last executing test programs: 5.952717332s ago: executing program 0 (id=1385): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000196000000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000500)="feae54e19d512cf60e9b12e5d6ec644497f864ca11b91b9b262f9b9fcde3709347d01b52c0a6141d0820597b916c816b4aff12153023a1b077272c66231c1bb9e603a3c2cf4f5032c35d098203d148638782052fcdb2be32cbbde24e08bc790884ab98c90dbb0fadaacf199d75e2201e869abdd648bcb1094d5a75d1f77b63027edad4c2f50bb8ea5ac3b99191ebfa85407e77f81c80a0a85ebe2fe0ad4cff73428b639ef239e3ada7998417fb26b3bfc11979300a43b00e05ce8c13dbf92fa15a2108c3b2a8f63ff23a4b361d9748cb5895a4ea0dbe", 0xd6}, {&(0x7f0000000600)="b9deb927590ab84c62790dbe50e2957772dc8c871e36ef27e0725e90f6f0783bc7a17ac79aac5aa1fe2327f93641ffe342a6abd608b02057d656d4cd0021487ce3da24b2ce3d73ba888cd9351ed00eaffc226450d27ab6b7ea8838a67317c84d34ee518e6bb2512f1047918d4690f3b4f13e6d7a570731c568abef4d3d7af12b7c7b606d1f57dd89e819bdf5ceaad0ea", 0x90}, {&(0x7f00000006c0)="35c960a952b563a010c02e6f576f5b19b83729cd74188217296cf698fcb3596aa23f25a89c1dc00d385c3b0b0ed2e5f277f063459e73e31229a1eeb440525ef9b0c9d2a4ee7110", 0x47}, {&(0x7f0000000740)="cdd0f5eb5a7bf2aabce4ae980759d162bb8b8bd1afef45d52860e82e3c41e5fd4d0a982e58d9d110c6609edc9c63a3103ccc0c96af31b6aec75d83ef976285644564ce52662ff25206b0b0e9a51753cac73c289657eec293566e9b602b43a7af3d671098e60349bd9f7929e7ebcbcf5b8fa0381ace656fcfcfd2772408e5b1d34215e47c8452cdc06df289a61b44978b03ed2bd9a722dc", 0x97}, {&(0x7f0000000800)="ff8fd2b50e0293ead86782bc6fcb2e05e01a4948417933898c3e61514cd164eed6edb32b76106ad1ff8605b12aa55ca7796e07244725dd3790b0eaec8539a274cc862db33aca1c6dc028197c86bdf80bab40df905d898efe681754e9c3bf54ebc7a4a3b0c4e8d3ba7122a167b629d1574f863a1df4b144779f0e88d05d12c8427f6c6e4f16836b08e600a2a66aa9d8a63a", 0x91}, {&(0x7f00000008c0)="4d9de8a7cd52bfe9c5cc9606de15d4b9e443b99a8a3b775d7db5210ae9e78d899c6812edfe52696255a512c8c92919af5b04", 0x32}], 0x6, &(0x7f0000000980)="a933e8f134b090a424deec9eee30a25cce039a9288f70fcdd2f88ace95205a16d3f5bf79881b34f131c6369368ba87c1090b7003b095d3fc04ab3b87043eb4cd536ebd8898be9023b6cceb5002772d7f1359c520ec86dc36ef164863c2b06c676214208a451e7762c6e949471e1acd21ea5684a45c149101a6ae975fed2b6c7f027958388bd2851418bbfacbbed15ffe9694d48eefbe7356302dced77ab97ae478c2091b9dddd3e161987f6fb8bd205669d73016d2", 0xb5, 0x10}, 0x4c080) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4003, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 4.122730879s ago: executing program 1 (id=1396): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006d0001000000000000000000023c0000", @ANYRES32, @ANYBLOB="0000000000000000180034"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') lseek(r7, 0x2000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001dc0)={0x34, r8, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0xe, [@gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfa, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20004004) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000001d80)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe97}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x38}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x5b936abb0}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xffffffffffff8001}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24040050}, 0x40000) 3.943489695s ago: executing program 0 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x1e, 0x4, 0x0) r2 = socket(0x22, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x10000) getpid() setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x104, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1bc}}, 0x80c4) 3.886624567s ago: executing program 4 (id=1399): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r0}) getsockname(r0, &(0x7f00000000c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000140)=0x80) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req3={0x5, 0x8, 0xfff, 0xc, 0x9, 0x7, 0x8}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0xb5, [0x3, 0x1ff, 0x7, 0x2, 0x37c, 0x6], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000280)=""/181}, &(0x7f00000003c0)=0x78) getsockname$l2tp(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10) sendto$unix(r1, &(0x7f0000000480)="a39b8e564b23f8946dd07b3ddd97d0daf8c062e847bdfd0b02", 0x19, 0x4028001, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) syz_clone3(&(0x7f0000000740)={0x80000, &(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0), {0x33}, &(0x7f0000000600)=""/106, 0x6a, &(0x7f0000000680)=""/108, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58) mq_notify(r1, &(0x7f00000007c0)={0x0, 0x21, 0x2, @tid=r2}) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000880)={'erspan0\x00', r3, 0x0, 0x10, 0xffffffff, 0x2, {{0x21, 0x4, 0x0, 0x22, 0x84, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x63, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xe}, {@remote, 0x7}, {@private=0xa010100, 0x5}, {@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x4, [{@private=0xa010102, 0x2}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x6}]}, @lsrr={0x83, 0x1b, 0x90, [@private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @local, @local]}, @lsrr={0x83, 0xf, 0xcf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x28}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c88c}, 0x4813) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @loopback, @local}, &(0x7f0000000b00)=0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000b40)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x75c, 0xfffffffffffffffe, 0xc, 0x21]}, &(0x7f0000000bc0)=0x78) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, r1, 0x1, 0x3, 0x1}, 0x50) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/rcu_stall_count', 0x410802, 0x21) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @typedef={0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0x5f]}}, &(0x7f0000000f80)=""/51, 0x43, 0x33, 0x1, 0x429a040c}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001080)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x18, 0x2e, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0xf, 0x2, 0xa, 0x8, 0x80000000}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa39}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e40)='syzkaller\x00', 0x8, 0x4f, &(0x7f0000000e80)=""/79, 0x41100, 0x9, '\x00', r3, @fallback=0x2d, r7, 0x8, &(0x7f0000001000)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001040)={0x2, 0x3, 0x0, 0x8}, 0x10, r8, r1, 0x5, 0x0, &(0x7f00000010c0)=[{0x3, 0x2, 0xb, 0x5}, {0x2, 0x3, 0x1, 0xc}, {0x2, 0x2, 0xa, 0x6}, {0x5, 0x2, 0xe, 0x7}, {0x2, 0x5, 0x6, 0x5}], 0x10, 0x8000}, 0x94) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001200)={0x1, 0x8ae, 0x6, 0x4, 0x8}) ioctl$sock_bt_hci(r6, 0x400448ca, &(0x7f0000001240)="043012cddbc5332a8501c9924ca6e2ccd1abfeb559706d5259168fa4e1b687dd9877dbf7fa893a301d78") r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r1) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x40005) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000013c0), 0x4) write$hidraw(r1, &(0x7f0000001400)="2998929037e7d61fb51ea4016ddc812d607733dc2dc35f368fea62904d263d4f8258f4798311c043f2f6e31ef92882a3ec6b5aacdceec1fbabe45cbe4564524f909f60e992af10968e08355716f2d86134158dd0e594828f906505b1787a68da82467bc6f6c2852f31278be80537a40d5891e72dbcbe765e4eb69c5872536d6b29cfda05a7a283cf59eeccf0b146d630f04550c75162b37b4ecfd79e8e98a41b0e0fcc98", 0xa4) memfd_create(&(0x7f00000014c0)='filter\x00', 0x5) 3.729691563s ago: executing program 4 (id=1400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1ff, 0x31, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x8, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f00000002c0)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x4844) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(r9, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0xff}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0x2679, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 3.533169338s ago: executing program 1 (id=1401): socket$inet6(0xa, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000b2c0)={&(0x7f000000b100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x7fffffff, 0x9}, {0xf6b, 0x9}, {0x8}, {0x2, 0x1}, {0x8, 0x1}, {0xff, 0xfffffffffffffff8}, {}, {0x2, 0x7fffffff}, {0x7, 0x7}, {0x400, 0x5}, {0xffffffffffffff6a, 0x4}, {0x7, 0xffffffffffff7ab3}, {0x1, 0x6}, {0x9, 0x3}, {0xfff, 0xffff}, {0xfff, 0x8}, {0xbc, 0x8}, {0x4, 0x10000}, {0xffffffffffffd083, 0x6}, {0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x9}, {0x101, 0xffffffffffffffff}, {0x4, 0x2}, {0x2, 0xeb0}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x9, 0x7}, {0x2, 0x40}, {0x8, 0x44b0}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x7fffffff}, {0x0, 0x200}, {0x2, 0xf3a}, {0x754, 0x4}, {0xffffffffffffd241, 0x10000000}, {0x0, 0x81}, {0x1, 0x8}, {0x800, 0x8}, {0x1, 0xfc7}, {0x80, 0x1}, {0x4, 0x537d}, {0xfffffffffffffeff}, {0x1, 0x8}, {0xffffffffffffffff, 0x7}, {0xfffffffffffffff9, 0x6}, {0x8, 0x75ae}, {0x4, 0xfffffffffffffffc}, {0x7ff, 0x3fbf}, {0x2, 0x1}, {0x7, 0x53f2}, {0x8, 0x1ff}, {0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x242, 0x6}, {0xff8000000000000, 0x3}, {0x7, 0x350}, {0xff, 0x5}, {0x3, 0x2}, {0x9, 0x2cfe}, {0x4}, {0x2, 0x3}, {0x34, 0x9}, {0x2, 0x2bd5272f}, {0x0, 0x5}, {0x40, 0x2}, {0x1, 0x6}, {0x6}, {0x8, 0xfff}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0xa372, 0x8000000000000000}, {0x4, 0x6}, {0x3, 0xffffffffffffffff}, {0x0, 0x400}, {0xffffffffffff86a3}, {0x5, 0x2}, {0xff, 0x880}, {0x9, 0x10000}, {0x9, 0x7}, {0x7}, {0x2, 0xcc}, {0xff, 0x2}, {0xedd, 0x9}, {0x4, 0xfd}, {0x7a1a5261}, {0x9, 0x3}, {0x7, 0x9ea0}, {0x2, 0x800}, {0x8, 0x9}, {0x3ff, 0x7}, {0x4, 0x7fffffffffffffff}, {0xe4}, {0xf, 0xf}, {0x401, 0x5}, {0x1f4}, {0x8, 0x7}, {0xd, 0x8f5}, {0x4d82, 0x3}, {0x1, 0x4}, {0x5, 0x805}, {0x1, 0x7fff}, {0x0, 0x4}, {0x40}, {0x1, 0x5}, {0x7, 0x9}, {0x81, 0x9}, {0x5, 0x5}, {0x6, 0x3}, {0xffffffffffffffeb, 0xf19f}, {0x3, 0xffffffffffffff06}, {0x4, 0x8000000000000000}, {0xc2, 0x4}, {0x9, 0xcd0}, {0x0, 0x3}, {0x7, 0xb355}, {0xfa, 0x8}, {0x3, 0x6}, {0x100000001, 0x9}, {0x1, 0x10000}, {0x4, 0x9}, {0x8000, 0xd940}, {0xb, 0xf}, {0x38000000, 0x401}, {0x3c, 0x3}, {0x800}, {0x1, 0xfffffffffffffff7}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x573}, {0x9, 0x80000000}, {0x5, 0x10000}, {0x7, 0xd}, {0xffffffffa3bcd084, 0xd1}, {0x14}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0x8000}, {0x3, 0x6}, {0x3, 0x101}, {0x2, 0x4}, {0x9, 0x4}, {0x7fff, 0x4}, {0x7, 0x8}, {0x165, 0xc8e}, {0x3, 0x1}, {0xfff, 0x2}, {0x2, 0x7}, {0x1, 0xffffffffffffff48}, {0x80000000, 0x28a}, {0xc, 0x2}, {0x400, 0xe}, {0xfffffffffffff800, 0xffffffffffff0000}, {0x5, 0x100000001}, {0x80000000, 0x6}, {0xffffffffffffff01, 0x5d24}, {0x0, 0x6}, {0x9, 0xffffffff00000000}, {0x2, 0x1ff}, {0x4, 0x41}, {0x8000, 0xeb}, {0x1, 0xffffffff}, {0x5, 0x8}, {0xe, 0x3}, {0x8fd, 0x5}, {0x800, 0x1}, {0x9, 0x6}, {0xdc9, 0x3}, {0x2400, 0x9}, {0x935, 0x4}, {0x6, 0x9}, {0x2, 0x1f}, {0x6, 0xffffffffffff7fff}, {0x1, 0x4}, {0x8, 0xffffffffffffff77}, {0x7ff, 0x8}, {0xf27, 0x101}, {0xbd2, 0x4}, {0x800, 0x8}, {0xaacf, 0xfffffffffffff000}, {0xca4, 0xfffffffffffffbff}, {0x3, 0x3}, {0x5, 0x100000001}, {0xa22d}, {0x1800, 0x917}, {0x7, 0x1}, {0xa, 0x4}, {0x1c00}, {0xdf, 0x5}, {0x200, 0x5}, {0x1, 0x5}, {0x9, 0x4}, {0x1, 0x4}, {0xde, 0x100000001}, {0x0, 0x401}, {0xb, 0x80}, {0x1, 0xf61}, {0x1, 0x200}, {0x9, 0xfffffffffacefc96}, {0x3, 0x1}, {0x5, 0xd6a}, {0x72c, 0x8}, {0x5, 0x8000000000000000}, {0x3, 0x55e}, {0x0, 0x1}, {0x2cf, 0xc38e}, {0x0, 0x4}, {0x400, 0x8}, {0x7fff, 0x9}, {0x6, 0x9}, {0x5}, {0x0, 0x80000001}, {0xc86d, 0x2}, {0x80000000, 0x388}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0xffa}, {0x101, 0x264d}, {0xa0ad}, {0xb, 0x9}, {0x5, 0x7}, {0xfffffffffffff801, 0xd}, {0x401, 0x8}, {0x80, 0x9}, {0x8, 0x9}, {0x8, 0x4}, {0x5, 0x1}, {0xffffffffffffffff, 0x10}, {0x8, 0x9000}, {0x7f, 0xfffffffffffffff9}, {0x8}, {0xd, 0x1ff}, {0x3, 0x2}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0x8000}, {0x1, 0x4}, {0x7, 0x40}, {0xe, 0x7}, {0x8, 0xfffffffffffffffb}, {0xb, 0x3}, {0x9, 0x9}, {0x4, 0xf9}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="00000000002a531c86b9000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f00000002c0), 0x1, 0xa43, &(0x7f0000001180)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44956) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) readahead(r0, 0x60000000000000, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x0, &(0x7f0000000000)=[{0x20, 0x7f, 0x8e, 0x1}, {0x6, 0xb, 0xa1, 0x1}]}, 0xfc77) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)="d60d43bb35", 0xdd6}], 0x1}}], 0x1, 0x0) 3.146336261s ago: executing program 1 (id=1403): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x7}, 0xc000, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7fc, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="a7", 0xfffd, 0x48d8, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fbf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0xc8}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x8}}, {0x4}}]}]}, 0x8c}}, 0x4000080) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.402992985s ago: executing program 4 (id=1406): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b7000000000095001b0000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 2.122061563s ago: executing program 1 (id=1408): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.121392093s ago: executing program 3 (id=1409): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x3, 0x3a) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/94, 0x5e, 0x0, &(0x7f0000000440)=""/123, 0x7b}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)='%pB \x00'}, 0x20) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4002, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.094030544s ago: executing program 1 (id=1410): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0202"], 0x18) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, @perf_config_ext={0x4, 0x80}, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000480), 0x10) close(r4) fcntl$setlease(r3, 0x400, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) shutdown(r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="00aa97c4e34e7f390bacfc13400000000000000021ca919fdd77ce62bfdc79dae0dd13d99836e3e0d10575cb1b1c881817216e5d684c6aa6f988295228b1d76ccda451a263087b479582a4d43026b82a9dc5b7547c89547ab32125ffd6c015c884b14926c5d789ddbaf267268b48b3f0b91b0d2808ed02"], 0x0, 0x55d, &(0x7f0000000540)="$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") socket$inet6_udp(0xa, 0x2, 0x0) 2.005662747s ago: executing program 2 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000580)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4044804}, 0xc080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540), 0x84) sendmsg$nl_generic(r5, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)={0x14, 0x1f, 0x300, 0x70bd25, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) tee(r0, r0, 0x2, 0x3) 1.932281599s ago: executing program 3 (id=1412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x6a040000) fsopen(0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0xb0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0000520006000500"], 0x2c}}, 0x40080) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300ff0f000008000700"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0xfffffffe, 0x5, 0x1, [0x8, 0x4, 0x2, 0x800, 0x80, 0x5, 0x400, 0x6, 0x2, 0x3, 0x7, 0x0, 0x1000, 0x4, 0x2, 0xff00], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"f741", 0x1}}, @common=@eui64={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x6, {0x1526e072}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 1.91555606s ago: executing program 2 (id=1413): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000033a40)=""/102391, 0x18ff7) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4108, 0x25b}], 0x1, 0x800, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x4000) 1.90369351s ago: executing program 4 (id=1414): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) fsync(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(0xffffffffffffffff, 0x3, 0x1) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000600)=""/161, 0x7}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) 1.798827223s ago: executing program 2 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000340)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f04e000000e0000000400000003000000000061000000302e2e"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c0f00000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) recvmsg$unix(r6, 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000300)) 1.103039135s ago: executing program 1 (id=1416): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x28000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000fdffffffffffffff00000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000002000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e22, 0xdffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000400004"], 0x28}, 0x4004004) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) syz_usb_connect(0x6, 0x6e1, &(0x7f0000003e80)=ANY=[@ANYBLOB="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"/1765], &(0x7f0000001f80)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x110, 0x0, 0x9, 0x40, 0x8, 0xff}, 0x5e, &(0x7f0000000f00)=ANY=[@ANYBLOB="050f5e000618100a048300000000f00500cf000000c03f0000f03fff000d4c2878549fa77710010438000c06ffff0c18100a02230000000fff0200300000003fc00000c005000000000000000000000f001b00c0c0000007100200670b00f4dad16e76bb5de804606c850c58fb2948a28feca37893e8c452bbcc19f0eb9665ac47543c98faaaca6ed55192c55e00bbeeb61d37df4804929354db4f15ecdcaee6a57a596fbfb0a4357a01a7a0ef63a538e6793e61fdfb0524ec0a2652cd8bfa4071e7d72094d3f7338a9f296fc5eb7cbd7afb88ce42cb6664c31044dbeafca631fafadd6ab2cf943025b95eec00"/250], 0x9, [{0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x420}}, {0x32, &(0x7f0000001d00)=ANY=[@ANYBLOB="3203033fe97248cdc0db370ee3c909fd70b3fc84fdaaa5765ffa7fa392722b2573e14d24065ada7dd4cea1fac11179fead9f"]}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x429}}, {0x5c, &(0x7f0000000c80)=ANY=[@ANYBLOB="5c0337054efedb73ffe10b5b4ecccb8e726b9c095dd438330aaa35905bd01b81096f6ff8dbb440d4499f073aeef6c8273bf5982e6894797fdbc3f780b362502a8666e96813b93bb4fe4a45f2d42a65a08e4f9a57a04394e8070d9482607196dfc500ef10ad2a96d9eace033c0aeb185e39cde53bac1f3c1f2059e22a7b95a15d78d68473ca8621f9d3f20b0e52d9fabc7b01838c0b5353bd0cf05ae9c023c09b5f2556620110de05f03648f88299fa621d197735ddac782330936ebee61268ca38135bb80bf514cf7ae1754af642c58fe008a4d3ca3eea6359fd9600bce0336024a354d58d"]}, {0x10, &(0x7f0000001e40)=@string={0x10, 0x3, "fa111a643cffdc1a673a5d33491f"}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x99, &(0x7f0000001ec0)=@string={0x99, 0x3, "c4d2f2594a3018b5e83d8ec62c4ef0f232f440fe9d42ba7df5d4f97e1de172d752dcce0715a279e1b7a6f2dfb8d654b69f10a159081ed4ebcc0837097f464a20f3ca063f64ba003a31e1afc3e9d4607df6f4239f0e4cae92d4df5bc6c73074225d0cf1dedb89539edeeb1273ded76aa2645db726f7cfb1ecaa2aa6645dcce54995072ea2a2cec543a8ebf5a01a93aecafa07950ccca7d6"}}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_read_part_table(0x5c6, &(0x7f0000003880)="$eJzs2z9o02kYB/AnahAUzsXJ4bA3OLkojmawkkRFIUS7iIOCImKmCEKEgKCDZlDMUDp2KYUs/TM1zdDhaGmhcykdehQ6dDrapdClv6PX9+DG/r1D+Hzg5eF932/y5BkyvsFP7Uz8mWVZLiKy84f/9ECnWLp/tXKn+iQiF88iou/3Xyb2bnIp8c+3/pb2q2k/Mnyh93XrXr6z8nj72vPZ1pl0/zGti6PdgX93yo46IKdqrDB36dPnevlbo/Bmudxc/7K0+Gh8s1jtPmy1Jx7k775MuflUz6X6LhrxId7Gi6hFLV5F/YT6D3XWbuxeKXemXt/eKfW+z9xMucox5zxo//d9P562m/3XJy8P3mpML1Q3zu7nakf4dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N8bK8xd+vS5Xv7WKLxZLjfXvywtPhrfLFa7D1vtiQf5uy9Tbj7Vc6m+i0Z8iLfxImpRi1dRP5H+EUOdtRu7V8qdqde3d0q97zM3U65yzDkP1r+5/r7vx9N2s//65OXBW43pherG2f1c7fwp/QAAAAAAAAAAAAAAAAAAAACIiGLp/tXKneqTiFw8i4jur/1/P/XP0nv3XMplWZbt1dV0PjJ8ofd1616+s/J4+9rz2dYf6fxjWhdHuwP/xzwczl8BAAD//+9pmT4=") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) recvmmsg(r3, &(0x7f0000002c00), 0x0, 0x40010021, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r2, 0x5608) 1.097437476s ago: executing program 0 (id=1417): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) socket(0x10, 0xa, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() setpgid(r1, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000080)={0x38, 0x4, 0x400}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r2, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0xc, [{@private=0xa010101, 0x5}, {@local, 0xa}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe83}}}}}}, 0x0) 1.035338328s ago: executing program 4 (id=1418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x7}, 0xc000, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7fc, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="a7", 0xfffd, 0x48d8, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fbf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0xc8}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x8}}, {0x4}}]}]}, 0x8c}}, 0x4000080) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.025885498s ago: executing program 0 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210003000000140003006272696467655f736c6176655f"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 935.670251ms ago: executing program 3 (id=1420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 878.877013ms ago: executing program 2 (id=1421): unshare(0x26020480) close(0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 877.104982ms ago: executing program 3 (id=1422): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x3, 0x3a) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/94, 0x5e, 0x0, &(0x7f0000000440)=""/123, 0x7b}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)='%pB \x00'}, 0x20) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4002, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 840.396754ms ago: executing program 3 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) read(r1, 0x0, 0x0) 803.307755ms ago: executing program 0 (id=1424): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="3a0faa20631f7437ae461d26419c36e4182fdbff5499a9898f2850519f62cc8e3de7989591049f30eed71dcd651dd6614661e2f95bfb383d3a0b6c415a5753a3e737a3b9a41359974bdae02cf11dc1b1ba75e6"}, {&(0x7f00000002c0)="f0317a0aba1116701cb20f671151601d70ce6b928aad332fc3823c50425757cc20bc540d81885a04e783f4c032200449e46229615dab80f269d4cb87213b6954a5c84b93e5368bdb490b243ecf3cce7b331a35e199efff4fdf7e3e84b7715df8e57e70d5fceb7efd410da2a5e308a9dbaa1532896f1d5066b2f9ea43b6aa51b9e34dd33dfc37ae134eedab56f2a7b9f2451dca8e986f18aa219c242758efbc4b5ea30a1071854f6f3ff1ef45009ded54acca6415a8767a27592a43d6737b2fd3aa616b624a"}, {&(0x7f00000003c0)="597b0c30c2815c08857aaab0c984c32e876372417243966320c1f330406505fef953fc4d564242f2b405baa89aa2a1f0662047aaeed8d45676b4c15514382d6aa7535b20321e7bd79e8b9df1a3084fc6903d5e1c5e23a47b6451fa727a4ded634330616dbfd175c15244ac9bbc5dfdc8d3b0f88da2cc168d5205e6e637252e3579c48b8ee27fc9bfa52f564e52d89b774c1aeaffbfcfb4ab77bd3e0805e592bbaef521495da805062baa05367df1c0305621329e3720289fa3d1b422d1fdb83f"}], 0x0, &(0x7f0000000640)}}], 0x2, 0x42054) r1 = epoll_create1(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x6000000f}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 590.852061ms ago: executing program 3 (id=1425): r0 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "59d7390b"}, 0x11) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0xc, &(0x7f0000000540)=@gcm_128={{0x304}, "0e8e01774ca61ee3", "41f786579fd260988f9016e255ac5f0c", '\x00', "929d1d35d19aa329"}, 0x28) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=""/143, &(0x7f0000000140)=0x8f) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x41260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) 275.970782ms ago: executing program 0 (id=1426): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) fsync(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(0xffffffffffffffff, 0x3, 0x1) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000600)=""/161, 0x7}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) 100.935037ms ago: executing program 2 (id=1427): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b7000000000095001b0000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 86.897097ms ago: executing program 4 (id=1428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x1e, 0x4, 0x0) r3 = socket(0x22, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x10000) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x104, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1bc}}, 0x80c4) 0s ago: executing program 2 (id=1429): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) fsync(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(0xffffffffffffffff, 0x3, 0x1) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000600)=""/161, 0x7}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x7fffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) kernel console output (not intermixed with test programs): c: denied { cpu } for pid=6543 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 198.797744][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.802484][ T28] audit: type=1400 audit(1781789863.482:760): avc: denied { create } for pid=6547 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.827422][ T6544] veth1_macvtap: entered promiscuous mode [ 198.864967][ T6540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.881150][ T6540] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.939225][ T6553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 198.987463][ T6562] loop3: detected capacity change from 0 to 512 [ 199.035831][ T6562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.088359][ T6557] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.876'. [ 199.113704][ T6562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.133255][ T6540] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.871'. [ 199.176163][ T6562] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.188343][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.229515][ T6580] loop0: detected capacity change from 0 to 1024 [ 199.269543][ T6580] EXT4-fs: Ignoring removed bh option [ 199.300893][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 199.317193][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.474279][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.610873][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.942389][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.960384][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.984515][ T6609] rdma_rxe: rxe_newlink: failed to add bond0 [ 200.490131][ T6625] FAULT_INJECTION: forcing a failure. [ 200.490131][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.598875][ T6625] CPU: 0 UID: 0 PID: 6625 Comm: syz.4.891 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.598908][ T6625] Tainted: [W]=WARN [ 200.598918][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.598934][ T6625] Call Trace: [ 200.598943][ T6625] [ 200.598958][ T6625] __dump_stack+0x1d/0x30 [ 200.599024][ T6625] dump_stack_lvl+0x95/0xd0 [ 200.599051][ T6625] dump_stack+0x15/0x1b [ 200.599073][ T6625] should_fail_ex+0x25e/0x270 [ 200.599094][ T6625] should_fail+0xb/0x20 [ 200.599186][ T6625] should_fail_usercopy+0x1a/0x20 [ 200.599277][ T6625] _copy_to_iter+0x37f/0xea0 [ 200.599325][ T6625] ? set_normalized_timespec64+0xe0/0x110 [ 200.599354][ T6625] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 200.599391][ T6625] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 200.599463][ T6625] __skb_datagram_iter+0xc6/0x680 [ 200.599502][ T6625] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 200.599570][ T6625] skb_copy_datagram_iter+0x3f/0xf0 [ 200.599674][ T6625] netlink_recvmsg+0x1a8/0x550 [ 200.599749][ T6625] ? __pfx_netlink_recvmsg+0x10/0x10 [ 200.599772][ T6625] sock_recvmsg+0xf5/0x120 [ 200.599808][ T6625] ____sys_recvmsg+0xf5/0x280 [ 200.599847][ T6625] ___sys_recvmsg+0x11f/0x3a0 [ 200.599943][ T6625] do_recvmmsg+0x1e5/0x560 [ 200.599979][ T6625] ? get_timespec64+0xd2/0x100 [ 200.600005][ T6625] __x64_sys_recvmmsg+0xfb/0x170 [ 200.600047][ T6625] x64_sys_call+0x80f/0x3020 [ 200.600124][ T6625] do_syscall_64+0x136/0x3c0 [ 200.600217][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.600246][ T6625] RIP: 0033:0x7fdd525bce59 [ 200.600268][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.600288][ T6625] RSP: 002b:00007fdd51017028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 200.600308][ T6625] RAX: ffffffffffffffda RBX: 00007fdd52835fa0 RCX: 00007fdd525bce59 [ 200.600364][ T6625] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 200.600377][ T6625] RBP: 00007fdd51017090 R08: 0000200000003700 R09: 0000000000000000 [ 200.600389][ T6625] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 200.600402][ T6625] R13: 00007fdd52836038 R14: 00007fdd52835fa0 R15: 00007fff5ed95648 [ 200.600428][ T6625] [ 200.908154][ T6630] 9p: Bad value for 'wfdno' [ 201.112917][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 201.137457][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.894'. [ 201.167524][ T6634] x_tables: duplicate underflow at hook 2 [ 201.170450][ T6628] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.892'. [ 201.547259][ T6647] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.592366][ T6647] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.655668][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 201.655686][ T28] audit: type=1400 audit(1781789866.332:786): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.658596][ T28] audit: type=1400 audit(1781789866.332:787): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.659590][ T28] audit: type=1400 audit(1781789866.342:788): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.662693][ T28] audit: type=1400 audit(1781789866.342:789): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.662802][ T28] audit: type=1400 audit(1781789866.342:790): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.675755][ T28] audit: type=1400 audit(1781789866.352:791): avc: denied { write } for pid=6646 comm="syz.1.898" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.762344][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.038362][ T6643] Alternate GPT is invalid, using primary GPT. [ 202.038502][ T6643] loop0: p1 p2 p3 [ 202.323225][ T6658] set_capacity_and_notify: 3 callbacks suppressed [ 202.323257][ T6658] loop4: detected capacity change from 0 to 4096 [ 202.340418][ T6658] EXT4-fs: inline encryption not supported [ 202.349442][ T6658] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 205.071759][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 205.106236][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 205.115558][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.135847][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.143016][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.203918][ T6698] x_tables: duplicate underflow at hook 2 [ 205.297168][ T6697] loop3: detected capacity change from 0 to 256 [ 205.466825][ T6711] loop1: detected capacity change from 0 to 512 [ 205.500773][ T6711] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 205.509144][ T6711] EXT4-fs (loop1): orphan cleanup on readonly fs [ 205.517369][ T6711] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 205.526384][ T6711] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 205.536233][ T6711] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.914: Failed to acquire dquot type 1 [ 205.547440][ T6711] loop1: lost filesystem error report for type 5 error -5 [ 205.560101][ T6711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.914: bg 0: block 40: padding at end of block bitmap is not set [ 205.567385][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 205.567410][ C0] EXT4-fs (loop1): initial error at time 1781789870: ext4_acquire_dquot:7032 [ 205.567431][ C0] EXT4-fs (loop1): last error at time 1781789870: ext4_acquire_dquot:7032 [ 205.605433][ T6711] loop1: lost filesystem error report for type 5 error -117 [ 205.607354][ T6711] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 205.623593][ T6711] loop1: lost filesystem error report for type 5 error -117 [ 205.625628][ T6711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.914: data will be lost [ 205.644072][ T6711] EXT4-fs (loop1): 1 truncate cleaned up [ 205.650763][ T6711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.346878][ T6726] loop0: detected capacity change from 0 to 2048 [ 206.377662][ T6726] ext4: Unknown parameter 'nouser_xattr' [ 206.521420][ T6718] loop3: detected capacity change from 0 to 2048 [ 207.171152][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.262731][ T6718] Alternate GPT is invalid, using primary GPT. [ 207.314149][ T6718] loop3: p1 p2 p3 [ 207.603981][ T6727] loop4: detected capacity change from 0 to 4096 [ 207.619838][ T6727] EXT4-fs: inline encryption not supported [ 207.852560][ T6727] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 208.662047][ T6742] loop1: detected capacity change from 0 to 2048 [ 208.822052][ T28] audit: type=1400 audit(1781789873.502:792): avc: denied { read write } for pid=6743 comm="syz.0.926" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.881871][ T6742] Alternate GPT is invalid, using primary GPT. [ 208.920146][ T28] audit: type=1400 audit(1781789873.502:793): avc: denied { open } for pid=6743 comm="syz.0.926" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.943904][ T6742] loop1: p1 p2 p3 [ 208.976417][ T2980] Alternate GPT is invalid, using primary GPT. [ 208.983135][ T2980] loop1: p1 p2 p3 [ 209.910512][ T6758] loop4: detected capacity change from 0 to 512 [ 210.030379][ T6758] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 210.038924][ T6758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.046875][ T6758] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 210.055937][ T6758] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 210.065789][ T6758] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.929: Failed to acquire dquot type 1 [ 210.077089][ T6758] loop4: lost filesystem error report for type 5 error -5 [ 210.077349][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 210.086601][ T11] kernel write not supported for file /syz1 (pid: 11 comm: kworker/0:1) [ 210.090958][ C1] EXT4-fs (loop4): initial error at time 1781789874: ext4_acquire_dquot:7032 [ 210.090987][ C1] EXT4-fs (loop4): last error at time 1781789874: ext4_acquire_dquot:7032 [ 210.978162][ T6758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.929: bg 0: block 40: padding at end of block bitmap is not set [ 210.992404][ T6758] loop4: lost filesystem error report for type 5 error -117 [ 211.084726][ T6758] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 211.101018][ T6758] loop4: lost filesystem error report for type 5 error -117 [ 211.107009][ T6758] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.929: data will be lost [ 211.125513][ T6758] EXT4-fs (loop4): 1 truncate cleaned up [ 211.132994][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.161640][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 211.804849][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 212.727610][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 212.763117][ T28] audit: type=1326 audit(1781789877.442:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.775344][ T6772] x_tables: duplicate underflow at hook 2 [ 212.793758][ T28] audit: type=1326 audit(1781789877.442:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.806653][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 212.829260][ T28] audit: type=1326 audit(1781789877.442:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.856939][ T28] audit: type=1326 audit(1781789877.442:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.893034][ T28] audit: type=1326 audit(1781789877.442:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.939195][ T28] audit: type=1326 audit(1781789877.442:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.1.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d20ce59 code=0x7ffc0000 [ 212.994677][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.258355][ T6819] loop1: detected capacity change from 0 to 2048 [ 213.272885][ T6819] ext4: Unknown parameter 'nouser_xattr' [ 213.283671][ T6816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6816 comm=syz.4.940 [ 214.361510][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 215.904110][ T6858] loop1: detected capacity change from 0 to 256 [ 215.926867][ T6858] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 215.976960][ T6858] loop1: detected capacity change from 0 to 512 [ 216.010980][ T6858] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 216.046628][ T6858] EXT4-fs (loop1): 1 truncate cleaned up [ 216.079608][ T6858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.093601][ T6864] loop0: detected capacity change from 0 to 256 [ 216.117558][ T6864] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 216.141743][ T6858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.166071][ T6864] loop0: detected capacity change from 0 to 512 [ 216.217633][ T6864] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 216.240934][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 216.260235][ T6864] EXT4-fs (loop0): 1 truncate cleaned up [ 216.282726][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.302498][ T6869] x_tables: duplicate underflow at hook 2 [ 216.311411][ T6868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6868 comm=syz.1.952 [ 216.328057][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.950'. [ 216.337589][ T6864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.481074][ T6873] loop4: detected capacity change from 0 to 512 [ 216.537111][ T6873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 216.595227][ T6873] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.640863][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 216.640880][ T28] audit: type=1400 audit(1781789881.322:884): avc: denied { write } for pid=6872 comm="syz.4.954" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.853005][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 216.883326][ T6880] loop0: detected capacity change from 0 to 8192 [ 216.957962][ T6880] loop0: p1 p2 p3 [ 216.976237][ T6880] loop0: p1 size 67111168 extends beyond EOD, truncated [ 217.005998][ T6880] loop0: p2 size 8388608 extends beyond EOD, truncated [ 217.087404][ T6880] loop0: p3 start 4294901760 is beyond EOD, truncated [ 217.603374][ T6896] loop0: detected capacity change from 0 to 512 [ 217.675721][ T6896] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.076285][ T6899] loop4: detected capacity change from 0 to 512 [ 218.105864][ T6899] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.960: bg 0: block 127: padding at end of block bitmap is not set [ 218.122195][ T6903] loop3: detected capacity change from 0 to 256 [ 218.135012][ T3301] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 218.144555][ T6903] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 218.157405][ T6899] loop4: lost filesystem error report for type 5 error -117 [ 218.157795][ T6899] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.960: bit already cleared for inode 11 [ 218.176140][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 218.176158][ C1] EXT4-fs (loop4): initial error at time 1781789882: ext4_validate_block_bitmap:441 [ 218.176186][ C1] EXT4-fs (loop4): last error at time 1781789882: ext4_validate_block_bitmap:441 [ 218.224181][ T6903] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 218.245324][ T6903] EXT4-fs (loop3): 1 truncate cleaned up [ 218.260310][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.284014][ T6899] loop4: lost filesystem error report for type 5 error -117 [ 218.284176][ T6899] EXT4-fs (loop4): 1 orphan inode deleted [ 218.298515][ T6903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.320317][ T6899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.347485][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 218.394531][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.836023][ T6911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6911 comm=syz.3.964 [ 219.081242][ T6922] set_capacity_and_notify: 1 callbacks suppressed [ 219.081263][ T6922] loop3: detected capacity change from 0 to 512 [ 219.132868][ T6922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.171502][ T6909] loop4: detected capacity change from 0 to 4096 [ 219.178978][ T6922] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.203199][ T6909] EXT4-fs: inline encryption not supported [ 219.220396][ T6909] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 219.230244][ T28] audit: type=1400 audit(1781789883.912:885): avc: denied { write } for pid=6921 comm="syz.3.967" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.306147][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 219.461409][ T6934] loop4: detected capacity change from 0 to 2048 [ 219.539842][ T6934] Alternate GPT is invalid, using primary GPT. [ 219.548147][ T28] audit: type=1400 audit(1781789884.222:886): avc: denied { connect } for pid=6936 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.569788][ T6934] loop4: p1 p2 p3 [ 219.676824][ T6941] loop3: detected capacity change from 0 to 512 [ 219.781005][ T6941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 219.789149][ T6941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.809761][ T6941] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 219.818806][ T6941] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 219.828606][ T6941] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.969: Failed to acquire dquot type 1 [ 219.839838][ T6941] loop3: lost filesystem error report for type 5 error -5 [ 219.847341][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 219.861010][ C1] EXT4-fs (loop3): initial error at time 1781789884: ext4_acquire_dquot:7032 [ 219.869831][ C1] EXT4-fs (loop3): last error at time 1781789884: ext4_acquire_dquot:7032 [ 219.881778][ T6941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.969: bg 0: block 40: padding at end of block bitmap is not set [ 219.896074][ T6941] loop3: lost filesystem error report for type 5 error -117 [ 219.896781][ T6941] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 219.912913][ T6941] loop3: lost filesystem error report for type 5 error -117 [ 219.917259][ T6941] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.969: data will be lost [ 219.935744][ T6941] EXT4-fs (loop3): 1 truncate cleaned up [ 220.506178][ T6946] loop0: detected capacity change from 0 to 512 [ 220.521463][ T6941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.570935][ T6946] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.955727][ T3301] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 221.006054][ T6955] netlink: 'syz.4.974': attribute type 30 has an invalid length. [ 221.098613][ T28] audit: type=1400 audit(1781789885.782:887): avc: denied { setopt } for pid=6954 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.159079][ T6960] loop0: detected capacity change from 0 to 256 [ 221.184496][ T6960] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 221.190685][ T6955] netlink: 'syz.4.974': attribute type 30 has an invalid length. [ 221.205881][ T6962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6962 comm=syz.2.976 [ 221.251537][ T6960] loop0: detected capacity change from 0 to 512 [ 221.291239][ T6960] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 221.329012][ T6960] EXT4-fs (loop0): 1 truncate cleaned up [ 221.353188][ T6960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.412763][ T6960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.469995][ T6971] loop4: detected capacity change from 0 to 512 [ 221.500753][ T6971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.550352][ T6971] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.594315][ T28] audit: type=1400 audit(1781789886.272:888): avc: denied { write } for pid=6970 comm="syz.4.980" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.620887][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.702436][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.767206][ T6991] loop4: detected capacity change from 0 to 2048 [ 222.860553][ T6991] Alternate GPT is invalid, using primary GPT. [ 222.881164][ T6991] loop4: p1 p2 p3 [ 223.001518][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 223.033481][ T6993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6993 comm=syz.2.986 [ 223.057963][ T7002] x_tables: duplicate underflow at hook 2 [ 223.072499][ T28] audit: type=1400 audit(1781789887.752:889): avc: denied { ioctl } for pid=6992 comm="syz.2.986" path="socket:[17151]" dev="sockfs" ino=17151 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 223.076653][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 223.257866][ T7006] loop3: detected capacity change from 0 to 512 [ 223.279876][ T7006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.989: bg 0: block 127: padding at end of block bitmap is not set [ 223.653987][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 223.746064][ T7011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.764311][ T7006] loop3: lost filesystem error report for type 5 error -117 [ 223.767342][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 223.781166][ C0] EXT4-fs (loop3): initial error at time 1781789888: ext4_validate_block_bitmap:441 [ 223.790595][ C0] EXT4-fs (loop3): last error at time 1781789888: ext4_validate_block_bitmap:441 [ 223.816664][ T7006] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.989: bit already cleared for inode 11 [ 223.845276][ T7011] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.873385][ T7006] loop3: lost filesystem error report for type 5 error -117 [ 223.876689][ T7006] EXT4-fs (loop3): 1 orphan inode deleted [ 224.026047][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.048191][ T28] audit: type=1400 audit(1781789888.592:890): avc: denied { write } for pid=7010 comm="syz.0.990" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.071780][ T28] audit: type=1400 audit(1781789888.602:891): avc: denied { write } for pid=7010 comm="syz.0.990" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.075529][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.094130][ T28] audit: type=1400 audit(1781789888.602:892): avc: denied { write } for pid=7010 comm="syz.0.990" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.135259][ T28] audit: type=1400 audit(1781789888.612:893): avc: denied { write } for pid=7010 comm="syz.0.990" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.156940][ T28] audit: type=1400 audit(1781789888.612:894): avc: denied { write } for pid=7010 comm="syz.0.990" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.165461][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 224.194728][ T7014] netlink: 'syz.4.991': attribute type 30 has an invalid length. [ 224.230129][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 224.293258][ T7014] netlink: 'syz.4.991': attribute type 30 has an invalid length. [ 224.347526][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.473624][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.486761][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.493971][ T7034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.642281][ T7044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.308187][ T7053] set_capacity_and_notify: 1 callbacks suppressed [ 226.308203][ T7053] loop0: detected capacity change from 0 to 128 [ 226.371627][ T7053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.436298][ T7053] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.511653][ T7052] loop4: detected capacity change from 0 to 2048 [ 226.538552][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.559414][ T7048] loop1: detected capacity change from 0 to 8192 [ 226.611071][ T28] audit: type=1400 audit(1781789891.162:895): avc: denied { write } for pid=7050 comm="syz.0.1002" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.666214][ T7048] loop1: p1 p2 p3 [ 226.679682][ T7052] Alternate GPT is invalid, using primary GPT. [ 226.693415][ T7048] loop1: p1 size 67111168 extends beyond EOD, truncated [ 226.725448][ T7052] loop4: p1 p2 p3 [ 226.731461][ T7048] loop1: p2 size 8388608 extends beyond EOD, truncated [ 226.743267][ T7064] loop0: detected capacity change from 0 to 256 [ 226.756774][ T28] audit: type=1400 audit(1781789891.162:896): avc: denied { write } for pid=7050 comm="syz.0.1002" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.789269][ T7048] loop1: p3 start 4294901760 is beyond EOD, truncated [ 226.798253][ T7064] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 226.804715][ T2980] Alternate GPT is invalid, using primary GPT. [ 226.820622][ T2980] loop4: p1 p2 p3 [ 226.831416][ T7064] loop0: detected capacity change from 0 to 512 [ 226.853936][ T28] audit: type=1400 audit(1781789891.162:897): avc: denied { write } for pid=7050 comm="syz.0.1002" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.886374][ T7064] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 226.914064][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 226.929883][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 226.958902][ T7064] EXT4-fs (loop0): 1 truncate cleaned up [ 226.986142][ T7064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.016702][ T28] audit: type=1400 audit(1781789891.162:898): avc: denied { write } for pid=7050 comm="syz.0.1002" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.082511][ T7064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.175371][ T7073] loop1: detected capacity change from 0 to 8192 [ 228.269573][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.368028][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.375217][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.417928][ T7086] loop4: detected capacity change from 0 to 8192 [ 229.703745][ T7102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7102 comm=syz.1.1014 [ 230.518254][ T7113] netlink: 'syz.1.1018': attribute type 30 has an invalid length. [ 231.026909][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1020'. [ 231.376510][ T7113] netlink: 'syz.1.1018': attribute type 30 has an invalid length. [ 231.433378][ T7123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7123 comm=syz.4.1021 [ 231.644508][ T7127] loop4: detected capacity change from 0 to 256 [ 231.675612][ T7127] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 231.727201][ T7127] loop4: detected capacity change from 0 to 512 [ 231.733754][ T7129] loop1: detected capacity change from 0 to 512 [ 232.670124][ T7133] loop3: detected capacity change from 0 to 512 [ 232.753225][ T7127] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 232.772681][ T7127] EXT4-fs (loop4): 1 truncate cleaned up [ 232.780763][ T7129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1023: bg 0: block 127: padding at end of block bitmap is not set [ 232.804351][ T7133] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 232.812489][ T7133] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.821329][ T7133] __quota_error: 1 callbacks suppressed [ 232.821344][ T7133] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 232.835988][ T7133] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 232.845902][ T7133] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.1019: Failed to acquire dquot type 1 [ 232.857166][ T7133] loop3: lost filesystem error report for type 5 error -5 [ 232.857329][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 232.870921][ C0] EXT4-fs (loop3): initial error at time 1781789897: ext4_acquire_dquot:7032 [ 232.879740][ C0] EXT4-fs (loop3): last error at time 1781789897: ext4_acquire_dquot:7032 [ 232.888727][ T7129] loop1: lost filesystem error report for type 5 error -117 [ 232.895702][ T7127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.903123][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 232.903143][ C0] EXT4-fs (loop1): initial error at time 1781789897: ext4_validate_block_bitmap:441 [ 232.903162][ C0] EXT4-fs (loop1): last error at time 1781789897: ext4_validate_block_bitmap:441 [ 233.016767][ T7129] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1023: bit already cleared for inode 11 [ 233.053227][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 233.150100][ T7129] loop1: lost filesystem error report for type 5 error -117 [ 233.162965][ T7129] EXT4-fs (loop1): 1 orphan inode deleted [ 233.195676][ T7133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1019: bg 0: block 40: padding at end of block bitmap is not set [ 233.210126][ T7133] loop3: lost filesystem error report for type 5 error -117 [ 233.211931][ T7133] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 233.228141][ T7133] loop3: lost filesystem error report for type 5 error -117 [ 233.242924][ T7133] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.1019: data will be lost [ 233.261633][ T7133] EXT4-fs (loop3): 1 truncate cleaned up [ 233.268730][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.322570][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.459528][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 233.676002][ T7127] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.955861][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.973011][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.188285][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 234.229371][ T7151] loop1: detected capacity change from 0 to 512 [ 234.973908][ T7150] rdma_rxe: rxe_newlink: failed to add bond0 [ 235.298880][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 235.323926][ T7151] ext4 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.486607][ T28] audit: type=1400 audit(1781789901.062:900): avc: denied { write } for pid=7148 comm="syz.1.1027" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.514380][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.694135][ T7158] netlink: 'syz.1.1029': attribute type 30 has an invalid length. [ 236.799419][ T7158] netlink: 'syz.1.1029': attribute type 30 has an invalid length. [ 236.992347][ T7165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7165 comm=syz.1.1032 [ 237.080862][ T7169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1034'. [ 237.109726][ T7172] netlink: 'syz.1.1035': attribute type 30 has an invalid length. [ 237.191092][ T7175] loop3: detected capacity change from 0 to 2048 [ 237.206132][ T7175] ext4: Unknown parameter 'nouser_xattr' [ 237.349301][ T7172] netlink: 'syz.1.1035': attribute type 30 has an invalid length. [ 237.630678][ T7182] loop4: detected capacity change from 0 to 128 [ 237.659934][ T7182] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.733985][ T7182] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.778802][ T28] audit: type=1400 audit(1781789902.462:901): avc: denied { write } for pid=7181 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.885893][ T28] audit: type=1400 audit(1781789902.482:902): avc: denied { write } for pid=7181 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.999458][ T28] audit: type=1400 audit(1781789902.492:903): avc: denied { write } for pid=7181 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.083139][ T28] audit: type=1400 audit(1781789902.492:904): avc: denied { write } for pid=7181 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.347275][ T7179] netlink: 'syz.2.1030': attribute type 30 has an invalid length. [ 238.355817][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.400390][ T7186] loop4: detected capacity change from 0 to 512 [ 238.427665][ T7179] netlink: 'syz.2.1030': attribute type 30 has an invalid length. [ 238.451321][ T7186] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1038: bg 0: block 127: padding at end of block bitmap is not set [ 238.505490][ T7186] loop4: lost filesystem error report for type 5 error -117 [ 238.505974][ T7186] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.1038: bit already cleared for inode 11 [ 238.513391][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 238.513415][ C0] EXT4-fs (loop4): initial error at time 1781789903: ext4_validate_block_bitmap:441 [ 238.513446][ C0] EXT4-fs (loop4): last error at time 1781789903: ext4_validate_block_bitmap:441 [ 238.664151][ T7191] loop1: detected capacity change from 0 to 8192 [ 238.672405][ T7186] loop4: lost filesystem error report for type 5 error -117 [ 238.672685][ T7194] 9p: Bad value for 'wfdno' [ 238.685013][ T7186] EXT4-fs (loop4): 1 orphan inode deleted [ 238.694654][ T7186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.918785][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 239.906071][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 240.055965][ T7204] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1043'. [ 240.101779][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.214192][ T7209] rdma_rxe: rxe_newlink: failed to add bond0 [ 241.322071][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.344037][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.351245][ T7219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.927835][ T7227] loop1: detected capacity change from 0 to 2048 [ 241.945621][ T7227] ext4: Unknown parameter 'nouser_xattr' [ 244.614982][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 244.641381][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1053'. [ 245.399512][ T7232] x_tables: duplicate underflow at hook 2 [ 246.179884][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 246.204067][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 246.619654][ T28] audit: type=1326 audit(1781789911.302:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.646345][ T28] audit: type=1326 audit(1781789911.302:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.657493][ T7248] FAULT_INJECTION: forcing a failure. [ 246.657493][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.673048][ T28] audit: type=1326 audit(1781789911.302:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.711125][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.3.1058 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 246.711161][ T7248] Tainted: [W]=WARN [ 246.711170][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.711186][ T7248] Call Trace: [ 246.711194][ T7248] [ 246.711204][ T7248] __dump_stack+0x1d/0x30 [ 246.711308][ T7248] dump_stack_lvl+0x95/0xd0 [ 246.711335][ T7248] dump_stack+0x15/0x1b [ 246.711360][ T7248] should_fail_ex+0x25e/0x270 [ 246.711387][ T7248] should_fail+0xb/0x20 [ 246.711433][ T7248] should_fail_usercopy+0x1a/0x20 [ 246.711458][ T7248] _copy_from_user+0x1c/0xb0 [ 246.711563][ T7248] bpf_test_init+0xb9/0x130 [ 246.711591][ T7248] bpf_prog_test_run_flow_dissector+0x12c/0x360 [ 246.711623][ T7248] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 246.711658][ T7248] bpf_prog_test_run+0x208/0x340 [ 246.711699][ T7248] __sys_bpf+0x8da/0xc30 [ 246.711773][ T7248] __x64_sys_bpf+0x69/0x80 [ 246.711833][ T7248] x64_sys_call+0x10cb/0x3020 [ 246.711937][ T7248] do_syscall_64+0x136/0x3c0 [ 246.712013][ T7248] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 246.712058][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.712081][ T7248] RIP: 0033:0x7fd193d1ce59 [ 246.712100][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.712118][ T7248] RSP: 002b:00007fd19276f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.712141][ T7248] RAX: ffffffffffffffda RBX: 00007fd193f95fa0 RCX: 00007fd193d1ce59 [ 246.712197][ T7248] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 246.712210][ T7248] RBP: 00007fd19276f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.712245][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.712257][ T7248] R13: 00007fd193f96038 R14: 00007fd193f95fa0 R15: 00007ffd46e39ae8 [ 246.712279][ T7248] [ 246.712773][ T28] audit: type=1326 audit(1781789911.322:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.938684][ T28] audit: type=1326 audit(1781789911.322:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.964867][ T28] audit: type=1326 audit(1781789911.322:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 246.973661][ T7256] loop0: detected capacity change from 0 to 512 [ 246.991659][ T7249] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1057'. [ 247.003081][ T7256] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.024308][ T28] audit: type=1326 audit(1781789911.322:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 247.106671][ T28] audit: type=1326 audit(1781789911.322:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 247.133073][ T28] audit: type=1326 audit(1781789911.322:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 247.134451][ T7256] EXT4-fs (loop0): 1 orphan inode deleted [ 247.158820][ T28] audit: type=1326 audit(1781789911.322:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.3.1058" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd193d1ce59 code=0x7ffc0000 [ 247.283795][ T7256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.369303][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.417278][ T7275] netlink: 'syz.0.1067': attribute type 30 has an invalid length. [ 247.522879][ T7275] netlink: 'syz.0.1067': attribute type 30 has an invalid length. [ 247.573449][ T7281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1068'. [ 247.599769][ T7283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1069'. [ 247.808964][ T7290] sctp: [Deprecated]: syz.2.1070 (pid 7290) Use of int in max_burst socket option deprecated. [ 247.808964][ T7290] Use struct sctp_assoc_value instead [ 247.835366][ T4746] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 247.908459][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 248.065876][ T7294] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1073'. [ 248.242866][ T7298] loop1: detected capacity change from 0 to 512 [ 248.300806][ T7298] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1074: bg 0: block 127: padding at end of block bitmap is not set [ 248.351014][ T7298] loop1: lost filesystem error report for type 5 error -117 [ 248.351361][ T7298] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1074: bit already cleared for inode 11 [ 248.358791][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 248.358825][ C0] EXT4-fs (loop1): initial error at time 1781789913: ext4_validate_block_bitmap:441 [ 248.358845][ C0] EXT4-fs (loop1): last error at time 1781789913: ext4_validate_block_bitmap:441 [ 248.400430][ T7298] loop1: lost filesystem error report for type 5 error -117 [ 248.400560][ T7298] EXT4-fs (loop1): 1 orphan inode deleted [ 248.414510][ T7298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.489210][ T7303] loop0: detected capacity change from 0 to 8192 [ 248.842273][ T7312] loop3: detected capacity change from 0 to 256 [ 249.651045][ T7312] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 249.688571][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.943769][ T7312] loop3: detected capacity change from 0 to 512 [ 250.752967][ T7312] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 251.048643][ T7312] EXT4-fs (loop3): 1 truncate cleaned up [ 251.655255][ T7319] loop1: detected capacity change from 0 to 512 [ 251.662891][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.059109][ T7312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.091474][ T7319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1080: bg 0: block 127: padding at end of block bitmap is not set [ 252.130419][ T7319] loop1: lost filesystem error report for type 5 error -117 [ 252.131028][ T7319] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1080: bit already cleared for inode 11 [ 252.138445][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 252.138471][ C0] EXT4-fs (loop1): initial error at time 1781789916: ext4_validate_block_bitmap:441 [ 252.138500][ C0] EXT4-fs (loop1): last error at time 1781789916: ext4_validate_block_bitmap:441 [ 252.240822][ T7319] loop1: lost filesystem error report for type 5 error -117 [ 252.241009][ T7319] EXT4-fs (loop1): 1 orphan inode deleted [ 252.267374][ T7319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.509527][ T7331] vhci_hcd vhci_hcd.2: invalid port number 96 [ 252.619538][ T7331] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 252.797192][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.023151][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7331 comm=syz.3.1085 [ 255.113883][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 255.157205][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7331 comm=syz.3.1085 [ 255.315420][ T7350] netlink: 'syz.0.1091': attribute type 30 has an invalid length. [ 255.397688][ T7350] netlink: 'syz.0.1091': attribute type 30 has an invalid length. [ 255.810159][ T7362] loop0: detected capacity change from 0 to 512 [ 255.819779][ T7362] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 255.828087][ T7362] EXT4-fs (loop0): orphan cleanup on readonly fs [ 255.835544][ T7362] __quota_error: 21 callbacks suppressed [ 255.835556][ T7362] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 255.850253][ T7362] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 255.860104][ T7362] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.1093: Failed to acquire dquot type 1 [ 255.871471][ T7362] loop0: lost filesystem error report for type 5 error -5 [ 255.886421][ T7362] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1093: bg 0: block 40: padding at end of block bitmap is not set [ 255.893690][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 255.893707][ C0] EXT4-fs (loop0): initial error at time 1781789920: ext4_acquire_dquot:7032 [ 255.893731][ C0] EXT4-fs (loop0): last error at time 1781789920: ext4_acquire_dquot:7032 [ 255.931709][ T7362] loop0: lost filesystem error report for type 5 error -117 [ 255.932329][ T7362] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 255.948468][ T7362] loop0: lost filesystem error report for type 5 error -117 [ 255.949022][ T7362] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.1093: data will be lost [ 255.967530][ T7362] EXT4-fs (loop0): 1 truncate cleaned up [ 255.974767][ T7362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.676741][ T7368] loop1: detected capacity change from 0 to 512 [ 258.781225][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.790479][ T7368] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 258.798674][ T7368] EXT4-fs (loop1): orphan cleanup on readonly fs [ 258.807001][ T7368] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 258.816092][ T7368] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 258.826107][ T7368] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.1095: Failed to acquire dquot type 1 [ 258.837472][ T7368] loop1: lost filesystem error report for type 5 error -5 [ 258.847376][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 258.861018][ C0] EXT4-fs (loop1): initial error at time 1781789923: ext4_acquire_dquot:7032 [ 258.869855][ C0] EXT4-fs (loop1): last error at time 1781789923: ext4_acquire_dquot:7032 [ 259.190695][ T7368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1095: bg 0: block 40: padding at end of block bitmap is not set [ 259.204979][ T7368] loop1: lost filesystem error report for type 5 error -117 [ 259.377620][ T7368] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 259.393730][ T7368] loop1: lost filesystem error report for type 5 error -117 [ 259.890244][ T7377] loop3: detected capacity change from 0 to 512 [ 260.018325][ T7376] netlink: 'syz.0.1097': attribute type 30 has an invalid length. [ 260.097436][ T7368] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.1095: data will be lost [ 260.112354][ T7368] EXT4-fs (loop1): 1 truncate cleaned up [ 260.120136][ T7368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.276920][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.326007][ T7377] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 260.334354][ T7377] EXT4-fs (loop3): orphan cleanup on readonly fs [ 260.342730][ T7377] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 260.351798][ T7377] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 260.361647][ T7377] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.1096: Failed to acquire dquot type 1 [ 260.372960][ T7377] loop3: lost filesystem error report for type 5 error -5 [ 260.374380][ T7377] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1096: bg 0: block 40: padding at end of block bitmap is not set [ 260.381619][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 260.381648][ C1] EXT4-fs (loop3): initial error at time 1781789925: ext4_acquire_dquot:7032 [ 260.381667][ C1] EXT4-fs (loop3): last error at time 1781789925: ext4_acquire_dquot:7032 [ 260.419795][ T7377] loop3: lost filesystem error report for type 5 error -117 [ 260.421305][ T7377] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 260.437617][ T7377] loop3: lost filesystem error report for type 5 error -117 [ 260.438231][ T7377] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.1096: data will be lost [ 260.456731][ T7377] EXT4-fs (loop3): 1 truncate cleaned up [ 260.463331][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.950978][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 261.002646][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1098'. [ 261.076739][ T7387] x_tables: duplicate underflow at hook 2 [ 261.229259][ T7376] netlink: 'syz.0.1097': attribute type 30 has an invalid length. [ 261.285785][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.655141][ T7402] loop1: detected capacity change from 0 to 512 [ 261.679373][ T7403] loop3: detected capacity change from 0 to 2048 [ 261.729619][ T7402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.742317][ T7402] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.761182][ T7403] Alternate GPT is invalid, using primary GPT. [ 261.790367][ T7403] loop3: p1 p2 p3 [ 261.839980][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.870056][ T7408] loop4: detected capacity change from 0 to 2048 [ 262.066120][ T7408] Alternate GPT is invalid, using primary GPT. [ 262.087953][ T7408] loop4: p1 p2 p3 [ 262.098390][ T28] audit: type=1400 audit(1781789926.782:934): avc: denied { mounton } for pid=7422 comm="syz.0.1110" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 262.773473][ T7430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7430 comm=syz.3.1111 [ 263.817202][ T7438] loop3: detected capacity change from 0 to 128 [ 264.076228][ T7442] loop1: detected capacity change from 0 to 512 [ 264.844520][ T7438] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.863688][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 264.897809][ T7438] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.908492][ T7442] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.869535][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.910758][ T7457] loop0: detected capacity change from 0 to 512 [ 267.096069][ T7457] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1118: bg 0: block 127: padding at end of block bitmap is not set [ 267.162961][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.181251][ T7457] loop0: lost filesystem error report for type 5 error -117 [ 267.183136][ T7457] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.1118: bit already cleared for inode 11 [ 267.190548][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 267.190566][ C0] EXT4-fs (loop0): initial error at time 1781789931: ext4_validate_block_bitmap:441 [ 267.190600][ C0] EXT4-fs (loop0): last error at time 1781789931: ext4_validate_block_bitmap:441 [ 267.354772][ T7457] loop0: lost filesystem error report for type 5 error -117 [ 267.354972][ T7457] EXT4-fs (loop0): 1 orphan inode deleted [ 267.408435][ T7457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.424998][ T7463] loop3: detected capacity change from 0 to 8192 [ 267.469467][ T7461] loop1: detected capacity change from 0 to 2048 [ 268.005968][ T7461] Alternate GPT is invalid, using primary GPT. [ 268.103328][ T7461] loop1: p1 p2 p3 [ 268.164776][ T7472] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1122'. [ 268.260006][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.344760][ T7477] loop0: detected capacity change from 0 to 256 [ 268.366853][ T7477] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 268.419545][ T7477] loop0: detected capacity change from 0 to 512 [ 268.461968][ T7477] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 268.492909][ T7477] EXT4-fs (loop0): 1 truncate cleaned up [ 268.507894][ T7477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.537803][ T7477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.903543][ T7481] loop1: detected capacity change from 0 to 8192 [ 269.932447][ T28] audit: type=1400 audit(1781789934.592:935): avc: denied { lock } for pid=7474 comm="syz.4.1124" path="socket:[18880]" dev="sockfs" ino=18880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 270.105598][ T7491] new mount options do not match the existing superblock, will be ignored [ 270.124085][ T7489] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1126'. [ 270.200355][ T7494] 9p: Bad value for 'wfdno' [ 270.542974][ T7500] loop3: detected capacity change from 0 to 8192 [ 270.608036][ T7500] loop3: p1 p2 p3 [ 270.619574][ T7500] loop3: p1 size 67111168 extends beyond EOD, truncated [ 270.656842][ T7500] loop3: p2 size 8388608 extends beyond EOD, truncated [ 270.711609][ T7500] loop3: p3 start 4294901760 is beyond EOD, truncated [ 271.338201][ T7518] loop1: detected capacity change from 0 to 512 [ 271.442218][ T7518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1134: bg 0: block 127: padding at end of block bitmap is not set [ 271.636688][ T7518] loop1: lost filesystem error report for type 5 error -117 [ 271.637324][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 271.651181][ C1] EXT4-fs (loop1): initial error at time 1781789936: ext4_validate_block_bitmap:441 [ 271.660635][ C1] EXT4-fs (loop1): last error at time 1781789936: ext4_validate_block_bitmap:441 [ 271.672920][ T7518] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1134: bit already cleared for inode 11 [ 271.695681][ T7518] loop1: lost filesystem error report for type 5 error -117 [ 271.700460][ T7518] EXT4-fs (loop1): 1 orphan inode deleted [ 271.725805][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.770818][ T7525] 9p: Bad value for 'wfdno' [ 271.822471][ T7524] loop3: detected capacity change from 0 to 8192 [ 271.919208][ T7524] loop3: p1 p2 p3 [ 271.923083][ T7524] loop3: p1 size 67111168 extends beyond EOD, truncated [ 271.951869][ T7524] loop3: p2 size 8388608 extends beyond EOD, truncated [ 271.986611][ T7524] loop3: p3 start 4294901760 is beyond EOD, truncated [ 272.012231][ T2980] loop3: p1 p2 p3 [ 272.016104][ T2980] loop3: p1 size 67111168 extends beyond EOD, truncated [ 272.046720][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.060751][ T2980] loop3: p2 size 8388608 extends beyond EOD, truncated [ 272.083818][ T2980] loop3: p3 start 4294901760 is beyond EOD, truncated [ 272.100768][ T7530] loop1: detected capacity change from 0 to 512 [ 272.120123][ T28] audit: type=1400 audit(1781789936.802:936): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.398925][ T7530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1137: bg 0: block 127: padding at end of block bitmap is not set [ 273.007482][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 273.324757][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 273.335810][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 273.365931][ T7530] loop1: lost filesystem error report for type 5 error -117 [ 273.367324][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 273.381181][ C0] EXT4-fs (loop1): initial error at time 1781789938: ext4_validate_block_bitmap:441 [ 273.390764][ C0] EXT4-fs (loop1): last error at time 1781789938: ext4_validate_block_bitmap:441 [ 273.402505][ T7530] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1137: bit already cleared for inode 11 [ 273.438239][ T7530] loop1: lost filesystem error report for type 5 error -117 [ 273.445406][ T7530] EXT4-fs (loop1): 1 orphan inode deleted [ 273.480966][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.532418][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 273.533898][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 273.582488][ T7553] loop0: detected capacity change from 0 to 512 [ 273.620879][ T7553] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 273.655255][ T7553] EXT4-fs (loop0): 1 truncate cleaned up [ 273.661586][ T7553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.683842][ T7553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.727109][ T7558] rdma_rxe: rxe_newlink: failed to add bond0 [ 273.789017][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.959649][ T7568] loop4: detected capacity change from 0 to 512 [ 273.980098][ T7568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1148: bg 0: block 127: padding at end of block bitmap is not set [ 273.994594][ T7568] loop4: lost filesystem error report for type 5 error -117 [ 273.997321][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 274.011357][ C1] EXT4-fs (loop4): initial error at time 1781789938: ext4_validate_block_bitmap:441 [ 274.019082][ T7568] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.1148: bit already cleared for inode 11 [ 274.021215][ C1] EXT4-fs (loop4): last error at time 1781789938: ext4_validate_block_bitmap:441 [ 274.047471][ T7568] loop4: lost filesystem error report for type 5 error -117 [ 274.050085][ T7568] EXT4-fs (loop4): 1 orphan inode deleted [ 274.064556][ T7568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.130126][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 274.451552][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1150'. [ 274.514215][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.562951][ T11] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 61 sec [ 274.649943][ T7580] loop3: detected capacity change from 0 to 8192 [ 274.692151][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1150'. [ 274.796072][ T7580] loop3: p1 p2 p3 [ 274.801099][ T7580] loop3: p1 size 67111168 extends beyond EOD, truncated [ 274.856820][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 274.894587][ T7580] loop3: p2 size 8388608 extends beyond EOD, truncated [ 274.974355][ T7580] loop3: p3 start 4294901760 is beyond EOD, truncated [ 275.050888][ T7593] syz1: rxe_newlink: already configured on bond0 [ 275.326475][ T7591] loop0: detected capacity change from 0 to 8192 [ 275.347658][ T7596] loop3: detected capacity change from 0 to 512 [ 275.364520][ T7596] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 275.399354][ T7596] EXT4-fs (loop3): 1 truncate cleaned up [ 275.533032][ T7596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.560922][ T7596] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.572321][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 276.033092][ T7614] netlink: 'syz.4.1162': attribute type 30 has an invalid length. [ 276.545943][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 277.206802][ T7621] loop1: detected capacity change from 0 to 512 [ 277.554570][ T7621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1163: bg 0: block 127: padding at end of block bitmap is not set [ 278.207899][ T7621] loop1: lost filesystem error report for type 5 error -117 [ 278.217360][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 278.231199][ C1] EXT4-fs (loop1): initial error at time 1781789942: ext4_validate_block_bitmap:441 [ 278.240640][ C1] EXT4-fs (loop1): last error at time 1781789942: ext4_validate_block_bitmap:441 [ 278.431508][ T7621] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1163: bit already cleared for inode 11 [ 278.466629][ T7621] loop1: lost filesystem error report for type 5 error -117 [ 278.466807][ T7621] EXT4-fs (loop1): 1 orphan inode deleted [ 278.980901][ T7614] netlink: 'syz.4.1162': attribute type 30 has an invalid length. [ 279.005994][ T7621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.449588][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.342459][ T7638] loop1: detected capacity change from 0 to 8192 [ 282.605978][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 282.626468][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.647965][ T7652] loop0: detected capacity change from 0 to 512 [ 282.661672][ T7652] EXT4-fs: Ignoring removed nobh option [ 282.687916][ T7652] EXT4-fs (loop0): orphan cleanup on readonly fs [ 282.706785][ T7652] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1171: EA inode hash validation failed [ 282.738835][ T7652] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 282.764052][ T7652] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1171: corrupted inode contents [ 282.790746][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.790996][ T7652] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.1171: mark_inode_dirty error [ 282.800596][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 282.800615][ C1] EXT4-fs (loop0): initial error at time 1781789948: ext4_do_update_inode:5690: inode 15 [ 282.800651][ C1] EXT4-fs (loop0): last error at time 1781789948: ext4_do_update_inode:5690: inode 15 [ 282.888918][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.889196][ T7652] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1171: corrupted inode contents [ 282.916791][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.916965][ T7652] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.1171: mark_inode_dirty error [ 282.938671][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.938829][ T7652] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.1171: mark inode dirty (error -117) [ 282.962300][ T7652] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.962590][ T7652] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 282.982054][ T7652] EXT4-fs (loop0): 1 orphan inode deleted [ 282.988466][ T7652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 283.436772][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.700602][ T279] kernel read not supported for file /syz1 (pid: 279 comm: kworker/1:2) [ 283.717093][ T28] audit: type=1400 audit(1781789949.394:937): avc: denied { name_bind } for pid=7668 comm="syz.3.1176" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 284.084693][ T7682] loop1: detected capacity change from 0 to 512 [ 284.168433][ T7682] EXT4-fs (loop1): invalid journal inode [ 284.217829][ T7682] EXT4-fs (loop1): can't get journal size [ 284.267080][ T7682] EXT4-fs (loop1): 1 truncate cleaned up [ 284.313418][ T7682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.646951][ T279] kernel read not supported for file /syz1 (pid: 279 comm: kworker/1:2) [ 284.752897][ T7685] loop4: detected capacity change from 0 to 2048 [ 284.779194][ T7685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.951540][ T7691] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1181'. [ 285.614811][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.053465][ T7714] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.996586][ T7722] loop1: detected capacity change from 0 to 8192 [ 287.137084][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 287.187705][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.214253][ T7722] loop1: p1 p2 p3 [ 287.221408][ T7722] loop1: p1 size 67111168 extends beyond EOD, truncated [ 287.246595][ T7727] loop0: detected capacity change from 0 to 256 [ 287.277725][ T7722] loop1: p2 size 8388608 extends beyond EOD, truncated [ 287.377488][ T28] audit: type=1400 audit(1781789953.024:938): avc: denied { execute } for pid=7726 comm="syz.0.1191" path="/newroot/232/file1" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 287.434851][ T7722] loop1: p3 start 4294901760 is beyond EOD, truncated [ 287.742026][ T28] audit: type=1400 audit(1781789953.414:939): avc: denied { read } for pid=7731 comm="syz.0.1193" path="socket:[19086]" dev="sockfs" ino=19086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.045185][ T7739] FAULT_INJECTION: forcing a failure. [ 288.045185][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 288.067821][ T28] audit: type=1400 audit(1781789953.724:940): avc: denied { read } for pid=7734 comm="syz.1.1194" name="file1" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 288.072883][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.1.1194 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 288.073038][ T7739] Tainted: [W]=WARN [ 288.073059][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.073101][ T7739] Call Trace: [ 288.073121][ T7739] [ 288.073143][ T7739] __dump_stack+0x1d/0x30 [ 288.073220][ T7739] dump_stack_lvl+0x95/0xd0 [ 288.073285][ T7739] dump_stack+0x15/0x1b [ 288.073352][ T7739] should_fail_ex+0x25e/0x270 [ 288.073435][ T7739] should_failslab+0x8c/0xb0 [ 288.073553][ T7739] kmem_cache_alloc_noprof+0x66/0x3f0 [ 288.073682][ T7739] ? do_getname+0x2e/0x1c0 [ 288.073746][ T7739] do_getname+0x2e/0x1c0 [ 288.073878][ T7739] __se_sys_rename+0x20/0x1c0 [ 288.073942][ T7739] __x64_sys_rename+0x31/0x40 [ 288.074005][ T7739] x64_sys_call+0x2b3/0x3020 [ 288.074136][ T7739] do_syscall_64+0x136/0x3c0 [ 288.074242][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.074317][ T7739] RIP: 0033:0x7fd94d20ce59 [ 288.074382][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.074443][ T7739] RSP: 002b:00007fd94bc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 288.074506][ T7739] RAX: ffffffffffffffda RBX: 00007fd94d486090 RCX: 00007fd94d20ce59 [ 288.074556][ T7739] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 288.074599][ T7739] RBP: 00007fd94bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 288.074690][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.074731][ T7739] R13: 00007fd94d486128 R14: 00007fd94d486090 R15: 00007ffce0ad4408 [ 288.074814][ T7739] [ 288.118113][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 288.119108][ T28] audit: type=1400 audit(1781789953.724:941): avc: denied { watch watch_reads } for pid=7734 comm="syz.1.1194" path="/235/file1" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 289.049733][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 289.348346][ T7749] rdma_rxe: rxe_newlink: failed to add bond0 [ 289.479176][ T7755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1196'. [ 289.702455][ T7761] loop3: detected capacity change from 0 to 256 [ 289.720242][ T7761] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 289.767557][ T7761] loop3: detected capacity change from 0 to 512 [ 289.811391][ T7761] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 289.823794][ T7761] EXT4-fs (loop3): 1 truncate cleaned up [ 289.830079][ T7761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.843287][ T7761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.962107][ T7765] vhci_hcd vhci_hcd.2: invalid port number 96 [ 289.968506][ T7765] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 290.120752][ T28] audit: type=1326 audit(1781789955.804:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.269662][ T7779] loop3: detected capacity change from 0 to 512 [ 290.315178][ T7779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.391349][ T7779] EXT4-fs (loop3): 1 truncate cleaned up [ 290.412992][ T7779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.623310][ T28] audit: type=1326 audit(1781789955.844:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.657036][ T7782] loop4: detected capacity change from 0 to 2048 [ 290.676342][ T28] audit: type=1326 audit(1781789955.844:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.703088][ T28] audit: type=1326 audit(1781789955.844:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.728681][ T28] audit: type=1326 audit(1781789955.844:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.756995][ T28] audit: type=1326 audit(1781789955.844:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.814780][ T28] audit: type=1326 audit(1781789955.844:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.844106][ T28] audit: type=1326 audit(1781789955.844:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.874833][ T7782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.888807][ T28] audit: type=1326 audit(1781789955.844:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 290.954400][ T28] audit: type=1326 audit(1781789955.844:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd525bce59 code=0x7ffc0000 [ 291.018561][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.027730][ T7785] loop0: detected capacity change from 0 to 128 [ 291.068586][ T7785] ext4: Unknown parameter 'pcr' [ 291.138212][ T7795] loop3: detected capacity change from 0 to 2048 [ 291.138628][ T7795] ext4: Unknown parameter 'nouser_xattr' [ 291.291562][ T7799] loop1: detected capacity change from 0 to 2048 [ 291.418955][ T7799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.441352][ T7799] pim6reg: entered allmulticast mode [ 291.443377][ T7799] pim6reg: left allmulticast mode [ 292.481982][ T7810] loop0: detected capacity change from 0 to 256 [ 293.492581][ T7763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 293.505054][ T7810] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 293.515283][ T7813] rdma_rxe: rxe_newlink: failed to add bond0 [ 293.529672][ T7810] loop0: detected capacity change from 0 to 512 [ 294.160045][ T7815] loop3: detected capacity change from 0 to 128 [ 294.322826][ T7763] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 294.345419][ T7815] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.361670][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.377518][ T7810] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 294.392894][ T7815] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.408850][ T7810] EXT4-fs (loop0): 1 truncate cleaned up [ 294.420515][ T7810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.474198][ T7810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.484938][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.617176][ T7826] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1217'. [ 294.821500][ T7830] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1216'. [ 295.157203][ T7833] FAULT_INJECTION: forcing a failure. [ 295.157203][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 295.209256][ T7830] loop3: detected capacity change from 0 to 128 [ 295.217050][ T7830] vfat: Unknown parameter 'ute' [ 295.320187][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.0.1220 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 295.320232][ T7833] Tainted: [W]=WARN [ 295.320241][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.320267][ T7833] Call Trace: [ 295.320364][ T7833] [ 295.320374][ T7833] __dump_stack+0x1d/0x30 [ 295.320404][ T7833] dump_stack_lvl+0x95/0xd0 [ 295.320426][ T7833] dump_stack+0x15/0x1b [ 295.320444][ T7833] should_fail_ex+0x25e/0x270 [ 295.320465][ T7833] ? nf_tables_newtable+0x375/0xec0 [ 295.320559][ T7833] should_failslab+0x8c/0xb0 [ 295.320590][ T7833] __kmalloc_cache_noprof+0x5f/0x400 [ 295.320612][ T7833] nf_tables_newtable+0x375/0xec0 [ 295.320722][ T7833] nfnetlink_rcv+0xbf7/0x1740 [ 295.320795][ T7833] netlink_unicast+0x5a7/0x680 [ 295.320830][ T7833] netlink_sendmsg+0x5be/0x6f0 [ 295.320976][ T7833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.320998][ T7833] ____sys_sendmsg+0x532/0x580 [ 295.321036][ T7833] ___sys_sendmsg+0x195/0x1e0 [ 295.321170][ T7833] __x64_sys_sendmsg+0xd4/0x160 [ 295.321210][ T7833] x64_sys_call+0x194c/0x3020 [ 295.321250][ T7833] do_syscall_64+0x136/0x3c0 [ 295.321293][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.321354][ T7833] RIP: 0033:0x7f1c402bce59 [ 295.321370][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.321395][ T7833] RSP: 002b:00007f1c3ed0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.321420][ T7833] RAX: ffffffffffffffda RBX: 00007f1c40535fa0 RCX: 00007f1c402bce59 [ 295.321434][ T7833] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 295.321447][ T7833] RBP: 00007f1c3ed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.321524][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.321540][ T7833] R13: 00007f1c40536038 R14: 00007f1c40535fa0 R15: 00007ffd3016b1a8 [ 295.321571][ T7833] [ 295.678541][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 295.687714][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 296.011527][ T7840] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1222'. [ 296.145212][ T7839] xt_hashlimit: size too large, truncated to 1048576 [ 296.198168][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'. [ 296.198314][ T7840] netlink: zone id is out of range [ 296.213306][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'. [ 296.223802][ T7843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1215'. [ 296.293924][ T7840] netlink: zone id is out of range [ 296.331559][ T7840] netlink: zone id is out of range [ 296.364595][ T7840] netlink: zone id is out of range [ 296.396190][ T7840] netlink: zone id is out of range [ 296.431186][ T7840] netlink: zone id is out of range [ 296.464755][ T7840] netlink: zone id is out of range [ 296.497151][ T7840] netlink: zone id is out of range [ 296.552928][ T7840] netlink: zone id is out of range [ 296.595246][ T7840] netlink: zone id is out of range [ 296.773515][ T7846] rdma_rxe: rxe_newlink: failed to add bond0 [ 296.816119][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 296.816137][ T28] audit: type=1400 audit(1781789962.494:1009): avc: denied { mount } for pid=7849 comm="syz.1.1225" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 296.980307][ T7860] loop3: detected capacity change from 0 to 8192 [ 298.496690][ T7877] FAULT_INJECTION: forcing a failure. [ 298.496690][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 298.523217][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.0.1234 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 298.523258][ T7877] Tainted: [W]=WARN [ 298.523266][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.523280][ T7877] Call Trace: [ 298.523296][ T7877] [ 298.523304][ T7877] __dump_stack+0x1d/0x30 [ 298.523327][ T7877] dump_stack_lvl+0x95/0xd0 [ 298.523348][ T7877] dump_stack+0x15/0x1b [ 298.523372][ T7877] should_fail_ex+0x25e/0x270 [ 298.523500][ T7877] ? sctp_add_bind_addr+0x71/0x1e0 [ 298.523600][ T7877] should_failslab+0x8c/0xb0 [ 298.523635][ T7877] __kmalloc_cache_noprof+0x5f/0x400 [ 298.523657][ T7877] sctp_add_bind_addr+0x71/0x1e0 [ 298.523736][ T7877] sctp_copy_local_addr_list+0x1b4/0x250 [ 298.523770][ T7877] sctp_copy_one_addr+0x7f/0x280 [ 298.523805][ T7877] sctp_bind_addr_copy+0x79/0x290 [ 298.523834][ T7877] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 298.523869][ T7877] sctp_connect_new_asoc+0x1c3/0x3a0 [ 298.523907][ T7877] sctp_sendmsg+0x105f/0x1d00 [ 298.523966][ T7877] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 298.524061][ T7877] ? __pfx_sctp_sendmsg+0x10/0x10 [ 298.524101][ T7877] inet_sendmsg+0xc5/0xd0 [ 298.524133][ T7877] ? __pfx_inet_sendmsg+0x10/0x10 [ 298.524162][ T7877] ____sys_sendmsg+0x4e8/0x580 [ 298.524269][ T7877] ___sys_sendmsg+0x195/0x1e0 [ 298.524322][ T7877] __x64_sys_sendmsg+0xd4/0x160 [ 298.524391][ T7877] x64_sys_call+0x194c/0x3020 [ 298.524422][ T7877] do_syscall_64+0x136/0x3c0 [ 298.524530][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.524559][ T7877] RIP: 0033:0x7f1c402bce59 [ 298.524636][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.524654][ T7877] RSP: 002b:00007f1c3ed0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.524678][ T7877] RAX: ffffffffffffffda RBX: 00007f1c40535fa0 RCX: 00007f1c402bce59 [ 298.524762][ T7877] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 298.524779][ T7877] RBP: 00007f1c3ed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.524796][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.524812][ T7877] R13: 00007f1c40536038 R14: 00007f1c40535fa0 R15: 00007ffd3016b1a8 [ 298.524833][ T7877] [ 299.207271][ T7886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1237'. [ 299.493087][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 299.934512][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 299.979345][ T7900] loop0: detected capacity change from 0 to 128 [ 300.101466][ T7903] loop1: detected capacity change from 0 to 256 [ 300.151131][ T7900] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.164358][ T7903] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 300.283875][ T7900] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.328094][ T7903] loop1: detected capacity change from 0 to 512 [ 300.391522][ T7903] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 300.441309][ T7900] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1241: No space for directory leaf checksum. Please run e2fsck -D. [ 300.457233][ T7903] EXT4-fs (loop1): 1 truncate cleaned up [ 300.463847][ T7903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.476228][ T7900] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1241: Directory block failed checksum [ 300.492000][ T7900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.516116][ T7900] Illegal XDP return value 4294967274 on prog (id 211) dev syz_tun, expect packet loss! [ 300.528596][ T7903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.603439][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.285675][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.353752][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.693155][ T7926] loop3: detected capacity change from 0 to 512 [ 301.938687][ T7928] 9p: Bad value for 'rfdno' [ 301.944693][ T7926] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1248: bg 0: block 127: padding at end of block bitmap is not set [ 301.959604][ T7926] loop3: lost filesystem error report for type 5 error -117 [ 301.959915][ T7926] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 301.967317][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 301.967338][ C1] EXT4-fs (loop3): initial error at time 1781789967: ext4_validate_block_bitmap:441 [ 301.967371][ C1] EXT4-fs (loop3): last error at time 1781789967: ext4_validate_block_bitmap:441 [ 302.098235][ T7926] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.1248: bit already cleared for inode 11 [ 302.109859][ T7926] loop3: lost filesystem error report for type 5 error -117 [ 302.110097][ T7926] EXT4-fs (loop3): 1 orphan inode deleted [ 302.124417][ T7926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.189915][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 302.455344][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.894158][ T7946] FAULT_INJECTION: forcing a failure. [ 302.894158][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 303.046452][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.1251 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 303.046494][ T7946] Tainted: [W]=WARN [ 303.046502][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.046514][ T7946] Call Trace: [ 303.046521][ T7946] [ 303.046529][ T7946] __dump_stack+0x1d/0x30 [ 303.046560][ T7946] dump_stack_lvl+0x95/0xd0 [ 303.046586][ T7946] dump_stack+0x15/0x1b [ 303.046610][ T7946] should_fail_ex+0x25e/0x270 [ 303.046637][ T7946] should_failslab+0x8c/0xb0 [ 303.046668][ T7946] kmem_cache_alloc_noprof+0x66/0x3f0 [ 303.046699][ T7946] ? vm_area_dup+0x33/0x2c0 [ 303.046723][ T7946] vm_area_dup+0x33/0x2c0 [ 303.046750][ T7946] __split_vma+0xe9/0x640 [ 303.046781][ T7946] ? vma_modify+0xad/0xc80 [ 303.046808][ T7946] vma_modify+0xb29/0xc80 [ 303.046846][ T7946] vma_modify_flags+0x182/0x210 [ 303.046889][ T7946] mprotect_fixup+0x3a2/0x680 [ 303.046924][ T7946] do_mprotect_pkey+0x69e/0x950 [ 303.046953][ T7946] ? get_pid_task+0x92/0xc0 [ 303.047011][ T7946] __x64_sys_mprotect+0x48/0x60 [ 303.047040][ T7946] x64_sys_call+0x2768/0x3020 [ 303.047071][ T7946] do_syscall_64+0x136/0x3c0 [ 303.047115][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.047144][ T7946] RIP: 0033:0x7fd193d1ce59 [ 303.047161][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.047183][ T7946] RSP: 002b:00007fd19274e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 303.047207][ T7946] RAX: ffffffffffffffda RBX: 00007fd193f96090 RCX: 00007fd193d1ce59 [ 303.047224][ T7946] RDX: 0000000000000006 RSI: 0000000000003000 RDI: 0000200000505000 [ 303.047239][ T7946] RBP: 00007fd19274e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.047255][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.047268][ T7946] R13: 00007fd193f96128 R14: 00007fd193f96090 R15: 00007ffd46e39ae8 [ 303.047289][ T7946] [ 303.277750][ T7950] 9p: Bad value for 'wfdno' [ 303.372681][ T7949] loop0: detected capacity change from 0 to 4096 [ 303.414577][ T7949] EXT4-fs: inline encryption not supported [ 303.494006][ T7949] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 303.801745][ T7959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7959 comm=syz.2.1258 [ 303.838142][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1258'. [ 304.895614][ T7973] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 304.916097][ T7968] loop3: detected capacity change from 0 to 2048 [ 304.939331][ T7973] ref_ctr increment failed for inode: 0x566 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811b7ea300 [ 304.986460][ T7975] loop1: detected capacity change from 0 to 512 [ 305.129105][ T7975] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1264: bg 0: block 127: padding at end of block bitmap is not set [ 305.147653][ T7975] loop1: lost filesystem error report for type 5 error -117 [ 305.148141][ T7975] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1264: bit already cleared for inode 11 [ 305.166597][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 305.166622][ C1] EXT4-fs (loop1): initial error at time 1781789970: ext4_validate_block_bitmap:441 [ 305.166651][ C1] EXT4-fs (loop1): last error at time 1781789970: ext4_validate_block_bitmap:441 [ 305.284075][ T7968] Alternate GPT is invalid, using primary GPT. [ 305.299994][ T7968] loop3: p1 p2 p3 [ 305.450792][ T7975] loop1: lost filesystem error report for type 5 error -117 [ 305.653450][ T7975] EXT4-fs (loop1): 1 orphan inode deleted [ 305.694084][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.899239][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 305.949413][ T7990] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1267'. [ 305.998548][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'. [ 306.214409][ T7996] loop3: detected capacity change from 0 to 4096 [ 306.229413][ T7996] EXT4-fs: inline encryption not supported [ 306.272129][ T7996] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 306.464710][ T8002] loop3: detected capacity change from 0 to 164 [ 306.490517][ T8002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 306.915906][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.936621][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1276'. [ 306.950017][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1276'. [ 306.991449][ T8012] rdma_rxe: rxe_newlink: failed to add bond0 [ 307.011232][ T8016] loop3: detected capacity change from 0 to 256 [ 307.030241][ T8016] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 307.085602][ T8016] loop3: detected capacity change from 0 to 512 [ 307.088346][ T8024] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1280'. [ 307.115348][ T8016] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 307.138219][ T8016] EXT4-fs (loop3): 1 truncate cleaned up [ 307.148938][ T8027] loop1: detected capacity change from 0 to 512 [ 307.158711][ T8016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.175269][ T8016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.185694][ T8027] EXT4-fs (loop1): orphan cleanup on readonly fs [ 307.197764][ T8027] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 307.209304][ T8027] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 307.227304][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 307.233786][ C1] EXT4-fs (loop1): initial error at time 1781789972: ext4_mb_generate_buddy:1317 [ 307.242970][ C1] EXT4-fs (loop1): last error at time 1781789972: ext4_mb_generate_buddy:1317 [ 307.263879][ T8027] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1281: attempt to clear invalid blocks 2 len 1 [ 307.278114][ T8027] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 307.279666][ T8027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1281: invalid indirect mapped block 1819239214 (level 0) [ 307.304895][ T8027] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 307.306283][ T8027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1281: invalid indirect mapped block 1819239214 (level 1) [ 307.334975][ T8027] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 307.339854][ T8027] EXT4-fs (loop1): 1 truncate cleaned up [ 307.370929][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.426175][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.519025][ T28] audit: type=1400 audit(1781789973.194:1010): avc: denied { bind } for pid=8039 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.597411][ T8036] loop3: detected capacity change from 0 to 4096 [ 307.612697][ T8036] EXT4-fs: inline encryption not supported [ 307.632208][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 307.643851][ T8036] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 307.885408][ T8040] loop1: detected capacity change from 0 to 512 [ 308.849254][ T8040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.171511][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.299576][ T8040] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.484310][ T28] audit: type=1400 audit(1781789976.164:1011): avc: denied { rename } for pid=8039 comm="syz.1.1284" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.517674][ T28] audit: type=1400 audit(1781789976.164:1012): avc: denied { unlink } for pid=8039 comm="syz.1.1284" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.668473][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.745923][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 311.208051][ T8081] FAULT_INJECTION: forcing a failure. [ 311.208051][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 311.264021][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.1.1294 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 311.264058][ T8081] Tainted: [W]=WARN [ 311.264065][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.264077][ T8081] Call Trace: [ 311.264084][ T8081] [ 311.264162][ T8081] __dump_stack+0x1d/0x30 [ 311.264189][ T8081] dump_stack_lvl+0x95/0xd0 [ 311.264209][ T8081] dump_stack+0x15/0x1b [ 311.264227][ T8081] should_fail_ex+0x25e/0x270 [ 311.264386][ T8081] should_failslab+0x8c/0xb0 [ 311.264419][ T8081] __kmalloc_noprof+0xb8/0x4d0 [ 311.264471][ T8081] ? nf_tables_newrule+0xd68/0x16d0 [ 311.264526][ T8081] nf_tables_newrule+0xd68/0x16d0 [ 311.264571][ T8081] nfnetlink_rcv+0xbf7/0x1740 [ 311.264739][ T8081] netlink_unicast+0x5a7/0x680 [ 311.264785][ T8081] netlink_sendmsg+0x5be/0x6f0 [ 311.264812][ T8081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.264860][ T8081] ____sys_sendmsg+0x532/0x580 [ 311.264906][ T8081] ___sys_sendmsg+0x195/0x1e0 [ 311.264943][ T8081] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 311.265074][ T8081] __x64_sys_sendmsg+0xd4/0x160 [ 311.265121][ T8081] x64_sys_call+0x194c/0x3020 [ 311.265152][ T8081] do_syscall_64+0x136/0x3c0 [ 311.265242][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.265269][ T8081] RIP: 0033:0x7fd94d20ce59 [ 311.265303][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.265325][ T8081] RSP: 002b:00007fd94bc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.265346][ T8081] RAX: ffffffffffffffda RBX: 00007fd94d485fa0 RCX: 00007fd94d20ce59 [ 311.265365][ T8081] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 311.265425][ T8081] RBP: 00007fd94bc67090 R08: 0000000000000000 R09: 0000000000000000 [ 311.265441][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.265454][ T8081] R13: 00007fd94d486038 R14: 00007fd94d485fa0 R15: 00007ffce0ad4408 [ 311.265475][ T8081] [ 311.589808][ T28] audit: type=1400 audit(1781789977.274:1013): avc: denied { name_connect } for pid=8083 comm="syz.1.1296" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 311.650080][ T8089] xfrm1: entered allmulticast mode [ 311.677198][ T28] audit: type=1400 audit(1781789977.354:1014): avc: denied { read } for pid=8094 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 311.717336][ T28] audit: type=1400 audit(1781789977.394:1015): avc: denied { accept } for pid=8087 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.863631][ T8100] vhci_hcd vhci_hcd.2: invalid port number 96 [ 311.870021][ T8100] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 311.979121][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.1.1301 [ 312.057822][ T3385] kernel read not supported for file /syz1 (pid: 3385 comm: kworker/1:4) [ 312.162840][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 312.597319][ T28] audit: type=1400 audit(1781789978.274:1016): avc: denied { bind } for pid=8120 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.635871][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 312.645288][ T8125] netlink: 'syz.3.1310': attribute type 30 has an invalid length. [ 312.669431][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 312.679000][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 312.688531][ T8124] netlink: 'syz.2.1309': attribute type 30 has an invalid length. [ 312.691351][ T8125] netlink: 'syz.3.1310': attribute type 30 has an invalid length. [ 312.711504][ T4123] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.720729][ T4123] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.730864][ T8129] loop1: detected capacity change from 0 to 512 [ 312.739636][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 312.751601][ T8124] netlink: 'syz.2.1309': attribute type 30 has an invalid length. [ 312.759749][ T4123] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.759989][ T8129] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 312.789269][ T8129] EXT4-fs (loop1): 1 truncate cleaned up [ 312.795484][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.812280][ T8129] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.820277][ T4123] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.832085][ T4123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.858673][ T4123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.888076][ T4123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.945314][ T8143] loop0: detected capacity change from 0 to 512 [ 312.952593][ T8143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.964282][ T8143] EXT4-fs (loop0): 1 truncate cleaned up [ 312.977855][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.031604][ T8140] netlink: 'syz.1.1315': attribute type 30 has an invalid length. [ 313.032201][ T4123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.169962][ T8155] FAULT_INJECTION: forcing a failure. [ 313.169962][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.175991][ T8140] netlink: 'syz.1.1315': attribute type 30 has an invalid length. [ 313.183403][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.3.1320 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 313.183459][ T8155] Tainted: [W]=WARN [ 313.183495][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.183549][ T8155] Call Trace: [ 313.183577][ T8155] [ 313.183616][ T8155] __dump_stack+0x1d/0x30 [ 313.183705][ T8155] dump_stack_lvl+0x95/0xd0 [ 313.183777][ T8155] dump_stack+0x15/0x1b [ 313.183870][ T8155] should_fail_ex+0x25e/0x270 [ 313.183936][ T8155] should_fail+0xb/0x20 [ 313.184029][ T8155] should_fail_usercopy+0x1a/0x20 [ 313.184109][ T8155] _copy_to_user+0x20/0xa0 [ 313.184208][ T8155] simple_read_from_buffer+0xb5/0x130 [ 313.184317][ T8155] proc_fail_nth_read+0x10e/0x150 [ 313.184363][ T8155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.184507][ T8155] vfs_read+0x18e/0x7c0 [ 313.184599][ T8155] ? __rcu_read_unlock+0x4e/0x70 [ 313.184722][ T8155] ? __fget_files+0x184/0x1c0 [ 313.184796][ T8155] ? mutex_lock+0x57/0x90 [ 313.184887][ T8155] ksys_read+0xdc/0x1a0 [ 313.185061][ T8155] __x64_sys_read+0x40/0x50 [ 313.185143][ T8155] x64_sys_call+0x2886/0x3020 [ 313.185307][ T8155] do_syscall_64+0x136/0x3c0 [ 313.185522][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.185588][ T8155] RIP: 0033:0x7fd193cdd68e [ 313.185711][ T8155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.185782][ T8155] RSP: 002b:00007fd19276efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.185847][ T8155] RAX: ffffffffffffffda RBX: 00007fd19276f6c0 RCX: 00007fd193cdd68e [ 313.185892][ T8155] RDX: 000000000000000f RSI: 00007fd19276f0a0 RDI: 0000000000000004 [ 313.185941][ T8155] RBP: 00007fd19276f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.185983][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.186017][ T8155] R13: 00007fd193f96038 R14: 00007fd193f95fa0 R15: 00007ffd46e39ae8 [ 313.186091][ T8155] [ 313.379438][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.440083][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 313.474138][ T28] audit: type=1400 audit(1781789979.154:1017): avc: denied { audit_write } for pid=8159 comm="syz.0.1319" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 313.619967][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 313.629389][ T8169] netlink: 'syz.0.1325': attribute type 30 has an invalid length. [ 313.818471][ T4110] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.833644][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 313.876783][ T4110] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.921620][ T8169] netlink: 'syz.0.1325': attribute type 30 has an invalid length. [ 313.966196][ T4110] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.966310][ T4110] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.037628][ T28] audit: type=1400 audit(1781789979.634:1018): avc: denied { write } for pid=8177 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.174898][ T8163] loop1: detected capacity change from 0 to 2048 [ 314.224969][ T28] audit: type=1400 audit(1781789979.904:1019): avc: denied { ioctl } for pid=8185 comm="syz.0.1329" path="socket:[20707]" dev="sockfs" ino=20707 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.275439][ T8163] Alternate GPT is invalid, using primary GPT. [ 314.283594][ T8186] loop0: detected capacity change from 0 to 512 [ 314.290485][ T8186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.293729][ T8163] loop1: p1 p2 p3 [ 314.325479][ T8186] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 314.516843][ T2980] Alternate GPT is invalid, using primary GPT. [ 314.523298][ T2980] loop1: p1 p2 p3 [ 314.537679][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 314.664018][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1335'. [ 316.989604][ T8221] Cannot find set identified by id 0 to match [ 317.706086][ T8230] __nla_validate_parse: 2 callbacks suppressed [ 317.706103][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 317.997418][ T28] audit: type=1400 audit(1781789983.674:1020): avc: denied { write } for pid=8213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.999716][ T8232] x_tables: duplicate underflow at hook 2 [ 318.428551][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'. [ 318.468582][ T28] audit: type=1400 audit(1781789984.144:1021): avc: denied { write } for pid=8239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.611154][ T28] audit: type=1400 audit(1781789985.294:1022): avc: denied { create } for pid=8251 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 319.819054][ T28] audit: type=1400 audit(1781789985.314:1023): avc: denied { bind } for pid=8251 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.259863][ T28] audit: type=1400 audit(1781789985.924:1024): avc: denied { setopt } for pid=8261 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.883378][ T8273] 9pnet_fd: p9_fd_create_tcp (8273): problem connecting socket to 127.0.0.1 [ 321.091053][ T28] audit: type=1400 audit(1781789985.924:1025): avc: denied { getopt } for pid=8261 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.152208][ T28] audit: type=1400 audit(1781789986.584:1026): avc: denied { write } for pid=8264 comm="syz.2.1349" name="file0" dev="tmpfs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.195067][ T28] audit: type=1400 audit(1781789986.644:1027): avc: denied { write } for pid=8250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.251513][ T8272] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1350'. [ 321.266371][ T28] audit: type=1400 audit(1781789986.934:1028): avc: denied { write } for pid=8278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.399117][ T28] audit: type=1400 audit(1781789987.074:1029): avc: denied { getopt } for pid=8275 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 323.398633][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 323.398725][ T28] audit: type=1400 audit(1781789989.084:1031): avc: denied { mount } for pid=8312 comm="syz.4.1341" name="/" dev="autofs" ino=20936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 323.843113][ T8314] loop1: detected capacity change from 0 to 256 [ 323.868248][ T8314] FAT-fs (loop1): Directory bread(block 64) failed [ 323.874846][ T8314] FAT-fs (loop1): Directory bread(block 65) failed [ 323.881429][ T8314] FAT-fs (loop1): Directory bread(block 66) failed [ 323.888000][ T8314] FAT-fs (loop1): Directory bread(block 67) failed [ 323.894537][ T8314] FAT-fs (loop1): Directory bread(block 68) failed [ 323.901097][ T8314] FAT-fs (loop1): Directory bread(block 69) failed [ 323.907651][ T8314] FAT-fs (loop1): Directory bread(block 70) failed [ 323.914233][ T8314] FAT-fs (loop1): Directory bread(block 71) failed [ 323.920869][ T8314] FAT-fs (loop1): Directory bread(block 72) failed [ 323.927511][ T8314] FAT-fs (loop1): Directory bread(block 73) failed [ 324.148290][ T8329] FAULT_INJECTION: forcing a failure. [ 324.148290][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.165493][ T8319] loop0: detected capacity change from 0 to 8192 [ 324.172272][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz.3.1364 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 324.172312][ T8329] Tainted: [W]=WARN [ 324.172320][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.172336][ T8329] Call Trace: [ 324.172398][ T8329] [ 324.172459][ T8329] __dump_stack+0x1d/0x30 [ 324.172490][ T8329] dump_stack_lvl+0x95/0xd0 [ 324.172518][ T8329] dump_stack+0x15/0x1b [ 324.172539][ T8329] should_fail_ex+0x25e/0x270 [ 324.172565][ T8329] should_fail+0xb/0x20 [ 324.172683][ T8329] should_fail_usercopy+0x1a/0x20 [ 324.172711][ T8329] _copy_to_user+0x20/0xa0 [ 324.172746][ T8329] simple_read_from_buffer+0xb5/0x130 [ 324.172799][ T8329] proc_fail_nth_read+0x10e/0x150 [ 324.172841][ T8329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.172950][ T8329] vfs_read+0x18e/0x7c0 [ 324.172983][ T8329] ? __rcu_read_unlock+0x4e/0x70 [ 324.173013][ T8329] ? __fget_files+0x184/0x1c0 [ 324.173061][ T8329] ? mutex_lock+0x57/0x90 [ 324.173162][ T8329] ksys_read+0xdc/0x1a0 [ 324.173201][ T8329] __x64_sys_read+0x40/0x50 [ 324.173238][ T8329] x64_sys_call+0x2886/0x3020 [ 324.173267][ T8329] do_syscall_64+0x136/0x3c0 [ 324.173324][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.173352][ T8329] RIP: 0033:0x7fd193cdd68e [ 324.173372][ T8329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.173395][ T8329] RSP: 002b:00007fd19276efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.173420][ T8329] RAX: ffffffffffffffda RBX: 00007fd19276f6c0 RCX: 00007fd193cdd68e [ 324.173516][ T8329] RDX: 000000000000000f RSI: 00007fd19276f0a0 RDI: 0000000000000004 [ 324.173562][ T8329] RBP: 00007fd19276f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.173580][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.173638][ T8329] R13: 00007fd193f96038 R14: 00007fd193f95fa0 R15: 00007ffd46e39ae8 [ 324.173671][ T8329] [ 324.387827][ T8328] loop1: detected capacity change from 0 to 8192 [ 324.409749][ T8319] loop0: p1 p2 p3 [ 324.430231][ T8319] loop0: p1 size 67111168 extends beyond EOD, truncated [ 324.452847][ T8319] loop0: p2 size 8388608 extends beyond EOD, truncated [ 324.513055][ T8319] loop0: p3 start 4294901760 is beyond EOD, truncated [ 324.626934][ T8342] rdma_rxe: rxe_newlink: failed to add bond0 [ 324.715558][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 324.877059][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 324.886793][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 324.911686][ T8344] x_tables: duplicate underflow at hook 2 [ 325.182905][ T8352] rdma_rxe: rxe_newlink: failed to add bond0 [ 325.217306][ T8355] loop1: detected capacity change from 0 to 512 [ 325.342817][ T8360] loop3: detected capacity change from 0 to 256 [ 325.359672][ T8360] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 325.399293][ T8360] loop3: detected capacity change from 0 to 512 [ 325.425087][ T8360] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 325.459020][ T8360] EXT4-fs (loop3): 1 truncate cleaned up [ 325.486767][ T8360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.521570][ T8360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.608086][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1378'. [ 325.751715][ T8378] net_ratelimit: 10 callbacks suppressed [ 325.751735][ T8378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 325.834036][ T8378] loop1: detected capacity change from 0 to 8192 [ 325.973339][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1383'. [ 325.988619][ T8378] loop1: p1 p2 p3 [ 325.992546][ T8378] loop1: p1 size 67111168 extends beyond EOD, truncated [ 326.000528][ T8378] loop1: p2 size 8388608 extends beyond EOD, truncated [ 326.023668][ T8378] loop1: p3 start 4294901760 is beyond EOD, truncated [ 326.295186][ T8391] loop3: detected capacity change from 0 to 164 [ 326.378656][ T8393] rdma_rxe: rxe_newlink: failed to add bond0 [ 328.060135][ T8423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'. [ 328.078738][ T28] audit: type=1400 audit(1781789993.754:1032): avc: denied { getopt } for pid=8420 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 328.142695][ T8425] vhci_hcd vhci_hcd.2: invalid port number 96 [ 328.151655][ T8425] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 328.187402][ T28] audit: type=1400 audit(1781789993.864:1033): avc: denied { write } for pid=8428 comm="syz.4.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.464877][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8425 comm=syz.1.1396 [ 328.563162][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8425 comm=syz.1.1396 [ 328.836837][ T8450] loop1: detected capacity change from 0 to 1764 [ 328.968702][ T8447] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 328.976659][ T28] audit: type=1400 audit(1781789994.644:1034): avc: denied { mounton } for pid=8446 comm="syz.1.1401" path="/279/file0/file0" dev="loop1" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 330.014322][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 330.056219][ T8469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1407'. [ 330.068187][ T8467] netlink: 'syz.4.1406': attribute type 30 has an invalid length. [ 330.179813][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 330.192321][ T8474] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1409'. [ 330.209427][ T4110] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.217993][ T4110] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.225057][ T8467] netlink: 'syz.4.1406': attribute type 30 has an invalid length. [ 330.240760][ T4110] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.248828][ T28] audit: type=1400 audit(1781789995.924:1035): avc: denied { lock } for pid=8475 comm="syz.1.1410" path="socket:[21257]" dev="sockfs" ino=21257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 330.259117][ T4110] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.436554][ T8476] loop1: detected capacity change from 0 to 164 [ 330.549094][ T8476] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 330.716770][ T8492] Cannot find set identified by id 0 to match [ 330.797735][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 330.915424][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 330.983543][ T8492] x_tables: duplicate underflow at hook 2 [ 331.047146][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1412'. [ 331.324067][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1420'. [ 331.361542][ T8513] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1422'. [ 331.803153][ T28] audit: type=1400 audit(1781789997.484:1036): avc: denied { getopt } for pid=8525 comm="syz.3.1425" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.889079][ T28] audit: type=1400 audit(1781789997.544:1037): avc: denied { cmd } for pid=8525 comm="syz.3.1425" path="socket:[22009]" dev="sockfs" ino=22009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 332.043098][ T8501] loop1: detected capacity change from 0 to 2048 [ 332.141557][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 332.142806][ T8501] Alternate GPT is invalid, using primary GPT. [ 332.171888][ T8535] netlink: 'syz.2.1427': attribute type 30 has an invalid length. [ 332.184803][ T8535] netlink: 'syz.2.1427': attribute type 30 has an invalid length. [ 332.199673][ T8501] loop1: p1 p2 p3 [ 332.211213][ T8531] loop0: detected capacity change from 0 to 4096 [ 332.221270][ T8531] EXT4-fs: inline encryption not supported [ 332.246709][ T8531] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 332.367429][ T2980] Alternate GPT is invalid, using primary GPT. [ 332.379310][ T2980] loop1: p1 p2 p3 [ 332.403492][ T5763] ================================================================== [ 332.411642][ T5763] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 332.418287][ T5763] [ 332.420636][ T5763] write to 0xffff888108264310 of 8 bytes by task 3290 on cpu 0: [ 332.428295][ T5763] dentry_kill+0x139/0x500 [ 332.432763][ T5763] shrink_dentry_list+0x165/0x1d0 [ 332.437957][ T5763] shrink_dcache_tree+0x62/0x220 [ 332.442957][ T5763] shrink_dcache_parent+0x17/0x20 [ 332.448032][ T5763] vfs_rmdir+0x2ee/0x450 [ 332.452323][ T5763] filename_rmdir+0x1a6/0x360 [ 332.457038][ T5763] __se_sys_rmdir+0x2b/0xe0 [ 332.461598][ T5763] __x64_sys_rmdir+0x1f/0x30 [ 332.466224][ T5763] x64_sys_call+0x2448/0x3020 [ 332.470925][ T5763] do_syscall_64+0x136/0x3c0 [ 332.475570][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.481483][ T5763] [ 332.483825][ T5763] read to 0xffff888108264310 of 8 bytes by task 5763 on cpu 1: [ 332.491388][ T5763] fast_dput+0x64/0x2e0 [ 332.495583][ T5763] dput+0x1f/0x50 [ 332.499240][ T5763] filename_unlinkat+0x217/0x410 [ 332.504214][ T5763] __se_sys_unlink+0x2b/0xe0 [ 332.508842][ T5763] __x64_sys_unlink+0x1f/0x30 [ 332.513553][ T5763] x64_sys_call+0x2eb6/0x3020 [ 332.518263][ T5763] do_syscall_64+0x136/0x3c0 [ 332.522898][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.528827][ T5763] [ 332.531365][ T5763] value changed: 0xffff888237751940 -> 0x0000000000000000 [ 332.538851][ T5763] [ 332.541202][ T5763] Reported by Kernel Concurrency Sanitizer on: [ 332.547371][ T5763] CPU: 1 UID: 0 PID: 5763 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 332.557825][ T5763] Tainted: [W]=WARN [ 332.561731][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.571833][ T5763] ================================================================== [ 332.602501][ T8547] loop0: detected capacity change from 0 to 1024 [ 332.621230][ T8547] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.711091][ T8547] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1430: Invalid block bitmap block 0 in block_group 0 [ 332.728752][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 332.737373][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 332.751189][ C0] EXT4-fs (loop0): initial error at time 1781789998: ext4_read_block_bitmap_nowait:483 [ 332.760887][ C0] EXT4-fs (loop0): last error at time 1781789998: ext4_read_block_bitmap_nowait:483 [ 332.774306][ T8547] Quota error (device loop0): write_blk: dquota write failed [ 332.785629][ T8547] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 332.800446][ T8547] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.1430: Failed to acquire dquot type 0 [ 332.812838][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 332.814512][ T8547] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1430: Freeing blocks not in datazone - block = 0, count = 4096 [ 332.837706][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 332.838502][ T8547] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1430: Invalid inode bitmap blk 0 in block_group 0 [ 332.860309][ T4107] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 332.869483][ T4107] EXT4-fs error (device loop0): ext4_release_dquot:7068: comm kworker/u8:9: Failed to release dquot type 0 [ 332.881215][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 332.882368][ T8547] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 332.899530][ T4107] loop0: lost filesystem error report for type 5 error -117 [ 332.899730][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 332.910490][ T8547] EXT4-fs (loop0): 1 orphan inode deleted [ 332.933418][ T8547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.961125][ T8547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.217470][ T9] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 121 sec