last executing test programs: 1m30.120859239s ago: executing program 2 (id=127): socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0x400, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100acbd4d00fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x81, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x20000000000001, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, r8, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1m29.088544482s ago: executing program 2 (id=134): socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2400c041) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xc1, 0x0, &(0x7f00000003c0)="f03e9438e5f808fb5a92e5b9e1af2bc5b2c94fa2250551724cd021bb7ff733b528af8ad8689fe4cdf855da02248aba2f1423d0671a6808b2c2b1bbbf9ad45c0f4123f5a97b088052b0e71d8d899d4e8a42c333c8bd511fb8a8f5bd88d0fbf0f2eacbbd38f8f67b20459af240fbd4681e9dce3b267d40ac67d314b16c4427d3612b1be14b234d95921036e5b4f489d0172ee7f2fd73193d19e7c96e97cc7c4358068a05e87e1f9d998364cdd760df366fde787e6271636e5a779c1dfb7312139d5b", 0x0, 0xb9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28, 0xffffffffffffffff, 0xffffffff}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 1m28.972630276s ago: executing program 2 (id=135): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket(0x27, 0x80805, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000000dc0)=""/4106, 0x100a) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) lseek(r7, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80088d4}, 0x20000094) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x200000f4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m28.485300842s ago: executing program 2 (id=138): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x20c0c1, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, 0x0, 0x0, 0x42428, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010861a2d7540000102030109026000030101280a0904000000010100000a24010e000a00020102090d010000010200000904010101010200000905010900"], 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x7) syz_usb_connect(0x5, 0x12f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000007b00)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000791201000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 1m27.476336085s ago: executing program 2 (id=143): socket$igmp(0x2, 0x3, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1m26.129119969s ago: executing program 2 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m26.061114581s ago: executing program 32 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.943586646s ago: executing program 3 (id=649): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 9.591622518s ago: executing program 3 (id=651): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe, 0x7, 0x0, 0xa, 0x0, 0x0, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80000) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0xe6e, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f000014000280080002400000000b08000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000"], 0x7c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x24000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r8, 0x400, 0x1) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000640)={"9e6b2cacfb242a436755423d0f4b9d2f", 0x0, r9, {0x75, 0x9}, {0x19c8cb25, 0xfffffffc}, 0x7, [0x400, 0xd, 0x5, 0x8, 0x6, 0x7, 0x7fffffff, 0x6, 0x7ff, 0x8, 0x9, 0x7fffffffffffffff, 0x8, 0x7, 0x15, 0x6]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) close(r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYRES32], 0x54}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a78000800060a010400000000000000000a0004050900010073797a31000000004c000480480001800a000100696e6e6572000000380002800800044000000017140005800c0001007061796c6f616400040002800800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 9.014525817s ago: executing program 3 (id=654): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32000000"], 0x98}}, 0x0) 8.892605681s ago: executing program 3 (id=656): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="bbd0195a31d70f06d70d591285a6073e9e15c376bbfbad48056cbb473f0a854abb098d38a114d225454b4fba69187029911be5a901cc3d68e42754b5bb91cb4887a26d0eedc3adc409f340e3ea5e9f3102aa9c26f331a8594414eaead27a89e13d185e3d41b57196d5bd6f10afacc26130149136c4099071272331fd47", 0x7d}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x40, 0xc1}}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x0, 0x400000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000009eddd9b3f440b9", @ANYBLOB="4314ada3acb3f60e7c9844d4a97b70b810dc7130a5fcb785fa79621e1aeacbbf1cd3fd55a1dedd9d0e826b73180a9b30", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b70000000000000095000000000000006a9f121c1e1b1c712f5d32f5a7bfb6f0787817032d44b0c29972918fa8bd6d113245231e1b9cddea98bbc324e1c5242c775b717ac52b2e4a63eaf17c588e754e649664ef46eafe5f8271985168f477bd5cba5679fa9d31acab0ed63d3468705c14cc8c45393022235d12eb1f8e17e7"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendto$packet(r3, &(0x7f0000000680)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe4612b470d15be1dec450b4ec826d0474ae650acaa2e5685ce20b047aa872effbe0a4a4ee6f1743473d3f9e546244c3561a366932fe389c405d98fddbfaf94b0a0eb1a0497eac6a83b946f277a28eadf2491cb010de7676f6b2c4c23b844d0c504193ee3d5fc41ac012ddd59b44c05aface028fd56038ea888f7725682795e26c2159572fa25dea0330c95dfb", 0xd3, 0x4040840, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r10, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2133, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xc}, 0x100, 0x8000000, 0x0, 0x2, 0xffe, 0xa001, 0x5, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.865048344s ago: executing program 3 (id=663): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x8, 0xf4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc, 0x9, 0x7, 0x8, 0x80}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "b1718997f78271caa04578294ca72d3a"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0xc, 0x4000}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fceb80905bd648665f45ef5605d0c58b"}]}, 0x3, [{0x86, &(0x7f0000000140)=@string={0x86, 0x3, "c9efd30737eff24a924192dbb3f10d8d031e6865854f8357e91fce14e8758f3de3f70fe4fcca6ebd9c09f744e8ac528d164c34c316fb0ed91c75d170a502e745c4dbd391ea2aa1a156dd8fc2b78a44f38a07e5b792ce8f446499d986fd51e68d06ce3b900a4268788b33e8428498cb6f20747267868c10a7801453efa0f608cc85c6a504"}}, {0x6d, &(0x7f0000000200)=@string={0x6d, 0x3, "74d5c8939c4047b3fab27f9ad630386e51bfa2f6dc51448bf23affdbc4032566f1434d2437353d80a21d1389dd60fbd45dd38adf59c32cb8ee2f653ee9c024d87ee6cbcf4646451e1de85380b5d0452355bf82eb710f2923787eac5dbd1cf0f0a51a738e184ab4940f2b84"}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a102, 0x0) write$binfmt_elf64(r2, 0x0, 0xe) 7.586874893s ago: executing program 1 (id=664): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x1000000, 0x6, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x40011) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) dup3(r1, 0xffffffffffffffff, 0x80000) setresuid(0xee01, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r1, 0xffffffffffffffff, 0x3f, 0x8}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x584, &(0x7f0000000680)="$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") 6.701944462s ago: executing program 1 (id=667): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32000000"], 0x98}}, 0x0) 6.627821405s ago: executing program 1 (id=668): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x8}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x100}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x8c}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4060804) unshare(0xa280e84fbd9d462d) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r3, 0x0, 0x300}]) 6.351528063s ago: executing program 3 (id=671): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r4 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000000b00)={0x800, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/65, 0x41}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000980)=""/241, 0xf1}], &(0x7f0000000ac0)=[0xfffffffffffffff9, 0x76, 0x8, 0x4d54, 0x2, 0xd516, 0x8], 0x4}, 0x20) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x5c}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) 6.132954391s ago: executing program 1 (id=672): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 6.085791062s ago: executing program 1 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.940806287s ago: executing program 1 (id=677): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() rt_sigprocmask(0x0, &(0x7f0000000280)={[0x6]}, &(0x7f00000002c0), 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2404c850) 4.681029368s ago: executing program 0 (id=681): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x8, 0xf4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc, 0x9, 0x7, 0x8, 0x80}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "b1718997f78271caa04578294ca72d3a"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0xc, 0x4000}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fceb80905bd648665f45ef5605d0c58b"}]}, 0x3, [{0x86, &(0x7f0000000140)=@string={0x86, 0x3, "c9efd30737eff24a924192dbb3f10d8d031e6865854f8357e91fce14e8758f3de3f70fe4fcca6ebd9c09f744e8ac528d164c34c316fb0ed91c75d170a502e745c4dbd391ea2aa1a156dd8fc2b78a44f38a07e5b792ce8f446499d986fd51e68d06ce3b900a4268788b33e8428498cb6f20747267868c10a7801453efa0f608cc85c6a504"}}, {0x6d, &(0x7f0000000200)=@string={0x6d, 0x3, "74d5c8939c4047b3fab27f9ad630386e51bfa2f6dc51448bf23affdbc4032566f1434d2437353d80a21d1389dd60fbd45dd38adf59c32cb8ee2f653ee9c024d87ee6cbcf4646451e1de85380b5d0452355bf82eb710f2923787eac5dbd1cf0f0a51a738e184ab4940f2b84"}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a102, 0x0) write$binfmt_elf64(r2, 0x0, 0xe) 3.640816011s ago: executing program 0 (id=694): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x1000000, 0x6, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x0, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44844) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x40011) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) dup3(r2, 0xffffffffffffffff, 0x80000) setresuid(0xee01, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r2, 0xffffffffffffffff, 0x3f, 0x8}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x584, &(0x7f0000000680)="$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") 2.970121833s ago: executing program 4 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.880469026s ago: executing program 4 (id=700): socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0x400, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100acbd4d00fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x81, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x20000000000001, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, r9, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.520756718s ago: executing program 0 (id=702): socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2.280819456s ago: executing program 5 (id=703): socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.201044378s ago: executing program 5 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800"], 0x44}, 0x1, 0x2}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 2.081921542s ago: executing program 5 (id=705): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x8}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) (fail_nth: 3) 1.907063378s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x280, 0x98, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x1, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmmsg(r6, &(0x7f0000001b40), 0x0, 0x8010) 1.592653718s ago: executing program 5 (id=707): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0xa216, 0x2, 0x11000, 0x2, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000002cc0)=""/4085, 0x27, 0xff5, 0x9}, 0x28) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e21, 0x7, @mcast2, 0x61d9}}, {{0xa, 0xfffe, 0x0, @local, 0xffffffff}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {@resuid={'resuid', 0x3d, r0}}, {@nodiscard}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@noload}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44044}, 0x4004) listen(r3, 0x2) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r8, &(0x7f0000000400)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}) 1.54274704s ago: executing program 0 (id=708): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 1.335868136s ago: executing program 0 (id=709): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8400, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1239, &(0x7f0000002200)="$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") r1 = io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0xd035, 0x200, 0xfffffffe, 0x181}) r2 = eventfd2(0x9da2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000240)=r2, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000680)=""/167, 0xa7, 0x8) io_uring_enter(r3, 0x904, 0x5fbf, 0x2, &(0x7f0000000200)={[0x1]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08f, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x20, 0xc, 0x4, 0xfffffff7}, {0x6, 0x74, 0x20, 0x4}, {0x6, 0x2, 0x10, 0xfffffffe}, {0x0, 0x4, 0xd, 0x7}]}, 0xfffffffffffffee1) sendmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="c8b014a7", 0x4}], 0x1}}], 0x1, 0x40048) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="8cca730ddcf4b2b140bde93d557ae06d6cd41ac6fd447b3929ccf9ec63f51790275ce305f2086ba5b6995af4e90e21f96d1e4dd94ade7a4ba8c10ff2da856808b6525cc5b4c035c5c306b59a3a7d1cde9dfe04b9ae0a30a850ad42f655823fbb3342cbf356ab85cfbd074431708e16a5deb269b2e4e3a224c8e8e71f77c7ed77", 0x80}, {&(0x7f0000000480)="dc85bfc77f267ddc0dc049c2cfea6a447350ce8682053e8562bc7c3a16a37c1a5c39f185343c5f3cbe4227001b58d83457479cdf3ccd39da243e1ccfdc862eb9feed299a94728fbbf3cbf14815c467b297ec07036636414832b2e9b1047a3dbe8712d495a8635310aac92d728128b0dce2cdf901debadadc54d680b2a0aad190516aeb09aba9a6a6b1f995a81c72585dd345fd086474df3ae59e86110372714187ea5176ec037ca1d8822950394f49d158da2b50087f892a6d4eb3fcb64e1edc9bd898e6b910b4a439342ce3c38e63bfc3157f14e5f43b84af0cfd3aa1e0", 0xde}], 0x2) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x24, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r9 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r9, &(0x7f0000001000)=""/61, 0x3d) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_score_adj\x00') write$binfmt_aout(r10, 0x0, 0xff2e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x0, @mcast2, @private1, 0x40, 0x7800, 0x7, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', r11, 0x4, 0x80, 0x1, 0x3, 0xa, @mcast1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x40, 0x10, 0x1, 0x7}}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) 957.077398ms ago: executing program 4 (id=710): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}, 0xc004) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) 741.060646ms ago: executing program 5 (id=711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@data_err_ignore}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (fail_nth: 1) 379.195468ms ago: executing program 5 (id=712): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}, 0xc004) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x5345) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05022abd7000fcdbde2508000000180001801400020073797a5f74756eddffffff00000000000c0002800400038004000500034b1a572d0c53f30516e71ca441672518c6f658281212b81284ca1a41a34cc1a67f"], 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 243.534342ms ago: executing program 0 (id=713): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x1000000, 0x6, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x0, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44844) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x40011) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) dup3(r2, 0xffffffffffffffff, 0x80000) setresuid(0xee01, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r2, 0xffffffffffffffff, 0x3f, 0x8}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x584, &(0x7f0000000680)="$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") 24.879079ms ago: executing program 4 (id=714): socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}, 0xc004) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) kernel console output (not intermixed with test programs): t journal. Quota mode: writeback. [ 77.145802][ T4795] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.273079][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.559953][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 77.607473][ T4852] loop4: detected capacity change from 0 to 4096 [ 77.653485][ T4852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.724052][ T4852] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 77.762605][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.820050][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.842574][ T4852] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.261: Failed to acquire dquot type 1 [ 77.900527][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.921956][ T4871] loop0: detected capacity change from 0 to 4096 [ 77.934809][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.937514][ T4856] loop1: detected capacity change from 0 to 512 [ 77.975223][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.041493][ T4856] EXT4-fs: Ignoring removed nobh option [ 78.076881][ T4856] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.101568][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.151260][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.172435][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.182450][ T4856] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.262: invalid block [ 78.195391][ T4856] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.199671][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 78.211076][ T4856] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.262: couldn't read orphan inode 11 (err -117) [ 78.215296][ C1] EXT4-fs (loop1): initial error at time 1780242558: __ext4_iget:5481: inode 11: block 1 [ 78.215341][ C1] EXT4-fs (loop1): last error at time 1780242558: __ext4_iget:5481: inode 11: block 1 [ 78.276546][ T4856] loop1: lost filesystem error report for type 5 error -117 [ 78.333122][ T4856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.407470][ T4856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.500015][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.560040][ T4905] loop5: detected capacity change from 0 to 1024 [ 78.606794][ T4905] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 78.625925][ T4905] EXT4-fs (loop5): mount failed [ 78.749521][ T4920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 78.863320][ T4935] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 78.906266][ T4935] netlink: 52 bytes leftover after parsing attributes in process `syz.5.272'. [ 80.038163][ T4983] loop5: detected capacity change from 0 to 8192 [ 80.178920][ T4994] loop0: detected capacity change from 0 to 128 [ 80.244168][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.268645][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.280207][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'. [ 80.319509][ T5003] netlink: 'syz.0.282': attribute type 14 has an invalid length. [ 80.339756][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 80.955179][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.287'. [ 81.136258][ T5034] netlink: 76 bytes leftover after parsing attributes in process `syz.5.290'. [ 81.235337][ T28] kauditd_printk_skb: 1387 callbacks suppressed [ 81.235403][ T28] audit: type=1326 audit(1780242561.897:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.307402][ T5032] Failed to initialize the IGMP autojoin socket (err -2) [ 81.390146][ T28] audit: type=1326 audit(1780242561.897:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.466257][ T28] audit: type=1326 audit(1780242561.907:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.558913][ T28] audit: type=1326 audit(1780242561.907:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.637366][ T28] audit: type=1326 audit(1780242561.907:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.697119][ T28] audit: type=1326 audit(1780242561.907:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.775845][ T28] audit: type=1326 audit(1780242561.907:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.845732][ T28] audit: type=1326 audit(1780242561.907:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.862138][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 81.916666][ T28] audit: type=1326 audit(1780242561.957:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 81.951698][ T5053] loop3: detected capacity change from 0 to 512 [ 81.974876][ T5053] EXT4-fs: Ignoring removed nobh option [ 81.987297][ T5053] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.997250][ T5051] loop5: detected capacity change from 0 to 512 [ 82.005400][ T28] audit: type=1326 audit(1780242561.957:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 82.033647][ T5051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.163973][ T5053] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.296: invalid block [ 82.178583][ T5051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.194062][ T5053] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.194351][ T5051] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.203809][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 82.203856][ C0] EXT4-fs (loop3): initial error at time 1780242562: __ext4_iget:5481: inode 11: block 1 [ 82.203986][ C0] EXT4-fs (loop3): last error at time 1780242562: __ext4_iget:5481: inode 11: block 1 [ 82.220931][ T5053] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.296: couldn't read orphan inode 11 (err -117) [ 82.281153][ T5053] loop3: lost filesystem error report for type 5 error -117 [ 82.282315][ T5053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.364914][ T5053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.385908][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.485229][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.497630][ T5071] loop4: detected capacity change from 0 to 128 [ 82.522825][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.574243][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 82.616774][ T5083] netlink: 'syz.4.300': attribute type 14 has an invalid length. [ 82.628950][ T5086] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 82.629896][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 82.661379][ T5086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.302'. [ 82.722962][ T5091] netlink: 76 bytes leftover after parsing attributes in process `syz.3.303'. [ 82.966658][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 83.241200][ T5106] loop0: detected capacity change from 0 to 512 [ 83.310198][ T5106] EXT4-fs: Ignoring removed nobh option [ 83.336029][ T5106] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.517070][ T5134] Failed to initialize the IGMP autojoin socket (err -2) [ 83.564986][ T5106] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.305: invalid block [ 83.616820][ T5106] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.619931][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 83.637911][ C0] EXT4-fs (loop0): initial error at time 1780242564: __ext4_iget:5481: inode 11: block 1 [ 83.650180][ C0] EXT4-fs (loop0): last error at time 1780242564: __ext4_iget:5481: inode 11: block 1 [ 83.713321][ T5106] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.305: couldn't read orphan inode 11 (err -117) [ 83.761656][ T5106] loop0: lost filesystem error report for type 5 error -117 [ 83.798350][ T5106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.919857][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.195385][ T5164] loop1: detected capacity change from 0 to 4096 [ 84.242315][ T5164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.289272][ T5164] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.422107][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.444178][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.469163][ T5168] loop0: detected capacity change from 0 to 512 [ 84.491167][ T5164] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.308: Failed to acquire dquot type 1 [ 84.549127][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.561119][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.581512][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.606290][ T5168] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.612682][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.666601][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.849012][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 85.043646][ T5197] loop0: detected capacity change from 0 to 8192 [ 85.245760][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.334672][ T5195] loop4: detected capacity change from 0 to 512 [ 85.386377][ T5195] EXT4-fs: Ignoring removed nobh option [ 85.423254][ T5195] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.606083][ T5195] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.313: invalid block [ 85.661613][ T5195] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.669980][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 85.686832][ C1] EXT4-fs (loop4): initial error at time 1780242566: __ext4_iget:5481: inode 11: block 1 [ 85.698459][ C1] EXT4-fs (loop4): last error at time 1780242566: __ext4_iget:5481: inode 11: block 1 [ 85.705449][ T5099] loop3: detected capacity change from 0 to 8192 [ 85.726958][ T5195] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.313: couldn't read orphan inode 11 (err -117) [ 85.744608][ T5195] loop4: lost filesystem error report for type 5 error -117 [ 85.791961][ T5195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.869963][ T5195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.245345][ T28] kauditd_printk_skb: 786 callbacks suppressed [ 86.245362][ T28] audit: type=1400 audit(1780242566.987:6111): avc: denied { write } for pid=5257 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.344491][ T5256] loop4: detected capacity change from 0 to 4096 [ 86.384541][ T5256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.410561][ T5262] loop5: detected capacity change from 0 to 1024 [ 86.472340][ T28] audit: type=1400 audit(1780242567.187:6112): avc: denied { write } for pid=5255 comm="syz.4.321" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.506628][ T5262] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 86.515840][ T5262] EXT4-fs (loop5): mount failed [ 86.561681][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.733906][ T28] audit: type=1400 audit(1780242567.477:6113): avc: denied { write } for pid=5265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.834888][ T28] audit: type=1400 audit(1780242567.577:6114): avc: denied { write } for pid=5288 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.937108][ T5276] loop4: detected capacity change from 0 to 512 [ 86.980015][ T5276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.994727][ T5284] loop5: detected capacity change from 0 to 8192 [ 87.053457][ T5276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.131878][ T5276] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.225013][ T28] audit: type=1326 audit(1780242567.967:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.273155][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.276686][ T28] audit: type=1326 audit(1780242567.977:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.357260][ T28] audit: type=1326 audit(1780242567.977:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.423512][ T28] audit: type=1326 audit(1780242567.977:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.466915][ T5307] loop4: detected capacity change from 0 to 128 [ 87.500203][ T28] audit: type=1326 audit(1780242568.017:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.569285][ T28] audit: type=1326 audit(1780242568.067:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.1.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x7ffc0000 [ 87.591478][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 87.644498][ T5316] netlink: 'syz.4.325': attribute type 14 has an invalid length. [ 87.660113][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 87.949763][ T5336] syzkaller0: entered promiscuous mode [ 87.966597][ T5336] syzkaller0: entered allmulticast mode [ 87.994747][ T5336] TC_ACT_REPEAT abuse ? [ 88.136050][ T5340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.327'. [ 88.281186][ T5357] loop0: detected capacity change from 0 to 128 [ 88.568952][ T5370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 88.634461][ T5370] netlink: 'syz.0.330': attribute type 14 has an invalid length. [ 88.642360][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 88.837647][ T5373] loop4: detected capacity change from 0 to 512 [ 88.983062][ T5373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.174702][ T5373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.206116][ T5373] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.412196][ T5381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.332'. [ 89.497185][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.187760][ T5418] set_capacity_and_notify: 2 callbacks suppressed [ 90.187793][ T5418] loop1: detected capacity change from 0 to 512 [ 90.257375][ T5418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.324748][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.407474][ T5418] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.535749][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.550377][ T5434] 9p: Bad value for 'wfdno' [ 90.595396][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 90.663228][ T5442] loop0: detected capacity change from 0 to 512 [ 90.702749][ T5442] EXT4-fs: Ignoring removed nobh option [ 90.729967][ T5442] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.770021][ T5442] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.336: invalid block [ 90.834672][ T5442] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.834853][ T5442] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.336: couldn't read orphan inode 11 (err -117) [ 90.834955][ T5442] loop0: lost filesystem error report for type 5 error -117 [ 90.835602][ T5442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.836598][ T5442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.249799][ T28] kauditd_printk_skb: 674 callbacks suppressed [ 91.249853][ T28] audit: type=1326 audit(1780242571.997:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.321789][ T5478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.342'. [ 91.324219][ T28] audit: type=1326 audit(1780242572.027:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.416269][ T28] audit: type=1326 audit(1780242572.027:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492566][ T28] audit: type=1326 audit(1780242572.027:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492607][ T28] audit: type=1326 audit(1780242572.027:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492638][ T28] audit: type=1326 audit(1780242572.027:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492735][ T28] audit: type=1326 audit(1780242572.027:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492806][ T28] audit: type=1326 audit(1780242572.027:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492884][ T28] audit: type=1326 audit(1780242572.027:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.492938][ T28] audit: type=1326 audit(1780242572.037:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cdc99d68e code=0x7ffc0000 [ 91.735516][ T5490] loop5: detected capacity change from 0 to 1024 [ 91.755839][ T5490] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 91.755868][ T5490] EXT4-fs (loop5): mount failed [ 92.358163][ T5526] syzkaller0: entered promiscuous mode [ 92.374324][ T5526] syzkaller0: entered allmulticast mode [ 92.406408][ T5530] TC_ACT_REPEAT abuse ? [ 92.420532][ T5532] loop5: detected capacity change from 0 to 128 [ 92.521575][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.351'. [ 92.548549][ T5538] netlink: 'syz.5.351': attribute type 14 has an invalid length. [ 92.565655][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 92.587275][ T5537] Failed to initialize the IGMP autojoin socket (err -2) [ 93.273775][ T5567] loop3: detected capacity change from 0 to 8192 [ 93.593769][ T5602] loop1: detected capacity change from 0 to 512 [ 93.623407][ T5602] EXT4-fs: Ignoring removed nobh option [ 93.638271][ T5602] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.890472][ T5602] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.359: invalid block [ 94.016731][ T5602] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.017356][ T5602] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.359: couldn't read orphan inode 11 (err -117) [ 94.026876][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 94.026901][ C0] EXT4-fs (loop1): initial error at time 1780242574: __ext4_iget:5481: inode 11: block 1 [ 94.026959][ C0] EXT4-fs (loop1): last error at time 1780242574: __ext4_iget:5481: inode 11: block 1 [ 94.475453][ T5602] loop1: lost filesystem error report for type 5 error -117 [ 94.476085][ T5602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.520474][ T5614] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.531998][ T5550] syz.0.354 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 94.575623][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.610022][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.610118][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.610131][ T5550] Call Trace: [ 94.610137][ T5550] [ 94.610144][ T5550] __dump_stack+0x1d/0x30 [ 94.610170][ T5550] dump_stack_lvl+0x95/0xd0 [ 94.610208][ T5550] dump_stack+0x15/0x1b [ 94.610232][ T5550] dump_header+0x80/0x240 [ 94.610258][ T5550] oom_kill_process+0x295/0x350 [ 94.610356][ T5550] out_of_memory+0x97d/0xb80 [ 94.610388][ T5550] try_charge_memcg+0x62f/0xa10 [ 94.610432][ T5550] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 94.610527][ T5550] __alloc_frozen_pages_noprof+0x18a/0x350 [ 94.610563][ T5550] alloc_pages_mpol+0xb3/0x260 [ 94.610603][ T5550] alloc_pages_noprof+0x8f/0x140 [ 94.610632][ T5550] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 94.610682][ T5550] __kvmalloc_node_noprof+0x3d4/0x640 [ 94.610708][ T5550] ? futex_hash_allocate+0x190/0x9a0 [ 94.610783][ T5550] ? futex_hash_allocate+0x190/0x9a0 [ 94.610815][ T5550] futex_hash_allocate+0x190/0x9a0 [ 94.610921][ T5550] ? __schedule+0x951/0xd40 [ 94.610941][ T5550] ? cap_task_prctl+0x13f/0x6b0 [ 94.610981][ T5550] futex_hash_prctl+0xd8/0xf0 [ 94.611022][ T5550] __se_sys_prctl+0x4f4/0x1400 [ 94.611120][ T5550] __x64_sys_prctl+0x67/0x80 [ 94.611150][ T5550] x64_sys_call+0x2533/0x3020 [ 94.611222][ T5550] do_syscall_64+0x12c/0x3b0 [ 94.611254][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.611355][ T5550] RIP: 0033:0x7f0cdc9dce59 [ 94.611377][ T5550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.611400][ T5550] RSP: 002b:00007f0cdb416028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.611465][ T5550] RAX: ffffffffffffffda RBX: 00007f0cdcc56090 RCX: 00007f0cdc9dce59 [ 94.611555][ T5550] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.611568][ T5550] RBP: 00007f0cdca72d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.611582][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.611603][ T5550] R13: 00007f0cdcc56128 R14: 00007f0cdcc56090 R15: 00007ffd7c27fff8 [ 94.611628][ T5550] [ 95.029696][ T5550] memory: usage 269624kB, limit 307200kB, failcnt 508 [ 95.171816][ T5550] memory+swap: usage 272628kB, limit 9007199254740988kB, failcnt 0 [ 95.226335][ T5550] kmem: usage 269348kB, limit 9007199254740988kB, failcnt 0 [ 95.273299][ T5550] Memory cgroup stats for /syz0: [ 95.273593][ T5550] cache 1032192 [ 95.331229][ T5550] rss 12288 [ 95.348931][ T5550] shmem 1032192 [ 95.375605][ T5550] mapped_file 0 [ 95.394595][ T5550] dirty 0 [ 95.414879][ T5550] writeback 0 [ 95.429123][ T5550] workingset_refault_anon 275 [ 95.451115][ T5550] workingset_refault_file 770 [ 95.511592][ T5550] swap 2551808 [ 95.511670][ T5550] swapcached 9068544 [ 95.511678][ T5550] pgpgin 45784 [ 95.511701][ T5550] pgpgout 45527 [ 95.511707][ T5550] pgfault 55238 [ 95.511714][ T5550] pgmajfault 36 [ 95.511720][ T5550] inactive_anon 0 [ 95.511727][ T5550] active_anon 1052672 [ 95.511734][ T5550] inactive_file 0 [ 95.511740][ T5550] active_file 0 [ 95.511747][ T5550] unevictable 0 [ 95.511755][ T5550] hierarchical_memory_limit 314572800 [ 95.511766][ T5550] hierarchical_memsw_limit 9223372036854771712 [ 95.511776][ T5550] total_cache 1032192 [ 95.511861][ T5550] total_rss 12288 [ 95.511872][ T5550] total_shmem 1032192 [ 95.511882][ T5550] total_mapped_file 0 [ 95.511891][ T5550] total_dirty 0 [ 95.511900][ T5550] total_writeback 0 [ 95.511910][ T5550] total_workingset_refault_anon 275 [ 95.511921][ T5550] total_workingset_refault_file 770 [ 95.511933][ T5550] total_swap 2551808 [ 95.511940][ T5550] total_swapcached 9068544 [ 95.511950][ T5550] total_pgpgin 45784 [ 95.511968][ T5550] total_pgpgout 45527 [ 95.511975][ T5550] total_pgfault 55238 [ 95.511982][ T5550] total_pgmajfault 36 [ 95.511989][ T5550] total_inactive_anon 0 [ 95.511996][ T5550] total_active_anon 1052672 [ 95.512004][ T5550] total_inactive_file 0 [ 95.512011][ T5550] total_active_file 0 [ 95.512044][ T5550] total_unevictable 0 [ 95.512055][ T5550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.354,pid=5546,uid=0 [ 95.512166][ T5550] Memory cgroup out of memory: Killed process 5546 (syz.0.354) total-vm:229336kB, anon-rss:1244kB, file-rss:22624kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 95.729295][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 95.729332][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 95.729383][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.729466][ T3303] Call Trace: [ 95.729475][ T3303] [ 95.729486][ T3303] __dump_stack+0x1d/0x30 [ 95.729540][ T3303] dump_stack_lvl+0x95/0xd0 [ 95.729567][ T3303] dump_stack+0x15/0x1b [ 95.729669][ T3303] dump_header+0x80/0x240 [ 95.729691][ T3303] oom_kill_process+0x295/0x350 [ 95.729727][ T3303] out_of_memory+0x97d/0xb80 [ 95.729766][ T3303] try_charge_memcg+0x62f/0xa10 [ 95.729829][ T3303] charge_memcg+0x6d/0x120 [ 95.729930][ T3303] __mem_cgroup_charge+0x28/0xb0 [ 95.729956][ T3303] filemap_add_folio+0x110/0x350 [ 95.729990][ T3303] __filemap_get_folio_mpol+0x326/0x680 [ 95.730056][ T3303] filemap_fault+0x462/0xb70 [ 95.730092][ T3303] ? __pfx_filemap_map_pages+0x10/0x10 [ 95.730162][ T3303] handle_mm_fault+0x16cd/0x2e70 [ 95.730212][ T3303] ? __pfx_filemap_fault+0x10/0x10 [ 95.730260][ T3303] do_user_addr_fault+0x62f/0x1050 [ 95.730298][ T3303] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 95.730405][ T3303] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 95.730436][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 95.730470][ T3303] exc_page_fault+0x62/0xa0 [ 95.730503][ T3303] asm_exc_page_fault+0x26/0x30 [ 95.730606][ T3303] RIP: 0033:0x7ff759c3ae74 [ 95.730625][ T3303] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 95.730646][ T3303] RSP: 002b:00007fffdbef4ff0 EFLAGS: 00010206 [ 95.730665][ T3303] RAX: 0000001b32c24000 RBX: 00000000000000b6 RCX: 0000000000017318 [ 95.730678][ T3303] RDX: 0000000007f1f64b RSI: 00007fffdbef5080 RDI: 0000000000000001 [ 95.730690][ T3303] RBP: 00007fffdbef502c R08: 000000001e4ef319 R09: 3fffffffffffffff [ 95.730781][ T3303] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 95.730793][ T3303] R13: 00000000000927c0 R14: 000000000001725e R15: 00007fffdbef5080 [ 95.730837][ T3303] [ 95.787694][ T3303] memory: usage 307200kB, limit 307200kB, failcnt 313 [ 95.787719][ T3303] memory+swap: usage 314116kB, limit 9007199254740988kB, failcnt 0 [ 95.787738][ T3303] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 95.787755][ T3303] Memory cgroup stats for /syz3: [ 95.788087][ T3303] cache 0 [ 95.788099][ T3303] rss 0 [ 95.788108][ T3303] shmem 0 [ 95.788116][ T3303] mapped_file 0 [ 95.788125][ T3303] dirty 0 [ 95.788178][ T3303] writeback 0 [ 95.788188][ T3303] workingset_refault_anon 312 [ 95.788199][ T3303] workingset_refault_file 1721 [ 95.788209][ T3303] swap 7081984 [ 95.788219][ T3303] swapcached 21192704 [ 95.788229][ T3303] pgpgin 61002 [ 95.788238][ T3303] pgpgout 60998 [ 95.788247][ T3303] pgfault 64050 [ 95.788256][ T3303] pgmajfault 50 [ 95.788265][ T3303] inactive_anon 12288 [ 95.788274][ T3303] active_anon 4096 [ 95.788284][ T3303] inactive_file 0 [ 95.788359][ T3303] active_file 0 [ 95.788366][ T3303] unevictable 0 [ 95.788373][ T3303] hierarchical_memory_limit 314572800 [ 95.788385][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 95.788397][ T3303] total_cache 0 [ 95.788406][ T3303] total_rss 0 [ 95.788415][ T3303] total_shmem 0 [ 95.788424][ T3303] total_mapped_file 0 [ 95.788434][ T3303] total_dirty 0 [ 95.788443][ T3303] total_writeback 0 [ 95.788460][ T3303] total_workingset_refault_anon 312 [ 95.788472][ T3303] total_workingset_refault_file 1721 [ 95.788483][ T3303] total_swap 7081984 [ 95.788556][ T3303] total_swapcached 21192704 [ 95.788567][ T3303] total_pgpgin 61002 [ 95.788577][ T3303] total_pgpgout 60998 [ 95.788586][ T3303] total_pgfault 64050 [ 95.788596][ T3303] total_pgmajfault 50 [ 95.788606][ T3303] total_inactive_anon 12288 [ 95.788636][ T3303] total_active_anon 4096 [ 95.788646][ T3303] total_inactive_file 0 [ 95.788655][ T3303] total_active_file 0 [ 95.788664][ T3303] total_unevictable 0 [ 95.788732][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.356,pid=5563,uid=0 [ 95.788821][ T3303] Memory cgroup out of memory: Killed process 5563 (syz.3.356) total-vm:96216kB, anon-rss:1240kB, file-rss:22744kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 96.122590][ T5670] loop0: detected capacity change from 0 to 1024 [ 96.128024][ T5670] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 96.128057][ T5670] EXT4-fs (loop0): mount failed [ 96.340305][ T28] kauditd_printk_skb: 901 callbacks suppressed [ 96.340367][ T28] audit: type=1400 audit(1780242577.087:7706): avc: denied { write } for pid=5669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.436773][ T5646] loop4: detected capacity change from 0 to 1024 [ 96.437261][ T28] audit: type=1400 audit(1780242577.177:7707): avc: denied { write } for pid=5692 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.556644][ T5646] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 96.557004][ T5646] EXT4-fs (loop4): mount failed [ 96.679364][ T28] audit: type=1326 audit(1780242577.417:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.679526][ T28] audit: type=1326 audit(1780242577.417:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.679562][ T28] audit: type=1326 audit(1780242577.417:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.681471][ T28] audit: type=1326 audit(1780242577.427:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.681656][ T28] audit: type=1326 audit(1780242577.427:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.681922][ T28] audit: type=1326 audit(1780242577.427:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.682044][ T28] audit: type=1326 audit(1780242577.427:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 96.682159][ T28] audit: type=1326 audit(1780242577.427:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5702 comm="syz.0.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc9dce59 code=0x7ffc0000 [ 97.460362][ T5719] loop4: detected capacity change from 0 to 512 [ 97.480811][ T5719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.587671][ T5719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.587816][ T5719] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.676870][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.474786][ T5778] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 99.474786][ T5778] The task syz.3.377 (5778) triggered the difference, watch for misbehavior. [ 99.717572][ T5791] loop3: detected capacity change from 0 to 128 [ 99.777893][ T5795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 99.794660][ T5786] loop4: detected capacity change from 0 to 4096 [ 99.819901][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 99.889762][ T5798] netlink: 'syz.3.378': attribute type 14 has an invalid length. [ 99.899069][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.920360][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 99.961643][ T5786] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.976213][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.985094][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.997376][ T5786] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.379: Failed to acquire dquot type 1 [ 100.017143][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.036710][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.161044][ T5814] loop5: detected capacity change from 0 to 512 [ 100.194837][ T5814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.225585][ T5814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.240186][ T5814] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.288140][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.807156][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.490784][ T28] kauditd_printk_skb: 1097 callbacks suppressed [ 101.490803][ T28] audit: type=1400 audit(1780242582.237:8811): avc: denied { read write } for pid=5846 comm="syz.4.390" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.528602][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 101.595175][ T28] audit: type=1400 audit(1780242582.237:8812): avc: denied { open } for pid=5846 comm="syz.4.390" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.689318][ T5854] FAULT_INJECTION: forcing a failure. [ 101.689318][ T5854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.718442][ T28] audit: type=1400 audit(1780242582.267:8813): avc: denied { ioctl } for pid=5846 comm="syz.4.390" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.770153][ T5856] syzkaller0: entered promiscuous mode [ 101.781228][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.781265][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.781284][ T5854] Call Trace: [ 101.781293][ T5854] [ 101.781304][ T5854] __dump_stack+0x1d/0x30 [ 101.781445][ T5854] dump_stack_lvl+0x95/0xd0 [ 101.781470][ T5854] dump_stack+0x15/0x1b [ 101.781538][ T5854] should_fail_ex+0x263/0x280 [ 101.781628][ T5854] should_fail+0xb/0x20 [ 101.781652][ T5854] should_fail_usercopy+0x1a/0x20 [ 101.781684][ T5854] _copy_from_user+0x1c/0xb0 [ 101.781718][ T5854] ___sys_sendmsg+0xc1/0x1e0 [ 101.781841][ T5854] __x64_sys_sendmsg+0xd4/0x160 [ 101.781878][ T5854] x64_sys_call+0x194c/0x3020 [ 101.781954][ T5854] do_syscall_64+0x12c/0x3b0 [ 101.782009][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.782111][ T5854] RIP: 0033:0x7f4428b5ce59 [ 101.782133][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.782156][ T5854] RSP: 002b:00007f44275b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.782223][ T5854] RAX: ffffffffffffffda RBX: 00007f4428dd5fa0 RCX: 00007f4428b5ce59 [ 101.782239][ T5854] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 101.782252][ T5854] RBP: 00007f44275b7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.782270][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.782321][ T5854] R13: 00007f4428dd6038 R14: 00007f4428dd5fa0 R15: 00007ffc861eddb8 [ 101.782342][ T5854] [ 101.788759][ T5856] syzkaller0: entered allmulticast mode [ 101.968689][ T28] audit: type=1400 audit(1780242582.287:8814): avc: denied { write } for pid=5845 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.177759][ T5859] TC_ACT_REPEAT abuse ? [ 102.452028][ T5872] Failed to initialize the IGMP autojoin socket (err -2) [ 102.485987][ T5882] netlink: 52 bytes leftover after parsing attributes in process `syz.3.400'. [ 102.509063][ T28] audit: type=1400 audit(1780242583.247:8815): avc: denied { write } for pid=5852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.612819][ T28] audit: type=1400 audit(1780242583.357:8816): avc: denied { write } for pid=5890 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.640820][ T5892] loop3: detected capacity change from 0 to 512 [ 102.662097][ T28] audit: type=1400 audit(1780242583.357:8817): avc: denied { accept } for pid=5893 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.673581][ T5892] EXT4-fs: Ignoring removed oldalloc option [ 102.720605][ T5894] loop1: detected capacity change from 0 to 4096 [ 102.737878][ T28] audit: type=1400 audit(1780242583.397:8818): avc: denied { mounton } for pid=5893 comm="syz.1.402" path="/74/file0" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.762463][ T5894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.780331][ T5892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 102.783152][ T5894] EXT4-fs (loop1): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 102.794997][ T5892] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.812679][ T5892] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.819532][ T28] audit: type=1400 audit(1780242583.397:8819): avc: denied { write } for pid=3393 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10495 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.852203][ T5894] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 102.873988][ T28] audit: type=1400 audit(1780242583.617:8820): avc: denied { bind } for pid=5900 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.913207][ T5892] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 102.948535][ T5892] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.401: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 102.970992][ T5892] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.971947][ T5892] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.401: couldn't read orphan inode 13 (err -117) [ 102.981163][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 102.981198][ C0] EXT4-fs (loop3): last error at time 1780242583: ext4_ext_check_inode:521: inode 13 [ 103.036474][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 103.107453][ T5892] loop3: lost filesystem error report for type 5 error -117 [ 103.121298][ T5892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.199096][ T5892] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.401: inode #15: comm syz.3.401: iget: illegal inode # [ 103.536914][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.638172][ T5926] FAULT_INJECTION: forcing a failure. [ 103.638172][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.732454][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.732480][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.732556][ T5926] Call Trace: [ 103.732564][ T5926] [ 103.732574][ T5926] __dump_stack+0x1d/0x30 [ 103.732604][ T5926] dump_stack_lvl+0x95/0xd0 [ 103.732630][ T5926] dump_stack+0x15/0x1b [ 103.732651][ T5926] should_fail_ex+0x263/0x280 [ 103.732711][ T5926] should_fail+0xb/0x20 [ 103.732732][ T5926] should_fail_usercopy+0x1a/0x20 [ 103.732760][ T5926] _copy_from_user+0x1c/0xb0 [ 103.732854][ T5926] __sys_bpf+0x183/0x7e0 [ 103.732999][ T5926] __x64_sys_bpf+0x41/0x50 [ 103.733020][ T5926] x64_sys_call+0x10cb/0x3020 [ 103.733043][ T5926] do_syscall_64+0x12c/0x3b0 [ 103.733128][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.733156][ T5926] RIP: 0033:0x7f0cdc9dce59 [ 103.733181][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.733230][ T5926] RSP: 002b:00007f0cdb437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.733249][ T5926] RAX: ffffffffffffffda RBX: 00007f0cdcc55fa0 RCX: 00007f0cdc9dce59 [ 103.733262][ T5926] RDX: 0000000000000050 RSI: 0000200000002c00 RDI: 000000000000000a [ 103.733278][ T5926] RBP: 00007f0cdb437090 R08: 0000000000000000 R09: 0000000000000000 [ 103.733327][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.733340][ T5926] R13: 00007f0cdcc56038 R14: 00007f0cdcc55fa0 R15: 00007ffd7c27fff8 [ 103.733401][ T5926] [ 104.368007][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 104.473444][ T5945] Failed to initialize the IGMP autojoin socket (err -2) [ 104.498428][ T5942] netlink: 'syz.3.408': attribute type 12 has an invalid length. [ 104.577501][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 105.318083][ T5965] netlink: 68 bytes leftover after parsing attributes in process `syz.5.415'. [ 105.517638][ T5979] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 105.661073][ T5982] syzkaller0: entered promiscuous mode [ 105.679803][ T5982] syzkaller0: entered allmulticast mode [ 105.841980][ T6021] 9pnet_fd: Insufficient options for proto=fd [ 105.857834][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 106.116325][ T5999] loop0: detected capacity change from 0 to 8192 [ 106.291735][ T6025] tipc: Started in network mode [ 106.314690][ T6025] tipc: Node identity ac14140f, cluster identity 4711 [ 106.316966][ T6021] loop3: detected capacity change from 0 to 512 [ 106.354280][ T6025] tipc: Enabling of bearer rejected, failed to enable media [ 106.465154][ T6021] EXT4-fs: Ignoring removed nobh option [ 106.503990][ T6021] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.520931][ T6032] loop1: detected capacity change from 0 to 128 [ 106.643659][ T6038] syzkaller0: entered promiscuous mode [ 106.673992][ T6038] syzkaller0: entered allmulticast mode [ 106.707667][ T6038] TC_ACT_REPEAT abuse ? [ 106.708142][ T6021] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.423: invalid block [ 106.745559][ T28] kauditd_printk_skb: 433 callbacks suppressed [ 106.745574][ T28] audit: type=1400 audit(1780242587.487:9254): avc: denied { module_request } for pid=6043 comm="syz.5.428" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.130965][ T6054] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 107.138891][ T6054] FAT-fs (loop1): Filesystem has been set read-only [ 107.147514][ T6054] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 107.207013][ T6021] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.229641][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 107.245306][ C1] EXT4-fs (loop3): initial error at time 1780242587: __ext4_iget:5481: inode 11: block 1 [ 107.255215][ C1] EXT4-fs (loop3): last error at time 1780242587: __ext4_iget:5481: inode 11: block 1 [ 107.384541][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.423: couldn't read orphan inode 11 (err -117) [ 107.434472][ T6021] loop3: lost filesystem error report for type 5 error -117 [ 107.456842][ T28] audit: type=1400 audit(1780242588.197:9255): avc: denied { write } for pid=6029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.504969][ T6021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.539223][ T28] audit: type=1400 audit(1780242588.277:9256): avc: denied { write } for pid=6059 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.633299][ T6021] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.793522][ T6045] syzkaller0: entered promiscuous mode [ 107.813226][ T6045] syzkaller0: entered allmulticast mode [ 107.841453][ T28] audit: type=1400 audit(1780242588.587:9257): avc: denied { write } for pid=6064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.905190][ T28] audit: type=1400 audit(1780242588.647:9258): avc: denied { write } for pid=6086 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.937548][ T28] audit: type=1400 audit(1780242588.677:9259): avc: denied { ioctl } for pid=6085 comm="syz.0.431" path="socket:[10647]" dev="sockfs" ino=10647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.943181][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.431'. [ 108.007147][ T28] audit: type=1400 audit(1780242588.677:9260): avc: denied { ioctl } for pid=6085 comm="syz.0.431" path="socket:[10645]" dev="sockfs" ino=10645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.105855][ T6096] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 108.142970][ T6079] syzkaller0: entered promiscuous mode [ 108.169821][ T6079] syzkaller0: entered allmulticast mode [ 108.338469][ T28] audit: type=1400 audit(1780242589.047:9261): avc: denied { mounton } for pid=6097 comm="syz.5.435" path="/file0" dev="ramfs" ino=11713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 108.500929][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.5.439'. [ 108.561827][ T28] audit: type=1326 audit(1780242589.297:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.1.440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ae7eece59 code=0x0 [ 108.955572][ T28] audit: type=1400 audit(1780242589.697:9263): avc: denied { write } for pid=6094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.302146][ T6140] loop5: detected capacity change from 0 to 8192 [ 109.572919][ T6186] FAULT_INJECTION: forcing a failure. [ 109.572919][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.663768][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.663802][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.663819][ T6186] Call Trace: [ 109.663828][ T6186] [ 109.663838][ T6186] __dump_stack+0x1d/0x30 [ 109.663863][ T6186] dump_stack_lvl+0x95/0xd0 [ 109.663920][ T6186] dump_stack+0x15/0x1b [ 109.664005][ T6186] should_fail_ex+0x263/0x280 [ 109.664071][ T6186] should_fail+0xb/0x20 [ 109.664092][ T6186] should_fail_usercopy+0x1a/0x20 [ 109.664113][ T6186] _copy_to_user+0x20/0xa0 [ 109.664183][ T6186] simple_read_from_buffer+0xb5/0x130 [ 109.664220][ T6186] proc_fail_nth_read+0x10e/0x150 [ 109.664319][ T6186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.664357][ T6186] vfs_read+0x1ab/0x7f0 [ 109.664399][ T6186] ? __rcu_read_unlock+0x4e/0x70 [ 109.664419][ T6186] ? __fget_files+0x184/0x1c0 [ 109.664485][ T6186] ? __sys_bind+0xc3/0x290 [ 109.664508][ T6186] ? mutex_lock+0x57/0x90 [ 109.664586][ T6186] ksys_read+0xdc/0x1a0 [ 109.664628][ T6186] __x64_sys_read+0x40/0x50 [ 109.664656][ T6186] x64_sys_call+0x2886/0x3020 [ 109.664681][ T6186] do_syscall_64+0x12c/0x3b0 [ 109.664756][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.664839][ T6186] RIP: 0033:0x7f9ae7ead68e [ 109.664876][ T6186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.664900][ T6186] RSP: 002b:00007f9ae693efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.664925][ T6186] RAX: ffffffffffffffda RBX: 00007f9ae693f6c0 RCX: 00007f9ae7ead68e [ 109.664942][ T6186] RDX: 000000000000000f RSI: 00007f9ae693f0a0 RDI: 0000000000000003 [ 109.665019][ T6186] RBP: 00007f9ae693f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.665036][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.665051][ T6186] R13: 00007f9ae8166038 R14: 00007f9ae8165fa0 R15: 00007fffa18ff4f8 [ 109.665080][ T6186] [ 109.951421][ T6200] netlink: 44 bytes leftover after parsing attributes in process `syz.3.452'. [ 109.982907][ T6199] loop1: detected capacity change from 0 to 4096 [ 110.052556][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.176155][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.316560][ T6221] loop1: detected capacity change from 0 to 512 [ 110.334221][ T6221] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.389381][ T6221] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 110.613685][ T6234] netlink: 47 bytes leftover after parsing attributes in process `syz.4.459'. [ 110.723175][ T6253] 9pnet_fd: Insufficient options for proto=fd [ 110.736944][ T6246] loop0: detected capacity change from 0 to 1024 [ 110.777232][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 110.787637][ T6246] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 110.800341][ T6246] EXT4-fs (loop0): mount failed [ 110.806643][ T6258] 9pnet_fd: Insufficient options for proto=fd [ 110.839571][ T6260] netlink: 'syz.4.463': attribute type 8 has an invalid length. [ 110.857763][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 110.862635][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 110.911861][ T6260] bond0: entered promiscuous mode [ 110.934766][ T6258] loop3: detected capacity change from 0 to 512 [ 110.937419][ T6260] bond_slave_0: entered promiscuous mode [ 110.971216][ T6260] bond_slave_1: entered promiscuous mode [ 110.988362][ T6260] batadv0: entered promiscuous mode [ 111.002931][ T6260] hsr1: entered promiscuous mode [ 111.003563][ T6258] EXT4-fs: Ignoring removed nobh option [ 111.022198][ T6260] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.026008][ T6258] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.046594][ T6253] loop1: detected capacity change from 0 to 512 [ 111.142372][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.155821][ T6253] EXT4-fs: Ignoring removed nobh option [ 111.169261][ T6258] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.462: invalid block [ 111.189494][ T6253] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.203542][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.212241][ T6258] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.214346][ T6258] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.462: couldn't read orphan inode 11 (err -117) [ 111.224396][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 111.224576][ C0] EXT4-fs (loop3): initial error at time 1780242591: __ext4_iget:5481: inode 11: block 1 [ 111.225196][ C0] EXT4-fs (loop3): last error at time 1780242591: __ext4_iget:5481: inode 11: block 1 [ 111.245548][ T6264] wireguard: wg0: Could not create IPv4 socket [ 111.274256][ T6264] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 111.278110][ T6253] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.461: invalid block [ 111.358940][ T6258] loop3: lost filesystem error report for type 5 error -117 [ 111.376212][ T6280] loop4: detected capacity change from 0 to 8192 [ 111.380779][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.384721][ T6253] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.419666][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 111.436496][ C1] EXT4-fs (loop1): initial error at time 1780242592: __ext4_iget:5481: inode 11: block 1 [ 111.447443][ C1] EXT4-fs (loop1): last error at time 1780242592: __ext4_iget:5481: inode 11: block 1 [ 111.532672][ T6253] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.461: couldn't read orphan inode 11 (err -117) [ 111.549833][ T6258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.578287][ T6291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.467'. [ 111.594330][ T6253] loop1: lost filesystem error report for type 5 error -117 [ 111.673874][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.758430][ T6253] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.045010][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 112.045027][ T28] audit: type=1400 audit(1780242592.786:9295): avc: denied { create } for pid=6319 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.165492][ T28] audit: type=1400 audit(1780242592.856:9296): avc: denied { setopt } for pid=6319 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.293504][ T6360] 9p: Bad value for 'rfdno' [ 112.297894][ T28] audit: type=1400 audit(1780242592.856:9297): avc: denied { create } for pid=6319 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.334054][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 112.542848][ T28] audit: type=1400 audit(1780242593.286:9298): avc: denied { read } for pid=6371 comm="syz.4.473" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.613790][ T28] audit: type=1400 audit(1780242593.286:9299): avc: denied { open } for pid=6371 comm="syz.4.473" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.684828][ T6372] loop4: detected capacity change from 0 to 128 [ 112.693475][ T28] audit: type=1400 audit(1780242593.316:9300): avc: denied { ioctl } for pid=6371 comm="syz.4.473" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.789879][ T6360] loop1: detected capacity change from 0 to 512 [ 112.837074][ T6360] EXT4-fs: Ignoring removed nobh option [ 112.845367][ T6360] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.858967][ T6372] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.901677][ T6360] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.472: invalid block [ 112.945965][ T6372] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.967866][ T6382] netlink: 'syz.3.476': attribute type 17 has an invalid length. [ 112.989393][ T6360] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.995102][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.472: couldn't read orphan inode 11 (err -117) [ 113.004631][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 113.004742][ C0] EXT4-fs (loop1): initial error at time 1780242593: __ext4_iget:5481: inode 11: block 1 [ 113.005012][ C0] EXT4-fs (loop1): last error at time 1780242593: __ext4_iget:5481: inode 11: block 1 [ 113.017120][ T6382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.476'. [ 113.048174][ T28] audit: type=1400 audit(1780242593.786:9301): avc: denied { mount } for pid=6381 comm="syz.3.476" name="/" dev="autofs" ino=11072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 113.056776][ T6382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.094292][ T28] audit: type=1400 audit(1780242593.826:9302): avc: denied { write } for pid=6381 comm="syz.3.476" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.096531][ T6360] loop1: lost filesystem error report for type 5 error -117 [ 113.171885][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.279590][ T6360] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.484399][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.510623][ T28] audit: type=1400 audit(1780242594.246:9303): avc: denied { firmware_load } for pid=6397 comm="syz.3.482" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 113.786644][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 113.828082][ T6418] loop3: detected capacity change from 0 to 512 [ 113.866065][ T6418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.891591][ T6418] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.936429][ T6418] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.488: bg 0: block 259: padding at end of block bitmap is not set [ 113.950775][ T28] audit: type=1400 audit(1780242594.676:9304): avc: denied { write } for pid=6417 comm="syz.3.488" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.057335][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.133888][ T6430] Failed to initialize the IGMP autojoin socket (err -2) [ 114.160724][ T6434] netlink: 14 bytes leftover after parsing attributes in process `syz.4.493'. [ 114.188430][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 114.407608][ T6458] loop1: detected capacity change from 0 to 512 [ 114.430724][ T6458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.468468][ T6458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.487602][ T6465] Failed to initialize the IGMP autojoin socket (err -2) [ 114.535565][ T6471] Failed to initialize the IGMP autojoin socket (err -2) [ 114.549404][ T6458] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.496: invalid indirect mapped block 83886080 (level 1) [ 114.594545][ T6474] loop0: detected capacity change from 0 to 1024 [ 114.603636][ T6458] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 114.603800][ T6458] EXT4-fs (loop1): Remounting filesystem read-only [ 114.612995][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 114.613011][ C0] EXT4-fs (loop1): initial error at time 1780242595: ext4_free_branches:1023: inode 16 [ 114.613048][ C0] EXT4-fs (loop1): last error at time 1780242595: ext4_free_branches:1023: inode 16 [ 114.706915][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.741283][ T6458] EXT4-fs (loop1): 1 orphan inode deleted [ 114.753229][ T6458] EXT4-fs (loop1): 1 truncate cleaned up [ 114.767790][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.805827][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.925244][ T6480] loop0: detected capacity change from 0 to 4096 [ 114.958545][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.173548][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.311228][ T6489] capability: warning: `syz.0.501' uses 32-bit capabilities (legacy support in use) [ 115.556162][ T6500] Failed to initialize the IGMP autojoin socket (err -2) [ 115.824937][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.960777][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'. [ 116.208857][ T6526] loop4: detected capacity change from 0 to 8192 [ 116.464296][ T6530] Failed to initialize the IGMP autojoin socket (err -2) [ 116.568298][ T6525] loop5: detected capacity change from 0 to 1024 [ 116.619484][ T6525] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 116.630982][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.641790][ T6525] EXT4-fs (loop5): mount failed [ 116.651767][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.670746][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.690030][ T6535] syz.1.516 uses obsolete (PF_INET,SOCK_PACKET) [ 116.738345][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.768843][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.819471][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.924985][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.972813][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 117.019273][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 117.228267][ T6567] batadv1: entered promiscuous mode [ 117.235914][ T6567] batadv1: entered allmulticast mode [ 117.241706][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 117.241720][ T28] audit: type=1326 audit(1780242597.986:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.398659][ T28] audit: type=1326 audit(1780242598.026:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.424038][ T28] audit: type=1326 audit(1780242598.026:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.449385][ T28] audit: type=1326 audit(1780242598.026:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.474898][ T28] audit: type=1326 audit(1780242598.026:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.656331][ T6588] Failed to initialize the IGMP autojoin socket (err -2) [ 117.749400][ T28] audit: type=1326 audit(1780242598.026:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.776598][ T28] audit: type=1326 audit(1780242598.026:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.802527][ T28] audit: type=1326 audit(1780242598.026:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.867849][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.872045][ T28] audit: type=1326 audit(1780242598.026:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.888727][ T6598] Failed to initialize the IGMP autojoin socket (err -2) [ 117.904386][ T28] audit: type=1326 audit(1780242598.026:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4428b5ce59 code=0x7ffc0000 [ 117.932010][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.090339][ T6620] loop3: detected capacity change from 0 to 8192 [ 120.384529][ T6727] 9p: Bad value for 'rfdno' [ 120.444888][ T6731] 9p: Bad value for 'rfdno' [ 120.598858][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.631773][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.771874][ T6736] loop4: detected capacity change from 0 to 4096 [ 120.785915][ T6731] loop1: detected capacity change from 0 to 512 [ 120.860494][ T6736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.878852][ T6731] EXT4-fs: Ignoring removed nobh option [ 120.891889][ T6727] loop5: detected capacity change from 0 to 512 [ 120.906478][ T6731] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.946899][ T6727] EXT4-fs: Ignoring removed nobh option [ 120.999571][ T6727] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.032552][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.051093][ T6731] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.541: invalid block [ 121.118714][ T6731] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.121345][ T6731] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.541: couldn't read orphan inode 11 (err -117) [ 121.131065][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 121.131255][ C0] EXT4-fs (loop1): initial error at time 1780242601: __ext4_iget:5481: inode 11: block 1 [ 121.131944][ C0] EXT4-fs (loop1): last error at time 1780242601: __ext4_iget:5481: inode 11: block 1 [ 121.189844][ T6731] loop1: lost filesystem error report for type 5 error -117 [ 121.197423][ T6727] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.539: invalid block [ 121.235611][ T6731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.280473][ T6727] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.282873][ T6727] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.539: couldn't read orphan inode 11 (err -117) [ 121.289762][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 121.302055][ T6727] loop5: lost filesystem error report for type 5 error -117 [ 121.304517][ C1] EXT4-fs (loop5): initial error at time 1780242602: __ext4_iget:5481: inode 11: block 1 [ 121.304587][ C1] EXT4-fs (loop5): last error at time 1780242602: __ext4_iget:5481: inode 11: block 1 [ 121.367570][ T6731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.400462][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.443282][ T6727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.507268][ T6771] tmpfs: Bad value for 'mpol' [ 121.612525][ T6782] Failed to initialize the IGMP autojoin socket (err -2) [ 121.707811][ T6791] FAULT_INJECTION: forcing a failure. [ 121.707811][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.768169][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.5.551 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.768202][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.768238][ T6791] Call Trace: [ 121.768246][ T6791] [ 121.768255][ T6791] __dump_stack+0x1d/0x30 [ 121.768282][ T6791] dump_stack_lvl+0x95/0xd0 [ 121.768366][ T6791] dump_stack+0x15/0x1b [ 121.768387][ T6791] should_fail_ex+0x263/0x280 [ 121.768409][ T6791] should_fail+0xb/0x20 [ 121.768427][ T6791] should_fail_usercopy+0x1a/0x20 [ 121.768451][ T6791] _copy_to_user+0x20/0xa0 [ 121.768572][ T6791] simple_read_from_buffer+0xb5/0x130 [ 121.768611][ T6791] proc_fail_nth_read+0x10e/0x150 [ 121.768642][ T6791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.768734][ T6791] vfs_read+0x1ab/0x7f0 [ 121.768866][ T6791] ? __rcu_read_unlock+0x4e/0x70 [ 121.768889][ T6791] ? __fget_files+0x184/0x1c0 [ 121.768910][ T6791] ? mutex_lock+0x57/0x90 [ 121.768936][ T6791] ksys_read+0xdc/0x1a0 [ 121.769023][ T6791] __x64_sys_read+0x40/0x50 [ 121.769113][ T6791] x64_sys_call+0x2886/0x3020 [ 121.769139][ T6791] do_syscall_64+0x12c/0x3b0 [ 121.769172][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.769246][ T6791] RIP: 0033:0x7f823466d68e [ 121.769270][ T6791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.769322][ T6791] RSP: 002b:00007f82330e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.769344][ T6791] RAX: ffffffffffffffda RBX: 00007f82330e66c0 RCX: 00007f823466d68e [ 121.769359][ T6791] RDX: 000000000000000f RSI: 00007f82330e60a0 RDI: 0000000000000004 [ 121.769373][ T6791] RBP: 00007f82330e6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.769449][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.769462][ T6791] R13: 00007f8234926128 R14: 00007f8234926090 R15: 00007ffcdb5139f8 [ 121.769482][ T6791] [ 122.106293][ T6787] loop1: detected capacity change from 0 to 512 [ 122.152523][ T6796] loop4: detected capacity change from 0 to 512 [ 122.210259][ T6787] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.552: inode has both inline data and extents flags [ 122.223468][ T6787] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.223718][ T6787] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.552: couldn't read orphan inode 15 (err -117) [ 122.232924][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 122.232939][ C1] EXT4-fs (loop1): initial error at time 1780242602: ext4_orphan_get:1397: inode 15 [ 122.232977][ C1] EXT4-fs (loop1): last error at time 1780242602: ext4_orphan_get:1397: inode 15 [ 122.269906][ T6787] loop1: lost filesystem error report for type 5 error -117 [ 122.270983][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.297248][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 122.297278][ T28] audit: type=1400 audit(1780242603.036:9579): avc: denied { write } for pid=6785 comm="syz.1.552" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.376432][ T6796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.601146][ T6796] ext4: Unknown parameter 'permit_directio' [ 122.639076][ T28] audit: type=1400 audit(1780242603.356:9580): avc: denied { write } for pid=6807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.716578][ T6792] loop0: detected capacity change from 0 to 8192 [ 122.821312][ T28] audit: type=1400 audit(1780242603.356:9581): avc: denied { create } for pid=6806 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.970502][ T28] audit: type=1400 audit(1780242603.366:9582): avc: denied { connect } for pid=6806 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.084644][ T28] audit: type=1400 audit(1780242603.376:9583): avc: denied { write } for pid=6806 comm="syz.5.555" path="socket:[13706]" dev="sockfs" ino=13706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.188995][ T28] audit: type=1400 audit(1780242603.446:9584): avc: denied { read } for pid=6806 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.273968][ T28] audit: type=1400 audit(1780242603.876:9585): avc: denied { write } for pid=6815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.647606][ T28] audit: type=1400 audit(1780242604.386:9586): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.680120][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.729956][ T6829] __nla_validate_parse: 7 callbacks suppressed [ 123.729971][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 123.770736][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.784069][ T28] audit: type=1400 audit(1780242604.446:9587): avc: denied { write } for pid=6826 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.795777][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.897467][ T6844] Failed to initialize the IGMP autojoin socket (err -2) [ 123.955918][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 124.014618][ T6854] loop5: detected capacity change from 0 to 512 [ 124.035241][ T6849] loop0: detected capacity change from 0 to 512 [ 124.060478][ T6854] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 124.062259][ T6849] EXT4-fs: Ignoring removed nobh option [ 124.096102][ T6849] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.146796][ T28] audit: type=1400 audit(1780242604.886:9588): avc: denied { write } for pid=6841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.153656][ T6849] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.562: invalid block [ 124.231374][ T6849] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.239655][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 124.255307][ C0] EXT4-fs (loop0): initial error at time 1780242604: __ext4_iget:5481: inode 11: block 1 [ 124.265215][ C0] EXT4-fs (loop0): last error at time 1780242604: __ext4_iget:5481: inode 11: block 1 [ 124.277257][ T6849] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.562: couldn't read orphan inode 11 (err -117) [ 124.300081][ T6849] loop0: lost filesystem error report for type 5 error -117 [ 124.322465][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.363631][ T6846] bridge0: port 3(ip6gretap0) entered disabled state [ 124.372890][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.380287][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.398166][ T6849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.401206][ T6846] bridge0: left promiscuous mode [ 124.413083][ T6846] bridge0: left allmulticast mode [ 124.505955][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.516089][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.568348][ T6846] hsr1: left promiscuous mode [ 124.586983][ T6680] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.599460][ T6680] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.615147][ T6680] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.648682][ T6680] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.160592][ T6898] loop1: detected capacity change from 0 to 8192 [ 125.257024][ T6907] loop4: detected capacity change from 0 to 512 [ 125.338536][ T6907] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 125.357188][ T6907] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 125.366468][ T6907] System zones: 0-1, 15-15, 18-18, 34-34 [ 125.381576][ T6907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.395413][ T6907] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.413118][ T6907] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 125.424241][ T6907] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.568: bad orphan inode 16 [ 125.435474][ T6907] loop4: lost filesystem error report for type 5 error -117 [ 125.436685][ T6907] ext4_test_bit(bit=15, block=18) = 1 [ 125.445707][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 125.445997][ C0] EXT4-fs (loop4): initial error at time 1780242606: ext4_orphan_get:1423 [ 125.446187][ C0] EXT4-fs (loop4): last error at time 1780242606: ext4_orphan_get:1423 [ 125.489968][ T6907] is_bad_inode(inode)=0 [ 125.496700][ T6907] NEXT_ORPHAN(inode)=0 [ 125.503101][ T6907] max_ino=32 [ 125.508127][ T6907] i_nlink=2 [ 125.526157][ T6907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.641532][ T6924] syzkaller0: entered promiscuous mode [ 125.666940][ T6924] syzkaller0: entered allmulticast mode [ 125.833090][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.890188][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 125.973191][ T6935] Failed to initialize the IGMP autojoin socket (err -2) [ 126.089854][ T6943] 9p: Bad value for 'rfdno' [ 126.131864][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 126.262778][ T6953] 9pnet_fd: Insufficient options for proto=fd [ 126.326414][ T6943] loop0: detected capacity change from 0 to 512 [ 126.327337][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 126.374839][ T6943] EXT4-fs: Ignoring removed nobh option [ 126.393718][ T6958] loop1: detected capacity change from 0 to 512 [ 126.417765][ T6943] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.438943][ T6958] EXT4-fs: Ignoring removed nobh option [ 126.464990][ T6958] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.482556][ T6943] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.572: invalid block [ 126.494170][ T6943] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.495335][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.572: couldn't read orphan inode 11 (err -117) [ 126.504581][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 126.504708][ C1] EXT4-fs (loop0): initial error at time 1780242607: __ext4_iget:5481: inode 11: block 1 [ 126.504879][ C1] EXT4-fs (loop0): last error at time 1780242607: __ext4_iget:5481: inode 11: block 1 [ 126.546991][ T6943] loop0: lost filesystem error report for type 5 error -117 [ 126.547906][ T6958] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.573: invalid block [ 126.614190][ T6958] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.614932][ T6958] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.573: couldn't read orphan inode 11 (err -117) [ 126.624209][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 126.624239][ C1] EXT4-fs (loop1): initial error at time 1780242607: __ext4_iget:5481: inode 11: block 1 [ 126.624291][ C1] EXT4-fs (loop1): last error at time 1780242607: __ext4_iget:5481: inode 11: block 1 [ 126.702951][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.716342][ T6958] loop1: lost filesystem error report for type 5 error -117 [ 126.718430][ T6958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.761339][ T6967] loop5: detected capacity change from 0 to 4096 [ 126.792042][ T6967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.816463][ T6958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.953787][ T6943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.965596][ T6974] loop4: detected capacity change from 0 to 1024 [ 126.980023][ T6974] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 126.988520][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.009777][ T6974] EXT4-fs (loop4): mount failed [ 127.110887][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.128591][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.226070][ T6981] loop5: detected capacity change from 0 to 512 [ 127.261937][ T6981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.302166][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 127.302188][ T28] audit: type=1400 audit(1780242608.046:9606): avc: denied { write } for pid=6985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.342666][ T6981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.374503][ T6981] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.459014][ T28] audit: type=1400 audit(1780242608.186:9607): avc: denied { write } for pid=7006 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.488869][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.559428][ T7011] syz_tun: entered promiscuous mode [ 127.571636][ T7011] syz_tun: left promiscuous mode [ 127.982730][ T28] audit: type=1400 audit(1780242608.716:9608): avc: denied { ioctl } for pid=7018 comm="syz.3.581" path="socket:[13912]" dev="sockfs" ino=13912 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.111735][ T7029] loop5: detected capacity change from 0 to 4096 [ 128.122377][ T7029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.123788][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 128.180217][ T7029] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 128.212810][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.247575][ T28] audit: type=1400 audit(1780242608.976:9609): avc: denied { write } for pid=7012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.274059][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.283387][ T7021] syzkaller0: entered promiscuous mode [ 128.311127][ T7021] syzkaller0: entered allmulticast mode [ 128.321259][ T7029] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 128.343843][ T7029] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 128.344297][ T7043] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 128.354150][ T7029] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.583: Failed to acquire dquot type 1 [ 128.379048][ T7042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.585'. [ 128.388606][ T28] audit: type=1400 audit(1780242609.126:9610): avc: denied { write } for pid=7044 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.410903][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.431960][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.499432][ T7043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.506397][ T28] audit: type=1400 audit(1780242609.236:9611): avc: denied { create } for pid=7041 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.553641][ T6684] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.580393][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.586890][ T28] audit: type=1400 audit(1780242609.236:9612): avc: denied { write } for pid=7041 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.627563][ T7048] bond1: (slave batadv1): making interface the new active one [ 128.635148][ T28] audit: type=1400 audit(1780242609.286:9613): avc: denied { create } for pid=7041 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.691730][ T7048] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 128.734146][ T7043] bond1 (unregistering): (slave batadv1): Releasing active interface [ 128.742438][ T7055] loop4: detected capacity change from 0 to 1024 [ 128.773655][ T7043] bond1 (unregistering): Released all slaves [ 128.824027][ T7055] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 128.837705][ T7055] EXT4-fs (loop4): mount failed [ 129.001762][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.026835][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 129.080590][ T7080] FAULT_INJECTION: forcing a failure. [ 129.080590][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.092331][ T7078] loop4: detected capacity change from 0 to 512 [ 129.116588][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.1.592 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.116624][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.116638][ T7080] Call Trace: [ 129.116717][ T7080] [ 129.116728][ T7080] __dump_stack+0x1d/0x30 [ 129.116758][ T7080] dump_stack_lvl+0x95/0xd0 [ 129.116785][ T7080] dump_stack+0x15/0x1b [ 129.116811][ T7080] should_fail_ex+0x263/0x280 [ 129.116857][ T7080] should_fail+0xb/0x20 [ 129.116879][ T7080] should_fail_usercopy+0x1a/0x20 [ 129.116971][ T7080] _copy_from_user+0x1c/0xb0 [ 129.117002][ T7080] perf_copy_attr+0x145/0x610 [ 129.117033][ T7080] perf_ioctl+0x3ce/0x15c0 [ 129.117070][ T7080] ? do_vfs_ioctl+0x84f/0xe70 [ 129.117192][ T7080] ? __pfx_perf_ioctl+0x10/0x10 [ 129.117227][ T7080] __se_sys_ioctl+0xce/0x140 [ 129.117326][ T7080] __x64_sys_ioctl+0x43/0x50 [ 129.117364][ T7080] x64_sys_call+0x1563/0x3020 [ 129.117404][ T7080] do_syscall_64+0x12c/0x3b0 [ 129.117446][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.117519][ T7080] RIP: 0033:0x7f9ae7eece59 [ 129.117539][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.117560][ T7080] RSP: 002b:00007f9ae693f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.117594][ T7080] RAX: ffffffffffffffda RBX: 00007f9ae8165fa0 RCX: 00007f9ae7eece59 [ 129.117636][ T7080] RDX: 0000200000000040 RSI: 000000004008240b RDI: 0000000000000003 [ 129.117653][ T7080] RBP: 00007f9ae693f090 R08: 0000000000000000 R09: 0000000000000000 [ 129.117670][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.117687][ T7080] R13: 00007f9ae8166038 R14: 00007f9ae8165fa0 R15: 00007fffa18ff4f8 [ 129.117713][ T7080] [ 129.125054][ T7078] EXT4-fs: Ignoring removed nobh option [ 129.327630][ T7078] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.427978][ T7078] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.591: invalid block [ 129.449681][ T7078] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.452490][ T7078] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.591: couldn't read orphan inode 11 (err -117) [ 129.462001][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 129.462091][ C0] EXT4-fs (loop4): initial error at time 1780242610: __ext4_iget:5481: inode 11: block 1 [ 129.462271][ C0] EXT4-fs (loop4): last error at time 1780242610: __ext4_iget:5481: inode 11: block 1 [ 129.523659][ T7078] loop4: lost filesystem error report for type 5 error -117 [ 129.544024][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.798690][ T7078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.575534][ T3645] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.863103][ T7116] loop0: detected capacity change from 0 to 4096 [ 130.922117][ T7116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.041320][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.065912][ T7114] loop4: detected capacity change from 0 to 8192 [ 131.832249][ T7138] syzkaller0: entered promiscuous mode [ 131.838639][ T7138] syzkaller0: entered allmulticast mode [ 132.113099][ T7153] loop0: detected capacity change from 0 to 512 [ 132.161094][ T7153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.255947][ T7153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.291410][ T7153] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.375722][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.497353][ T7184] loop0: detected capacity change from 0 to 128 [ 132.530194][ T7184] msdos: Unknown parameter '0000000000000000000000300000000000000000003' [ 132.676262][ T28] kauditd_printk_skb: 576 callbacks suppressed [ 132.676278][ T28] audit: type=1400 audit(1780242613.416:10190): avc: denied { write } for pid=7175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.760580][ T28] audit: type=1400 audit(1780242613.496:10191): avc: denied { write } for pid=7200 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.071643][ T28] audit: type=1400 audit(1780242613.806:10192): avc: denied { write } for pid=7204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.122876][ T7194] loop0: detected capacity change from 0 to 8192 [ 133.173433][ T28] audit: type=1400 audit(1780242613.916:10193): avc: denied { write } for pid=7221 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.221779][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 133.241645][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 133.276129][ T7196] loop1: detected capacity change from 0 to 8192 [ 133.580745][ T7236] loop5: detected capacity change from 0 to 1024 [ 133.606092][ T7236] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 133.617412][ T28] audit: type=1400 audit(1780242614.356:10194): avc: denied { write } for pid=7228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.636529][ T7236] EXT4-fs (loop5): mount failed [ 133.712103][ T28] audit: type=1400 audit(1780242614.446:10195): avc: denied { write } for pid=7243 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.775302][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.775873][ T7226] loop4: detected capacity change from 0 to 512 [ 133.803785][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.805188][ T7226] EXT4-fs: Ignoring removed nobh option [ 133.836694][ T7225] loop3: detected capacity change from 0 to 512 [ 133.852252][ T7226] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.889404][ T7225] EXT4-fs: Ignoring removed nobh option [ 133.911674][ T7225] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.964619][ T7226] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.617: invalid block [ 133.982718][ T7252] netlink: 'syz.0.620': attribute type 21 has an invalid length. [ 134.021519][ T7254] FAULT_INJECTION: forcing a failure. [ 134.021519][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.053303][ T7226] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.058240][ T7226] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.617: couldn't read orphan inode 11 (err -117) [ 134.060188][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.060286][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.060335][ T7254] Call Trace: [ 134.060356][ T7254] [ 134.060385][ T7254] __dump_stack+0x1d/0x30 [ 134.060457][ T7254] dump_stack_lvl+0x95/0xd0 [ 134.060547][ T7254] dump_stack+0x15/0x1b [ 134.060616][ T7254] should_fail_ex+0x263/0x280 [ 134.060716][ T7254] should_fail+0xb/0x20 [ 134.060769][ T7254] should_fail_usercopy+0x1a/0x20 [ 134.060833][ T7254] _copy_from_user+0x1c/0xb0 [ 134.060951][ T7254] ___sys_sendmsg+0xc1/0x1e0 [ 134.061093][ T7254] __x64_sys_sendmsg+0xd4/0x160 [ 134.061200][ T7254] x64_sys_call+0x194c/0x3020 [ 134.061341][ T7254] do_syscall_64+0x12c/0x3b0 [ 134.061442][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.061580][ T7254] RIP: 0033:0x7f9ae7eece59 [ 134.061632][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.061685][ T7254] RSP: 002b:00007f9ae693f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.061747][ T7254] RAX: ffffffffffffffda RBX: 00007f9ae8165fa0 RCX: 00007f9ae7eece59 [ 134.061820][ T7254] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 134.061863][ T7254] RBP: 00007f9ae693f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.061904][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.061938][ T7254] R13: 00007f9ae8166038 R14: 00007f9ae8165fa0 R15: 00007fffa18ff4f8 [ 134.061957][ T7254] [ 134.068921][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 134.069051][ C0] EXT4-fs (loop4): initial error at time 1780242614: __ext4_iget:5481: inode 11: block 1 [ 134.069270][ C0] EXT4-fs (loop4): last error at time 1780242614: __ext4_iget:5481: inode 11: block 1 [ 134.091868][ T7225] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.616: invalid block [ 134.094294][ T7226] loop4: lost filesystem error report for type 5 error -117 [ 134.144613][ T7226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.256432][ T7225] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.313252][ T28] audit: type=1400 audit(1780242615.046:10196): avc: denied { write } for pid=7248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.363316][ T7260] program syz.0.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.371158][ T28] audit: type=1400 audit(1780242615.106:10197): avc: denied { read write } for pid=7259 comm="syz.0.622" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.375856][ T7226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.396880][ T28] audit: type=1400 audit(1780242615.106:10198): avc: denied { ioctl open } for pid=7259 comm="syz.0.622" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.399939][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 134.400086][ C0] EXT4-fs (loop3): initial error at time 1780242615: __ext4_iget:5481: inode 11: block 1 [ 134.400745][ C0] EXT4-fs (loop3): last error at time 1780242615: __ext4_iget:5481: inode 11: block 1 [ 134.423570][ T28] audit: type=1400 audit(1780242615.166:10199): avc: denied { write } for pid=7269 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.488414][ T7225] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.616: couldn't read orphan inode 11 (err -117) [ 134.511587][ T7225] loop3: lost filesystem error report for type 5 error -117 [ 134.619476][ T7225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.664251][ T7225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.821245][ T7289] loop3: detected capacity change from 0 to 256 [ 134.928563][ T7304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 134.964690][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.0.628'. [ 134.994194][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 135.132671][ T7328] loop0: detected capacity change from 0 to 128 [ 135.192270][ T7332] loop4: detected capacity change from 0 to 128 [ 135.225592][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 135.275396][ T7337] netlink: 'syz.0.633': attribute type 12 has an invalid length. [ 135.300021][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 135.319737][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 135.347763][ T7338] netlink: 'syz.4.634': attribute type 12 has an invalid length. [ 135.364842][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 135.366506][ T7323] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 135.390499][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.404584][ T7323] EXT4-fs (loop5): mount failed [ 135.568627][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'. [ 135.691929][ T7353] EXT4-fs: Ignoring removed nobh option [ 135.717541][ T7353] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.827501][ T7353] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.635: invalid block [ 135.850048][ T7353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.851483][ T7353] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.635: couldn't read orphan inode 11 (err -117) [ 135.861088][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 135.861104][ C0] EXT4-fs (loop5): initial error at time 1780242616: __ext4_iget:5481: inode 11: block 1 [ 135.861147][ C0] EXT4-fs (loop5): last error at time 1780242616: __ext4_iget:5481: inode 11: block 1 [ 136.014144][ T7353] loop5: lost filesystem error report for type 5 error -117 [ 136.142939][ T7353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.204807][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.230146][ T7353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.239830][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.567677][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 136.594234][ T7434] netlink: 'syz.4.648': attribute type 12 has an invalid length. [ 136.602819][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 137.722405][ T7473] 9p: Could not find request transport: fd0x0000000000000003 [ 137.985107][ T7475] set_capacity_and_notify: 4 callbacks suppressed [ 137.985126][ T7475] loop0: detected capacity change from 0 to 8192 [ 138.115279][ T7473] loop1: detected capacity change from 0 to 512 [ 138.207519][ T7473] EXT4-fs: Ignoring removed nobh option [ 138.243513][ T7473] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.334690][ T28] kauditd_printk_skb: 548 callbacks suppressed [ 138.334706][ T28] audit: type=1400 audit(1780242619.076:10748): avc: denied { write } for pid=7468 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.381017][ T7473] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.657: invalid block [ 138.400555][ T7473] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.404048][ T7473] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.657: couldn't read orphan inode 11 (err -117) [ 138.414227][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 138.414267][ C1] EXT4-fs (loop1): initial error at time 1780242619: __ext4_iget:5481: inode 11: block 1 [ 138.414478][ C1] EXT4-fs (loop1): last error at time 1780242619: __ext4_iget:5481: inode 11: block 1 [ 138.468837][ T7473] loop1: lost filesystem error report for type 5 error -117 [ 138.483392][ T7473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.550711][ T7473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.722711][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.771977][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.909886][ T28] audit: type=1400 audit(1780242619.646:10749): avc: denied { write } for pid=7495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.162321][ T28] audit: type=1400 audit(1780242619.906:10750): avc: denied { write } for pid=7514 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.524878][ T7513] loop1: detected capacity change from 0 to 1024 [ 139.574796][ T7513] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 139.598855][ T7513] EXT4-fs (loop1): mount failed [ 139.657083][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.684437][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.716782][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.740834][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.773348][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.813757][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.858750][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.889251][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.922797][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.946820][ T6012] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 139.970838][ T28] audit: type=1400 audit(1780242620.706:10751): avc: denied { write } for pid=7519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.002199][ T6012] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 140.088672][ T28] audit: type=1400 audit(1780242620.826:10752): avc: denied { write } for pid=7539 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.158262][ T7538] fido_id[7538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.547837][ T28] audit: type=1400 audit(1780242621.286:10753): avc: denied { allowed } for pid=7546 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 140.608576][ T28] audit: type=1400 audit(1780242621.316:10754): avc: denied { append } for pid=7565 comm="syz.5.676" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.635115][ T28] audit: type=1400 audit(1780242621.376:10755): avc: denied { create } for pid=7562 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.702157][ T28] audit: type=1400 audit(1780242621.406:10756): avc: denied { write } for pid=7552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.757474][ T28] audit: type=1400 audit(1780242621.436:10757): avc: denied { write } for pid=7578 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.197309][ T7582] loop5: detected capacity change from 0 to 1024 [ 141.677258][ T7582] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 141.693397][ T7582] EXT4-fs (loop5): mount failed [ 141.891953][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.907869][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.215409][ T7651] FAULT_INJECTION: forcing a failure. [ 143.215409][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 143.259680][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.4.695 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.259713][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.259729][ T7651] Call Trace: [ 143.259738][ T7651] [ 143.259758][ T7651] __dump_stack+0x1d/0x30 [ 143.259786][ T7651] dump_stack_lvl+0x95/0xd0 [ 143.259812][ T7651] dump_stack+0x15/0x1b [ 143.259906][ T7651] should_fail_ex+0x263/0x280 [ 143.259933][ T7651] should_failslab+0x8c/0xb0 [ 143.259966][ T7651] __kvmalloc_node_noprof+0x155/0x640 [ 143.259987][ T7651] ? file_tty_write+0x1a3/0x680 [ 143.260008][ T7651] ? mutex_trylock+0x81/0xc0 [ 143.260098][ T7651] file_tty_write+0x1a3/0x680 [ 143.260118][ T7651] ? __pfx_tty_write+0x10/0x10 [ 143.260184][ T7651] tty_write+0x25/0x30 [ 143.260201][ T7651] vfs_write+0x5a6/0x9f0 [ 143.260243][ T7651] ksys_write+0xdc/0x1a0 [ 143.260275][ T7651] __x64_sys_write+0x40/0x50 [ 143.260338][ T7651] x64_sys_call+0x27e1/0x3020 [ 143.260422][ T7651] do_syscall_64+0x12c/0x3b0 [ 143.260454][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.260476][ T7651] RIP: 0033:0x7f4428b5ce59 [ 143.260493][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.260543][ T7651] RSP: 002b:00007f44275b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.260563][ T7651] RAX: ffffffffffffffda RBX: 00007f4428dd5fa0 RCX: 00007f4428b5ce59 [ 143.260576][ T7651] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 143.260590][ T7651] RBP: 00007f44275b7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.260607][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.260664][ T7651] R13: 00007f4428dd6038 R14: 00007f4428dd5fa0 R15: 00007ffc861eddb8 [ 143.260686][ T7651] [ 143.367485][ T7649] loop0: detected capacity change from 0 to 1024 [ 143.607007][ T7671] loop5: detected capacity change from 0 to 764 [ 143.628459][ T28] kauditd_printk_skb: 430 callbacks suppressed [ 143.628486][ T28] audit: type=1400 audit(1780242624.366:11188): avc: denied { write } for pid=7652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.664753][ T7671] rock: directory entry would overflow storage [ 143.675926][ T7671] rock: sig=0x4654, size=5, remaining=4 [ 143.735369][ T7676] Failed to initialize the IGMP autojoin socket (err -2) [ 143.745360][ T28] audit: type=1400 audit(1780242624.496:11189): avc: denied { write } for pid=7677 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.769468][ T7649] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 143.825223][ T7649] EXT4-fs (loop0): mount failed [ 144.038701][ T28] audit: type=1400 audit(1780242624.776:11190): avc: denied { create } for pid=7694 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.081809][ T7695] loop0: detected capacity change from 0 to 128 [ 144.106742][ T28] audit: type=1400 audit(1780242624.836:11191): avc: denied { write } for pid=7680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.156297][ T7698] __nla_validate_parse: 6 callbacks suppressed [ 144.156314][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 144.207233][ T28] audit: type=1400 audit(1780242624.946:11192): avc: denied { write } for pid=7699 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.226810][ T7698] netlink: 'syz.0.702': attribute type 12 has an invalid length. [ 144.251073][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 144.354259][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.704'. [ 144.370713][ T7707] netlink: 52 bytes leftover after parsing attributes in process `syz.5.704'. [ 144.493005][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 144.515649][ T7715] FAULT_INJECTION: forcing a failure. [ 144.515649][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.547488][ T28] audit: type=1400 audit(1780242625.286:11193): avc: denied { write } for pid=7704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.552372][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.5.705 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.552452][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.552491][ T7715] Call Trace: [ 144.552511][ T7715] [ 144.552567][ T7715] __dump_stack+0x1d/0x30 [ 144.552650][ T7715] dump_stack_lvl+0x95/0xd0 [ 144.552714][ T7715] dump_stack+0x15/0x1b [ 144.552774][ T7715] should_fail_ex+0x263/0x280 [ 144.552895][ T7715] should_fail+0xb/0x20 [ 144.552947][ T7715] should_fail_usercopy+0x1a/0x20 [ 144.553019][ T7715] _copy_from_iter+0xcf/0xea0 [ 144.553129][ T7715] ? __alloc_skb+0x4f6/0x690 [ 144.553211][ T7715] ? __alloc_skb+0x200/0x690 [ 144.553297][ T7715] netlink_sendmsg+0x4ae/0x6f0 [ 144.553417][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.553516][ T7715] ____sys_sendmsg+0x563/0x5b0 [ 144.553669][ T7715] ___sys_sendmsg+0x195/0x1e0 [ 144.553782][ T7715] __x64_sys_sendmsg+0xd4/0x160 [ 144.553920][ T7715] x64_sys_call+0x194c/0x3020 [ 144.553994][ T7715] do_syscall_64+0x12c/0x3b0 [ 144.554126][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.554269][ T7715] RIP: 0033:0x7f82346ace59 [ 144.554320][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.554375][ T7715] RSP: 002b:00007f8233107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.554483][ T7715] RAX: ffffffffffffffda RBX: 00007f8234925fa0 RCX: 00007f82346ace59 [ 144.554526][ T7715] RDX: 0000000000048014 RSI: 0000200000000340 RDI: 0000000000000004 [ 144.554567][ T7715] RBP: 00007f8233107090 R08: 0000000000000000 R09: 0000000000000000 [ 144.554616][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.554671][ T7715] R13: 00007f8234926038 R14: 00007f8234925fa0 R15: 00007ffcdb5139f8 [ 144.554753][ T7715] [ 144.873507][ T28] audit: type=1400 audit(1780242625.616:11194): avc: denied { write } for pid=7724 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.089425][ T7726] loop5: detected capacity change from 0 to 1024 [ 145.181553][ T7726] EXT4-fs: Ignoring removed i_version option [ 145.295777][ T7726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.410948][ T7726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.477032][ T7733] loop0: detected capacity change from 0 to 8192 [ 145.499555][ T28] audit: type=1326 audit(1780242626.236:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cdc9dce59 code=0x0 [ 145.593223][ T7744] netlink: 9 bytes leftover after parsing attributes in process `syz.0.709'. [ 145.623664][ T7744] gretap0: entered promiscuous mode [ 145.652523][ T7748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7748 comm=syz.0.709 [ 145.706091][ T28] audit: type=1400 audit(1780242626.446:11196): avc: denied { write } for pid=7738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.748234][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.800454][ T28] audit: type=1400 audit(1780242626.536:11197): avc: denied { write } for pid=7754 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.822710][ T7756] loop5: detected capacity change from 0 to 1024 [ 145.855943][ T7756] EXT4-fs: Ignoring removed orlov option [ 145.906373][ T7756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.920179][ T7756] FAULT_INJECTION: forcing a failure. [ 145.920179][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 145.963326][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.5.711 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.963369][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.963393][ T7756] Call Trace: [ 145.963400][ T7756] [ 145.963468][ T7756] __dump_stack+0x1d/0x30 [ 145.963498][ T7756] dump_stack_lvl+0x95/0xd0 [ 145.963525][ T7756] dump_stack+0x15/0x1b [ 145.963549][ T7756] should_fail_ex+0x263/0x280 [ 145.963574][ T7756] should_failslab+0x8c/0xb0 [ 145.963646][ T7756] kmem_cache_alloc_noprof+0x66/0x3f0 [ 145.963832][ T7756] ? do_getname+0x2e/0x1c0 [ 145.963924][ T7756] do_getname+0x2e/0x1c0 [ 145.963947][ T7756] getname_flags+0x1d/0x30 [ 145.963964][ T7756] do_sys_openat2+0x60/0x130 [ 145.963988][ T7756] __x64_sys_openat+0xf2/0x120 [ 145.964011][ T7756] x64_sys_call+0x1e39/0x3020 [ 145.964081][ T7756] do_syscall_64+0x12c/0x3b0 [ 145.964114][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.964139][ T7756] RIP: 0033:0x7f82346ace59 [ 145.964175][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.964193][ T7756] RSP: 002b:00007f8233107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.964212][ T7756] RAX: ffffffffffffffda RBX: 00007f8234925fa0 RCX: 00007f82346ace59 [ 145.964231][ T7756] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 145.964307][ T7756] RBP: 00007f8233107090 R08: 0000000000000000 R09: 0000000000000000 [ 145.964320][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.964332][ T7756] R13: 00007f8234926038 R14: 00007f8234925fa0 R15: 00007ffcdb5139f8 [ 145.964357][ T7756] [ 146.161283][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.678156][ T7778] loop0: detected capacity change from 0 to 1024 [ 146.715005][ T7773] ================================================================== [ 146.723162][ T7773] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 146.731509][ T7773] [ 146.733828][ T7773] write to 0xffffea0004dc7858 of 8 bytes by task 7778 on cpu 0: [ 146.741453][ T7773] delete_from_page_cache_batch+0x310/0x720 [ 146.747367][ T7773] truncate_inode_pages_range+0x1fe/0x7e0 [ 146.753089][ T7773] truncate_inode_pages+0x24/0x30 [ 146.758204][ T7773] set_blocksize+0x1ed/0x270 [ 146.762801][ T7773] sb_set_blocksize+0x93/0x170 [ 146.767575][ T7773] sb_min_blocksize+0x53/0x60 [ 146.772270][ T7773] ext4_fill_super+0x398/0x37c0 [ 146.777130][ T7773] get_tree_bdev_flags+0x291/0x300 [ 146.782268][ T7773] get_tree_bdev+0x1f/0x30 [ 146.786692][ T7773] ext4_get_tree+0x1c/0x30 [ 146.791107][ T7773] vfs_get_tree+0x57/0x1d0 [ 146.795540][ T7773] do_new_mount+0x288/0x8d0 [ 146.800057][ T7773] path_mount+0x4d0/0xbc0 [ 146.804413][ T7773] __se_sys_mount+0x28c/0x2e0 [ 146.809113][ T7773] __x64_sys_mount+0x67/0x80 [ 146.813767][ T7773] x64_sys_call+0x2d61/0x3020 [ 146.818455][ T7773] do_syscall_64+0x12c/0x3b0 [ 146.823056][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.828958][ T7773] [ 146.831283][ T7773] read to 0xffffea0004dc7858 of 8 bytes by task 7773 on cpu 1: [ 146.838821][ T7773] folio_mapping+0xa1/0xe0 [ 146.843254][ T7773] lru_add+0x8d/0x460 [ 146.847254][ T7773] folio_batch_move_lru+0x1d3/0x290 [ 146.852468][ T7773] lru_add_drain_cpu+0x66/0x210 [ 146.857343][ T7773] lru_add_drain+0x25/0x70 [ 146.861774][ T7773] shrink_lruvec+0xba/0x1bc0 [ 146.866372][ T7773] shrink_node+0x697/0x20a0 [ 146.870887][ T7773] do_try_to_free_pages+0x408/0xc90 [ 146.876090][ T7773] try_to_free_mem_cgroup_pages+0x201/0x420 [ 146.881987][ T7773] try_charge_memcg+0x373/0xa10 [ 146.886845][ T7773] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 146.892406][ T7773] __alloc_frozen_pages_noprof+0x18a/0x350 [ 146.898242][ T7773] alloc_pages_mpol+0xb3/0x260 [ 146.903016][ T7773] alloc_pages_noprof+0x8f/0x140 [ 146.907969][ T7773] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 146.913869][ T7773] __kvmalloc_node_noprof+0x3d4/0x640 [ 146.919247][ T7773] futex_hash_allocate+0x190/0x9a0 [ 146.924373][ T7773] futex_hash_prctl+0xd8/0xf0 [ 146.929063][ T7773] __se_sys_prctl+0x4f4/0x1400 [ 146.933852][ T7773] __x64_sys_prctl+0x67/0x80 [ 146.938453][ T7773] x64_sys_call+0x2533/0x3020 [ 146.943139][ T7773] do_syscall_64+0x12c/0x3b0 [ 146.947751][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.953648][ T7773] [ 146.955967][ T7773] value changed: 0xffff8881005f1128 -> 0x0000000000000000 [ 146.963069][ T7773] [ 146.965391][ T7773] Reported by Kernel Concurrency Sanitizer on: [ 146.971535][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.5.712 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.980734][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.990790][ T7773] ================================================================== [ 147.133164][ T7778] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 147.160135][ T7778] EXT4-fs (loop0): mount failed [ 147.267400][ T7800] loop4: detected capacity change from 0 to 8192 [ 148.710851][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 148.710871][ T28] audit: type=1400 audit(1780242629.456:11224): avc: denied { write } for pid=7955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.748463][ T28] audit: type=1400 audit(1780242629.486:11225): avc: denied { write } for pid=7966 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.852450][ T28] audit: type=1400 audit(1780242629.596:11226): avc: denied { write } for pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.884749][ T28] audit: type=1400 audit(1780242629.626:11227): avc: denied { write } for pid=7980 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.001837][ T28] audit: type=1400 audit(1780242629.746:11228): avc: denied { write } for pid=7985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.035766][ T28] audit: type=1400 audit(1780242629.776:11229): avc: denied { write } for pid=7996 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.141519][ T28] audit: type=1400 audit(1780242629.886:11230): avc: denied { write } for pid=7999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.180717][ T28] audit: type=1400 audit(1780242629.926:11231): avc: denied { write } for pid=8010 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1