8296] loop5: detected capacity change from 0 to 1024 [ 264.695164][ T8296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.973129][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 264.982200][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'. [ 265.596097][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.604401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.715906][ T8309] loop3: detected capacity change from 0 to 4096 [ 265.743726][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.752028][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.807547][ T8309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.924015][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.983904][ T28] audit: type=1400 audit(1782536786.916:1113): avc: denied { write } for pid=8305 comm="syz.3.1380" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.031205][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.551679][ T7537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.569294][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.596519][ T28] audit: type=1400 audit(1782536787.666:1114): avc: denied { getopt } for pid=8326 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.703824][ T28] audit: type=1400 audit(1782536787.666:1115): avc: denied { ioctl } for pid=8326 comm="syz.4.1386" path="socket:[20775]" dev="sockfs" ino=20775 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.635955][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.788675][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.105766][ T28] audit: type=1400 audit(1782536789.176:1116): avc: denied { name_bind } for pid=8345 comm="syz.2.1391" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 268.231449][ T8357] syzkaller0: entered promiscuous mode [ 268.247201][ T8357] syzkaller0: entered allmulticast mode [ 268.338169][ T8370] xt_hashlimit: size too large, truncated to 1048576 [ 268.784648][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1398'. [ 268.801743][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1397'. [ 268.817497][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.836514][ T8376] vlan2: entered promiscuous mode [ 268.852409][ T8376] gretap0: entered promiscuous mode [ 269.327242][ C1] ================================================================== [ 269.335475][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 269.342721][ C1] [ 269.345082][ C1] read-write to 0xffff88812ed07f80 of 4 bytes by interrupt on cpu 0: [ 269.353182][ C1] can_can_gw_rcv+0x812/0x820 [ 269.357901][ C1] can_rcv_filter+0xc3/0x480 [ 269.362592][ C1] can_receive+0x13e/0x190 [ 269.367061][ C1] can_rcv+0x17d/0x1f0 [ 269.371182][ C1] process_backlog+0x354/0x680 [ 269.376003][ C1] __napi_poll+0x61/0x300 [ 269.380393][ C1] net_rx_action+0x456/0x930 [ 269.385049][ C1] handle_softirqs+0xb9/0x280 [ 269.389749][ C1] do_softirq+0x45/0x60 [ 269.393945][ C1] __local_bh_enable_ip+0x70/0x80 [ 269.399031][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 269.403994][ C1] sctp_close+0x4ad/0x560 [ 269.408381][ C1] inet_release+0xcd/0xf0 [ 269.412734][ C1] inet6_release+0x3e/0x60 [ 269.417180][ C1] sock_close+0x6b/0x150 [ 269.421469][ C1] __fput+0x29e/0x630 [ 269.425480][ C1] ____fput+0x1c/0x30 [ 269.429498][ C1] task_work_run+0x130/0x1a0 [ 269.434115][ C1] get_signal+0xdc1/0xf10 [ 269.438507][ C1] arch_do_signal_or_restart+0x96/0x480 [ 269.444117][ C1] exit_to_user_mode_loop+0x15d/0x8c0 [ 269.449549][ C1] do_syscall_64+0x23c/0x3c0 [ 269.454187][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.460124][ C1] [ 269.462471][ C1] read-write to 0xffff88812ed07f80 of 4 bytes by interrupt on cpu 1: [ 269.470564][ C1] can_can_gw_rcv+0x812/0x820 [ 269.475278][ C1] can_rcv_filter+0xc3/0x480 [ 269.479920][ C1] can_receive+0x13e/0x190 [ 269.484369][ C1] can_rcv+0x17d/0x1f0 [ 269.488478][ C1] process_backlog+0x354/0x680 [ 269.493283][ C1] __napi_poll+0x61/0x300 [ 269.497656][ C1] net_rx_action+0x456/0x930 [ 269.502310][ C1] handle_softirqs+0xb9/0x280 [ 269.507024][ C1] do_softirq+0x45/0x60 [ 269.511216][ C1] __local_bh_enable_ip+0x70/0x80 [ 269.516268][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 269.521242][ C1] release_sock+0x10c/0x180 [ 269.525782][ C1] sockopt_release_sock+0x41/0x50 [ 269.530849][ C1] do_ip_getsockopt+0xbdd/0x10b0 [ 269.535824][ C1] ip_getsockopt+0x5c/0x180 [ 269.540376][ C1] tcp_getsockopt+0xad/0xe0 [ 269.544911][ C1] sock_common_getsockopt+0x60/0x70 [ 269.550152][ C1] do_sock_getsockopt+0x2f5/0x570 [ 269.555210][ C1] __x64_sys_getsockopt+0x11d/0x1a0 [ 269.560456][ C1] x64_sys_call+0x2dcf/0x3020 [ 269.565168][ C1] do_syscall_64+0x136/0x3c0 [ 269.569812][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.575736][ C1] [ 269.578086][ C1] value changed: 0x00003db6 -> 0x00003db7 [ 269.583833][ C1] [ 269.586185][ C1] Reported by Kernel Concurrency Sanitizer on: [ 269.592403][ C1] CPU: 1 UID: 0 PID: 3295 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 269.603549][ C1] Tainted: [W]=WARN [ 269.607375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.617475][ C1] ================================================================== SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 269.917404][ T28] audit: type=1400 audit(1782536790.866:1117): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=35948 daddr=10.128.0.241 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 270.032254][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.091824][ T3431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.147142][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.303471][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.400002][ C0] ================================================================== [ 272.408229][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 272.415473][ C0] [ 272.417825][ C0] read-write to 0xffff88812ed07f20 of 4 bytes by interrupt on cpu 1: [ 272.425917][ C0] can_can_gw_rcv+0x812/0x820 [ 272.430625][ C0] can_rcv_filter+0xc3/0x480 [ 272.435256][ C0] can_receive+0x13e/0x190 [ 272.439709][ C0] can_rcv+0x17d/0x1f0 [ 272.443877][ C0] process_backlog+0x354/0x680 [ 272.448710][ C0] __napi_poll+0x61/0x300 [ 272.453103][ C0] net_rx_action+0x456/0x930 [ 272.457744][ C0] handle_softirqs+0xb9/0x280 [ 272.462469][ C0] run_ksoftirqd+0x1c/0x30 [ 272.467111][ C0] smpboot_thread_fn+0x32a/0x510 [ 272.472108][ C0] kthread+0x221/0x270 [ 272.476207][ C0] ret_from_fork+0x146/0x330 [ 272.480837][ C0] ret_from_fork_asm+0x1a/0x30 [ 272.485641][ C0] [ 272.487989][ C0] read-write to 0xffff88812ed07f20 of 4 bytes by interrupt on cpu 0: [ 272.496089][ C0] can_can_gw_rcv+0x812/0x820 [ 272.500804][ C0] can_rcv_filter+0xc3/0x480 [ 272.505429][ C0] can_receive+0x13e/0x190 [ 272.509882][ C0] can_rcv+0x17d/0x1f0 [ 272.513990][ C0] process_backlog+0x354/0x680 [ 272.518800][ C0] __napi_poll+0x61/0x300 [ 272.523176][ C0] net_rx_action+0x456/0x930 [ 272.527809][ C0] handle_softirqs+0xb9/0x280 [ 272.532522][ C0] do_softirq+0x45/0x60 [ 272.536715][ C0] __local_bh_enable_ip+0x70/0x80 [ 272.541768][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 272.546739][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 272.552416][ C0] process_scheduled_works+0x4d4/0x9a0 [ 272.557918][ C0] worker_thread+0x569/0x750 [ 272.562542][ C0] kthread+0x221/0x270 [ 272.566642][ C0] ret_from_fork+0x146/0x330 [ 272.571277][ C0] ret_from_fork_asm+0x1a/0x30 [ 272.576075][ C0] [ 272.578417][ C0] value changed: 0x0002b709 -> 0x0002b70a [ 272.584162][ C0] [ 272.586510][ C0] Reported by Kernel Concurrency Sanitizer on: [ 272.592689][ C0] CPU: 0 UID: 0 PID: 6095 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 272.603837][ C0] Tainted: [W]=WARN [ 272.607661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.617742][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 272.624554][ C0] ================================================================== [ 272.643864][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.685211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.331607][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.419377][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.431377][ C0] ================================================================== [ 275.439519][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 275.446754][ C0] [ 275.449099][ C0] read-write to 0xffff88812ed07f80 of 4 bytes by interrupt on cpu 1: [ 275.457196][ C0] can_can_gw_rcv+0x812/0x820 [ 275.461907][ C0] can_rcv_filter+0xc3/0x480 [ 275.466534][ C0] can_receive+0x13e/0x190 [ 275.470982][ C0] can_rcv+0x17d/0x1f0 [ 275.475095][ C0] process_backlog+0x354/0x680 [ 275.479909][ C0] __napi_poll+0x61/0x300 [ 275.484285][ C0] net_rx_action+0x456/0x930 [ 275.488917][ C0] handle_softirqs+0xb9/0x280 [ 275.493628][ C0] do_softirq+0x45/0x60 [ 275.497898][ C0] __local_bh_enable_ip+0x70/0x80 [ 275.502957][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 275.507925][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 275.513630][ C0] process_scheduled_works+0x4d4/0x9a0 [ 275.519142][ C0] worker_thread+0x569/0x750 [ 275.523775][ C0] kthread+0x221/0x270 [ 275.527866][ C0] ret_from_fork+0x146/0x330 [ 275.532496][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.537299][ C0] [ 275.539644][ C0] read-write to 0xffff88812ed07f80 of 4 bytes by interrupt on cpu 0: [ 275.547782][ C0] can_can_gw_rcv+0x812/0x820 [ 275.552497][ C0] can_rcv_filter+0xc3/0x480 [ 275.557132][ C0] can_receive+0x13e/0x190 [ 275.561602][ C0] can_rcv+0x17d/0x1f0 [ 275.565718][ C0] process_backlog+0x354/0x680 [ 275.570540][ C0] __napi_poll+0x61/0x300 [ 275.574957][ C0] net_rx_action+0x456/0x930 [ 275.579606][ C0] handle_softirqs+0xb9/0x280 [ 275.584408][ C0] run_ksoftirqd+0x1c/0x30 [ 275.588872][ C0] smpboot_thread_fn+0x32a/0x510 [ 275.593863][ C0] kthread+0x221/0x270 [ 275.597961][ C0] ret_from_fork+0x146/0x330 [ 275.602671][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.607489][ C0] [ 275.609828][ C0] value changed: 0x00056bbc -> 0x00056bbd [ 275.615572][ C0] [ 275.617919][ C0] Reported by Kernel Concurrency Sanitizer on: [ 275.624099][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 275.634910][ C0] Tainted: [W]=WARN [ 275.638735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.648910][ C0] ================================================================== [ 275.725639][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.773019][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.500433][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.792426][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.635374][ C0] ================================================================== [ 278.643507][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 278.650746][ C0] [ 278.653093][ C0] read-write to 0xffff88812ed07f20 of 4 bytes by interrupt on cpu 1: [ 278.661195][ C0] can_can_gw_rcv+0x812/0x820 [ 278.665909][ C0] can_rcv_filter+0xc3/0x480 [ 278.670538][ C0] can_receive+0x13e/0x190 [ 278.674985][ C0] can_rcv+0x17d/0x1f0 [ 278.679180][ C0] process_backlog+0x354/0x680 [ 278.683998][ C0] __napi_poll+0x61/0x300 [ 278.688423][ C0] net_rx_action+0x456/0x930 [ 278.693061][ C0] handle_softirqs+0xb9/0x280 [ 278.697766][ C0] do_softirq+0x45/0x60 [ 278.701948][ C0] __local_bh_enable_ip+0x70/0x80 [ 278.707014][ C0] kernel_fpu_end+0x6c/0x80 [ 278.711549][ C0] blake2s_compress+0x67/0x16d0 [ 278.716452][ C0] blake2s_final+0x6a/0xb0 [ 278.720926][ C0] hmac+0x219/0x400 [ 278.724769][ C0] kdf+0xa4/0x1d0 [ 278.728438][ C0] wg_noise_handshake_create_initiation+0x35e/0x600 [ 278.735062][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 278.741167][ C0] process_scheduled_works+0x4d4/0x9a0 [ 278.746767][ C0] worker_thread+0x569/0x750 [ 278.751410][ C0] kthread+0x221/0x270 [ 278.755517][ C0] ret_from_fork+0x146/0x330 [ 278.760148][ C0] ret_from_fork_asm+0x1a/0x30 [ 278.764950][ C0] [ 278.767296][ C0] read-write to 0xffff88812ed07f20 of 4 bytes by interrupt on cpu 0: [ 278.775474][ C0] can_can_gw_rcv+0x812/0x820 [ 278.780183][ C0] can_rcv_filter+0xc3/0x480 [ 278.784811][ C0] can_receive+0x13e/0x190 [ 278.789276][ C0] can_rcv+0x17d/0x1f0 [ 278.793386][ C0] process_backlog+0x354/0x680 [ 278.798198][ C0] __napi_poll+0x61/0x300 [ 278.802602][ C0] net_rx_action+0x456/0x930 [ 278.807250][ C0] handle_softirqs+0xb9/0x280 [ 278.811957][ C0] do_softirq+0x45/0x60 [ 278.816137][ C0] __local_bh_enable_ip+0x70/0x80 [ 278.821189][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 278.826156][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 278.831833][ C0] process_scheduled_works+0x4d4/0x9a0 [ 278.837337][ C0] worker_thread+0x569/0x750 [ 278.841973][ C0] kthread+0x221/0x270 [ 278.846071][ C0] ret_from_fork+0x146/0x330 [ 278.850703][ C0] ret_from_fork_asm+0x1a/0x30 [ 278.855510][ C0] [ 278.857867][ C0] value changed: 0x00084cf6 -> 0x00084cf7 [ 278.863604][ C0] [ 278.865949][ C0] Reported by Kernel Concurrency Sanitizer on: [ 278.872128][ C0] CPU: 0 UID: 0 PID: 6093 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 278.883276][ C0] Tainted: [W]=WARN [ 278.887100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.897270][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 278.904085][ C0] ================================================================== [ 278.954828][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881258d9c00: Timeout. Failed to send simple message. [ 278.968821][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.040659][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.082924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog