last executing test programs: 10m9.914929091s ago: executing program 4 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r3, 0x0, 0x120) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040), 0x3e) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x5381, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='no']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 10m8.68850019s ago: executing program 4 (id=711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9d}, 0x50) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xdde0000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f00000000c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff3d200000000000008701000000000000", @ANYRES16=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) capset(&(0x7f0000000dc0)={0x19980330}, &(0x7f0000000e00)={0x0, 0x3, 0x4, 0xfffffffe, 0x80000, 0xd}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000000005f000500010006"], 0x1c}}, 0x0) 10m7.795656439s ago: executing program 4 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000840)={0x0, 0x1, r6, 0x3, 0x80000}) 10m3.760159888s ago: executing program 4 (id=737): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10001, 0xf, 0x4000000000000004, 0xa0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x5, 0xc59}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fchown(r0, 0xee00, 0xee01) 10m1.080847583s ago: executing program 4 (id=749): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f00005ae000/0x2000)=nil) socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x4, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x8, 0x9}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0x46c80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x101d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000000000000000000000030000000001"], 0x0, 0x53}, 0x28) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_open_dev$loop(&(0x7f0000000280), 0xe0, 0x220000) 10m0.677537526s ago: executing program 4 (id=752): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x6, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc01000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb4, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') lseek(r7, 0x8, 0x0) getdents(r7, 0xffffffffffffffff, 0x7a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) 10m0.632966337s ago: executing program 32 (id=752): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x6, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc01000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb4, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') lseek(r7, 0x8, 0x0) getdents(r7, 0xffffffffffffffff, 0x7a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) 6m1.442640851s ago: executing program 0 (id=2100): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15b, 0x4, @perf_config_ext={0x0, 0x8}, 0x103b17, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x12, 0x7, 0x0, 0x0, 0x249, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x7, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x12804, 0x0, 0x0, 0x8, 0x0, 0x405, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x7, 0x4, 0x7, 0xe1e, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x6, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x80000003}, {0x1000, 0x5, 0x8, 0x9}, {0x7, 0x0, 0x10, 0x6}, {0x1, 0xd9, 0x5, 0x5}, {0x5, 0x1, 0x4, 0x1}, {0x8, 0x1, 0x0, 0x38}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000080)={0xc9, 0x2, 0xe66e, 0x4, 0x9}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="aa65058000040000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x3f, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0x4e, 0xfffffdb0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x1d, 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) memfd_create(&(0x7f0000000200)='bond0\x00', 0x4) clock_adjtime(0xfffffff3, 0x0) clock_adjtime(0x4, &(0x7f0000000100)={0x7ff, 0x61, 0x4, 0x5, 0x1000, 0x4, 0x1, 0x20000000006, 0xffffffff, 0x0, 0xa1c, 0x7, 0x6, 0x40, 0x7, 0x9, 0x5, 0xd69, 0x4, 0x10000, 0x100000000, 0x1, 0x852, 0xfffffffffffffff9, 0x0, 0x8}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) 6m1.351352663s ago: executing program 0 (id=2102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="400f445d83e440f745ceb77178b76b5504fdc1a59da954acfba01a699be70938", 0x20, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xb7, 0x8bf2, 0xb6, 0x8, 0xc]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40004) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f2, 0x408, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4801}, 0x41) io_setup(0x1000, &(0x7f0000000600)) 6m0.420940453s ago: executing program 0 (id=2107): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x0, 0xff, 0x4}, {0x1, 0xff, 0x1}, 0xfe, 0x1}, {0x2, 0x1, {0x1, 0x1}, {0x2}, 0xff, 0x2}, {0x2, 0x3, {0x1, 0x1fe, 0x2}, {0x1, 0x1, 0x4}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0xff, 0x1}, {0x0, 0xf0, 0x1}, 0x0, 0xff}, {0x3, 0x2, {0x2}, {0x1, 0x1, 0x2}, 0xff, 0xff}, {0x1, 0x200001, {0x1, 0x0, 0x3}, {0x2}, 0xfe, 0xff}, {0x0, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xff, 0xfe}], 0x4000) 6m0.294626977s ago: executing program 0 (id=2108): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x86, 0x0, 0x0, 0x401f, 0x68188, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x7, 0x4, 0x806, 0x8000, 0x7ff8, 0x0, 0x2}, 0x0, 0x800f, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002240)=@delchain={0x191c, 0x64, 0x800, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x18f0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x1}}, @TCA_FW_ACT={0x1898, 0x4, [@m_bpf={0x174, 0x1, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x7f, 0x4, 0x6, 0x1e}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x5, 0x6, 0x4, 0x8}, {0x1, 0x5, 0xd, 0x200}, {0x6, 0x9, 0x0, 0x7}, {0x1000, 0x4, 0x9, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xc7, 0x6, "e2d842c408f6e7af4a171c55f909c9cfbc06edbb8db6164113f9cbfbba2f3dfb53af46d38a9b002672e3af8aae85eab3b36e8fbae6d3a5397bfaf0295588197c262bdd74c0116fb3931ea1c3ad62169a8667321461c4475020c394a9af65e791777e5279c5c6e9b6ad458fac65757dc42996c64760874f25e927307f515ae9521e42644a903e49a4a3fcfbbfed7565986a5667efaeba7e231ddf664f8c3482bcd0e627398667aebda5321d2cc391e62dde3f74d0cec15df3ea2453cd047d875d6ad999"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x98, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0xffffffffffffffff, 0xc8, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, '$],}-*{-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x400, 0x8, 0x2, 0x6}}]}, {0x29, 0x6, "7a503f9dd3438de6e922a323685fe481311362acfaeec63e9ff94c937e78e854f761d09ae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0xd065d8af747e9fee}}}}, @m_ife={0x1108, 0x12, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x5, 0xb, 0x9405}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x10}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}]}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x15c, 0x1e, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffffff, 0x7, 0x1, 0x3, 0x7f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x5, 0xffffffffffffffff, 0x2, 0x9}, 0x3}}]}, {0xce, 0x6, "029a3ffa69eda6ea0e51f40a5822056329e690e7201c2a206e9324a05d556c2b8cab9166bb92560b2631c231d5cfe1f280ed3156a6787557b329daae2071dd00c2e5e1480579b2893b36a190856cac05f91d56d14b97daeff64fb9752e080000000000264a42dba11666ddffdf1297ba7eaa952c2a7608b226517aabaa6606e7f7015c905452a29237ed111bd071bbd119630488b519622db5c72b6f1cd13c29fba19abe1aebfafcb0fcb1aa2a698dd10674e81d04d493e8a96e453e9a4bc397ad91171b681871df1615"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x110, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x8, 0x5, 0x3}}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5c2c8575}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x6, 0x6, 0x5}, 0x1}}]}, {0x6f, 0x6, "42630332531e62371de82bcdedab149950d9e93ad3cff8da3dbab96bf8d87a8f08845668a37ef21f3be66e58ec22195d4626884bd7b3919c98eb2533ed5dcd34dab7d7a3b714d00f4b2cc1f029da92196f8a7362c7be2af4cf529475de4d108d67fb065066835db6516d5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ctinfo={0x9c, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xb}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x5e, 0x6, "db785dca321efa4b7e9c0e5bd2e4cc9c9ba8715ee9085d12bb5516ac18cdca69f9611fc80c545a7a389cd1bba5f9c9405bc0ce16458e2054b2f12f1adb275d2d4c36f5f0662d1cd52a20df93e62310262c14d21f43c5c87ae3f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x11c, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'ethtool\x00'}]}, {0xd8, 0x6, "e2da5357905944dfa7459ef0bacc8e8d6d7f6fdafd0c3e122570de3889d19f6e722e673f5db2fd4532975d20a15dbbc40b4340746c87598d4395ab5cc81cf4e3339d26c28de57a11d6e1e7cf3baaf5e02e8697b35b1c36c58209a8561e7392653ae02186bf3a4a755a53b96fc5cfdf202dc165da0d982e63bf7bd79273347596c46b48153aed87ab7017f64daace4f3134fee7c1ae024c185251976e70cc23aa67cdef54b0dbfb02ce2300e54ef9a5f10a82614e5c2e07518df5c9a40477d4ddeaeb6a5a650f382956e41e3c1998642315463bb1"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ctinfo={0x15c, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x4, 0x8, 0x7fe0000, 0x8}}]}, {0xed, 0x6, "8c050c6fe1ec399194663ec7517aba0a150015a5398720ed64366bfa2a46a254c54d2eb3e531c5569600b26ca827453d319433ec50e3d51559ecc22ee45a61c7916484f5f835261f63069bb6e426ff23c5972272aa27799edc7fd3ca1b96409a7be14a57b941c2a7a3a1e172cee0cd3f0ab377afc08a70c6279fc335e2d8bfe3e35c814020b9827fe6e937fb8652b0cd28b4056ffcca1d003e7f54bb469c03f0d8d280855925913f0ecb54b7cf33040c86e3c9120dd2454edb852d52534adcf44400e059650debf1b8f5933f2c019e03375d8c433f0047ccd70df3fe7a27ec6e0d2cc8f329fd99ec74"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x4}}]}}]}, 0x191c}}, 0x4804) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x1000000, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x0, 0x0, 0x0, 0x386561e9, 0x2, 0x4}, [@TCA_NETEM_DELAY_DIST={0x32, 0xd, "aa5a89210649854dae064bd0d42b8c4af661036d85918742694f39d65025d109b02a60c55af193b69bf2134f1b7f"}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0xfffffffffffffffe, 0x0) syz_clone3(&(0x7f00000002c0)={0x100000000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140), {0x3f}, &(0x7f0000000180)=""/171, 0xab, &(0x7f0000000240)=""/63, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000004c0)={r10, 0x0, r12}, 0xc) syz_usbip_server_init(0x6) 5m57.667162151s ago: executing program 0 (id=2119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x1, 0x2, 0xe, 0x1}, {0x4, 0x5, 0x8, 0x8}, {0x1, 0x2, 0x2, 0xb}], 0x10, 0x10}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000380)) symlink(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./bus/../file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="1102000000000000000009000000240004801300010062726f6164636173742d6c696e6b00009dff07800800050001000000"], 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8a4, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x541183, 0x116) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r6}}, 0x20) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) 5m57.189715537s ago: executing program 0 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000840)={0x0, 0x1, r6, 0x3, 0x80000}) 5m42.534675155s ago: executing program 33 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000840)={0x0, 0x1, r6, 0x3, 0x80000}) 9.310097063s ago: executing program 5 (id=3808): socket$can_bcm(0x1d, 0x2, 0x2) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x3, 0x80, 0x0, 0x4}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200200000010000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) fcntl$notify(r4, 0x402, 0x26) getdents64(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x3, 0x232, &(0x7f00000003c0)="$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") inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 8.886397666s ago: executing program 5 (id=3811): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1204082, &(0x7f0000000d40)=ANY=[], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0xc2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) 8.186372079s ago: executing program 3 (id=3812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r1) sendto$inet6(r3, &(0x7f0000000800)="757f1bea2ca422c6489edf0480efd6d226e4af142ef74661464ca2f7d9b3b75698083f8d57bb13a05459433628194ecc17c7c3ff574ecad0049b6b5a051a05a5754097a43639119e35a0c93d3a97811dd1e5d12441d56c18252377188690abae85dad12d6e0262e10bac1cc6e572ee0b401417eda7f2cfb40f63662620745cc92f0b396ed069cdfa8b7f5c94b9e15fc87aa5eccbf11bd5e26635c14bbf69e00e3dab5ac462d7756f72b0a79e35e5861fcd136b116865b91708b4f615741487f8a7646a9537384bd21259ed3e997c738f80f16ef4e744c97c9cc93b4574456e1f1df972d07091d81e", 0xe8, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0xffffffffffffff7a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$l2tp(0x2, 0x2, 0x73) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r4, 0x0, 0x440e0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfffffdd0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000)) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 7.83268585s ago: executing program 3 (id=3816): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x0, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r6, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) close(0xffffffffffffffff) 6.688420817s ago: executing program 2 (id=3820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0xf4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xc0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x7c, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x966a, 0x5, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0xdd, 0x29, 0x0, @empty, @empty}}}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) 6.630919228s ago: executing program 2 (id=3821): socket$can_bcm(0x1d, 0x2, 0x2) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x3, 0x80, 0x0, 0x4}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200200000010000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) fcntl$notify(r4, 0x402, 0x26) getdents64(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x3, 0x232, &(0x7f00000003c0)="$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") inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 6.224888681s ago: executing program 3 (id=3824): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r2, 0x1, 0xff80}, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x14, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r4, 0x403}}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xc}, 0xb093, 0x800000, 0x1000, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) socket$packet(0x11, 0x3, 0x300) unshare(0x4000600) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdb00000000020073797a3000000000080041007278650014003300626f6e645f736c6176655b3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b10}, 0xc800) syz_usb_disconnect(r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000004500)={0x0, 0x0, "9ed4561387de657c2b5df8a70979904e43e11eccd8082bbf3ec183f6b83f06861be4f5195bae5a78c0be51a15d47116ea65c5b79e80a372aeb384c14650b4754a1576c1cdfb7fc6a6a1b79f8d0c3dbd11f0566f3f0fae607c6e0f865d628f936f10a7b38def6f16d06f16770c495260a26fabdfa83a8aa085605a4f0a42f0782d1a806fdd9081e119c84cbbd087625379f6e314bc5fc82981ecc634ff5af9b1f3620af331c00f12377327e3eedc78242637238a15ecd61386caac895de99db77ab1b160d48e004d8d24a0d64d095d7af3c4c1761e2056007acaab8676d24fe6f043407db2defec9474c1dc66aaf31f75f90d61c5f903e9349ab69dc003d2a488", "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"}) 6.079026456s ago: executing program 2 (id=3826): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001e000000000000000800"/28], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) syz_open_dev$evdev(&(0x7f00000000c0), 0xf43, 0x1) 4.462738998s ago: executing program 2 (id=3827): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 3.939606764s ago: executing program 3 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) 3.746789511s ago: executing program 3 (id=3834): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000540)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x29393bc9}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r1 = socket(0x10, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000000aa080009000400000014000100"], 0x50}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x9, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x6, 0xad1}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206052000000000000000000300000005000500020000000500040000000000050001000f0000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aaac8748775c000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000200000009000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r2], &(0x7f0000000640)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2.83131442s ago: executing program 5 (id=3838): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a30"], 0xd4}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000080)={0x1, 0x8a, 0x1c0000}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@generic={0x0, 0x5, 0x9, 0x6, 0x3ff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x1, 0x400, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x1, 0x6, 0x9}, {0x1, 0x5, 0x4, 0xc}, {0x3, 0x4, 0x7, 0xa}], 0x10, 0x800}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r8], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x101000, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x10001]}, {0xfe07, 0x8, 0x7, 0x1000}}, 0x54, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r9, 0x40106e80, &(0x7f0000000340)={0x7, 0x1}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000080)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@grpjquota}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x35, 0x32, 0x66, 0x30, 0x61, 0x64], 0x2d, [0x65, 0x37, 0x65, 0x37], 0x2d, [0x30, 0x64, 0x64, 0x37], 0x2d, [0x62, 0x65, 0x0, 0x63], 0x2d, [0x36, 0x0, 0x64, 0x7, 0x36, 0x33, 0x35, 0x35]}}}, {@subj_type={'subj_type', 0x3d, 'rootcontext'}}, {@appraise_type}, {@flag='sync'}, {@euid_lt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot}]}, 0x1, 0x638, &(0x7f0000000e40)="$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") 2.600632377s ago: executing program 2 (id=3841): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x0) 2.583800128s ago: executing program 5 (id=3842): openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.566666438s ago: executing program 2 (id=3843): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000540)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x29393bc9}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r1 = socket(0x10, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000000aa080009000400000014000100"], 0x50}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x9, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x6, 0xad1}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206052000000000000000000300000005000500020000000500040000000000050001000f0000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aaac8748775c000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000200000009000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x64) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r2], &(0x7f0000000640)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2.493054561s ago: executing program 5 (id=3847): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.425445863s ago: executing program 5 (id=3848): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1204082, &(0x7f0000000d40)=ANY=[], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0xc2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) 1.059701056s ago: executing program 1 (id=3858): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r2 = syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) wait4(r2, 0x0, 0x20000000, &(0x7f00000005c0)) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x10, 0x2, @tid=r2}, &(0x7f0000000200)) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000811000000000000007f"}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x82082) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) mknod(0x0, 0x2, 0x200) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x1c, 0x10000017, 0x15d, &(0x7f00000003c0)}) 1.058813066s ago: executing program 6 (id=3859): openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 965.895499ms ago: executing program 6 (id=3860): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 884.755042ms ago: executing program 1 (id=3861): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 823.116104ms ago: executing program 1 (id=3862): socket$kcm(0x2, 0x922000000001, 0x106) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x2) fchdir(r2) r3 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x1c2) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x2b, 0x81, 0x1, 0x9, 0x0, 0x7, 0xf40a, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0xa}, 0x9400, 0x2900fcc, 0x8, 0x6, 0x1000, 0xafa, 0x7, 0x0, 0x80000001, 0x0, 0xff}, r6, 0x6, r4, 0x6549728a956302bc) setgroups(0x40000000000000dd, &(0x7f0000000400)=[0xee00]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setgroups(0x1, &(0x7f00000002c0)=[r7]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 774.472505ms ago: executing program 6 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028008001a00ffffffff06001900070900000500010004"], 0x4c}, 0x1, 0xba01}, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25008009600", @ANYRES32=r2, @ANYBLOB="59007a80080064da3d1dde9acb053fe599990007a15700", @ANYRES32, @ANYBLOB="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB='\x00\x00'], 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x552355c2) r4 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x2, 0x4, 0x80, 0xf, 0x0, 0x7, 0xa0000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x7, @perf_config_ext={0x4, 0x9}, 0x10, 0xb1f, 0x80000001, 0x5, 0x5, 0xecab, 0x9fb, 0x0, 0xf0}, r4, 0xf, r1, 0x0) 732.236567ms ago: executing program 1 (id=3864): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x0) 645.02201ms ago: executing program 1 (id=3865): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$RTC_PIE_ON(r0, 0x7005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = dup2(r0, r4) read$watch_queue(r5, &(0x7f0000001c80)=""/187, 0xbb) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/163, 0xa3, 0x0) 540.038493ms ago: executing program 1 (id=3866): set_mempolicy(0x4005, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$phonet(0x23, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x101, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x9, 0xa16ae, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8084, 0x9e, 0x400, 0x7, 0x477f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) ftruncate(r3, 0x7) splice(r3, 0x0, r2, 0x0, 0x3, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) tee(r1, r5, 0x3, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) 504.102744ms ago: executing program 6 (id=3867): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) 395.109248ms ago: executing program 6 (id=3868): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x100) close(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e06790000000008000000000000002f000000000008000200", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x4, 0x700000000000000, 0x0, 0x20048885}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2509000000050008000700000008000100010000000500070000000000bd61ef93cbd3bb98dbf63c5519b40b8a1075af293efd7df59f934316b126e604334b8c37bc2632dbc784f25978bdea10d8094c2f2834f4eb5c5c123348c82086f469d6c02f123b6c64f7873d634e014b779f8300d12cde0c43ee5bac696d085e970d5c35b8c393825a9f2e2f7b60652316a20c47007bab4aab052409cd80b89143e2"], 0x2c}}, 0x64000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x7, 0x20002fa}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r8 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x24048081) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r7, 0x6dcb, 0x7721, 0x7f, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) 367.062338ms ago: executing program 3 (id=3869): set_mempolicy(0x4005, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$phonet(0x23, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x101, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x9, 0xa16ae, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8084, 0x9e, 0x400, 0x7, 0x477f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) ftruncate(r3, 0x7) splice(r3, 0x0, r2, 0x0, 0x3, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) tee(r1, r5, 0x3, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, 0x0) sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) 0s ago: executing program 6 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x5, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendmsg$inet6(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000001c80)=ANY=[], 0x70}, 0x4048044) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010000000000000000000700", @ANYRES32], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3dd, &(0x7f0000000740)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x3, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "ece2a4dd0f32f8db994c94fc3c58463cca"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x180, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xf6, 0x6, "403b4c0b165de841b2942759d4a192387c5fbba8dcb5a9c97d4fff9d4f096bf5681181ce6dd88f9f98d9aad8d6c2a1019f156e9ebbaaa388cbe6e6485ae30353112b611f89866d09d12c30b144c7f962327790be431b667f647be30a638b4c9931afc2062c5af034a46d3bf3cec3d1895931a8927050794f95b7e0811b620100a4e52a68012778e601b141df3b7b0f3391fd097da4437d577202595f937836d667aa5994133304c7f9bd5cb3ac8b5eec64d1202bf92f5b2df8b228a296ac0ab536aa14942b309f8e88894b658f774ff4b3684136e1af9ac25e3647b5a5b05f8325303e3598f0b45e94e1ffe62ed4eb578498"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x65, 0x6, "23c605aa44b610487a988f5bef40a9e032dd88e0a34cf86ecc386e663d61972afe78bdec5887babd61fb2e4ad2d5dfce6cea81f1b9fd87c1956903cc3f83a24c3a75efc8173d081c09b9d1f6401ad771ec32daf6ce08d2831f8b18816cd1571116"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x218}, 0x1, 0x0, 0x0, 0x20000800}, 0x880) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t pid=15250 comm="syz.6.3379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 712.978678][ T28] audit: type=1326 audit(1781330567.629:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.6.3379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 713.006964][ T28] audit: type=1326 audit(1781330567.629:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.6.3379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 713.046359][T15246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.058956][T15246] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.061588][ T28] audit: type=1326 audit(1781330567.629:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.6.3379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 713.113702][T15265] loop1: detected capacity change from 0 to 2048 [ 713.130749][T15265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.134786][T15273] tipc: Enabling of bearer rejected, failed to enable media [ 713.145298][T15265] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3383: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 713.168444][T15265] EXT4-fs (loop1): Remounting filesystem read-only [ 713.371130][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.378648][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.472161][T15304] tipc: Enabling of bearer rejected, failed to enable media [ 715.538536][T15308] FAULT_INJECTION: forcing a failure. [ 715.538536][T15308] name failslab, interval 1, probability 0, space 0, times 0 [ 715.551641][T15308] CPU: 0 UID: 0 PID: 15308 Comm: syz.2.3390 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 715.551674][T15308] Tainted: [W]=WARN [ 715.551681][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.551806][T15308] Call Trace: [ 715.551814][T15308] [ 715.551824][T15308] __dump_stack+0x1d/0x30 [ 715.551849][T15308] dump_stack_lvl+0x95/0xd0 [ 715.551942][T15308] dump_stack+0x15/0x1b [ 715.551966][T15308] should_fail_ex+0x25e/0x270 [ 715.552004][T15308] should_failslab+0x8c/0xb0 [ 715.552095][T15308] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 715.552129][T15308] ? __alloc_skb+0x2d6/0x690 [ 715.552152][T15308] __alloc_skb+0x2d6/0x690 [ 715.552175][T15308] ? __alloc_skb+0x200/0x690 [ 715.552265][T15308] netlink_alloc_large_skb+0xbf/0xf0 [ 715.552292][T15308] netlink_sendmsg+0x40c/0x6f0 [ 715.552328][T15308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.552436][T15308] ____sys_sendmsg+0x532/0x580 [ 715.552496][T15308] ___sys_sendmsg+0x195/0x1e0 [ 715.552535][T15308] __x64_sys_sendmsg+0xd4/0x160 [ 715.552568][T15308] x64_sys_call+0x194c/0x3020 [ 715.552592][T15308] do_syscall_64+0x136/0x3c0 [ 715.552702][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.552732][T15308] RIP: 0033:0x7fa3f992ce59 [ 715.552826][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.552851][T15308] RSP: 002b:00007fa3f8387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.552883][T15308] RAX: ffffffffffffffda RBX: 00007fa3f9ba5fa0 RCX: 00007fa3f992ce59 [ 715.552902][T15308] RDX: 0000000020044010 RSI: 0000200000000000 RDI: 0000000000000003 [ 715.552920][T15308] RBP: 00007fa3f8387090 R08: 0000000000000000 R09: 0000000000000000 [ 715.552936][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.552979][T15308] R13: 00007fa3f9ba6038 R14: 00007fa3f9ba5fa0 R15: 00007ffc1243b278 [ 715.553004][T15308] [ 715.752684][T15309] random: crng reseeded on system resumption [ 715.792203][T15313] loop2: detected capacity change from 0 to 136 [ 715.804018][T15313] Attempt to read inode for relocated directory [ 715.820496][T15313] sch_fq: defrate 2 ignored. [ 715.918874][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 715.918892][ T28] audit: type=1400 audit(1781330570.905:5071): avc: denied { ioctl } for pid=15324 comm="syz.3.3404" path="socket:[43959]" dev="sockfs" ino=43959 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 716.086786][ T28] audit: type=1326 audit(1781330571.083:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.138170][ T28] audit: type=1326 audit(1781330571.083:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.164222][ T28] audit: type=1326 audit(1781330571.083:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.190046][ T28] audit: type=1326 audit(1781330571.083:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.219394][T15335] loop6: detected capacity change from 0 to 136 [ 716.227213][ T28] audit: type=1326 audit(1781330571.083:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.253055][ T28] audit: type=1326 audit(1781330571.125:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.308003][ T28] audit: type=1326 audit(1781330571.125:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.354989][ T28] audit: type=1326 audit(1781330571.125:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.393157][T15335] Attempt to read inode for relocated directory [ 716.413952][ T28] audit: type=1326 audit(1781330571.083:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.6.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 716.443294][T15335] sch_fq: defrate 2 ignored. [ 716.472231][T15340] loop3: detected capacity change from 0 to 512 [ 716.548748][T15340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.621479][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.293433][T15348] tipc: Enabling of bearer rejected, failed to enable media [ 717.438906][T15352] loop6: detected capacity change from 0 to 128 [ 717.453973][T15350] loop2: detected capacity change from 0 to 2048 [ 717.479159][T15352] vfat: Unknown parameter '' [ 717.619869][T15350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.633929][T15350] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3411: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 717.650593][T15350] EXT4-fs (loop2): Remounting filesystem read-only [ 717.947984][T15373] loop5: detected capacity change from 0 to 512 [ 717.958202][T15373] journal_path: Lookup failure for './bus/file0' [ 717.985800][T15373] EXT4-fs: error: could not find journal device path [ 718.227520][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.357490][T15383] loop3: detected capacity change from 0 to 2048 [ 718.368204][T15381] netlink: 'syz.6.3423': attribute type 9 has an invalid length. [ 718.399147][T15389] loop5: detected capacity change from 0 to 136 [ 718.405888][T15389] iso9660: Unknown parameter '' [ 718.468404][T15395] bond1: option ad_user_port_key: invalid value (2311) [ 718.471268][T15383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.475654][T15395] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 718.496447][T15395] bond1 (unregistering): Released all slaves [ 718.516079][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.622861][T15402] netlink: 'syz.6.3428': attribute type 1 has an invalid length. [ 718.638689][T15402] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3428'. [ 718.680282][T15395] netlink: 'syz.6.3428': attribute type 3 has an invalid length. [ 718.688298][T15395] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3428'. [ 719.647705][T11130] usb usb8-port1: attempt power cycle [ 720.834317][T15428] loop3: detected capacity change from 0 to 136 [ 720.842373][T15428] iso9660: Unknown parameter '' [ 721.215025][T15435] loop6: detected capacity change from 0 to 512 [ 721.246112][T15435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.300101][T15435] ext2: Unknown parameter 'nouser_xattr' [ 721.345664][T15431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.389920][T15431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.431164][ T28] kauditd_printk_skb: 647 callbacks suppressed [ 721.431183][ T28] audit: type=1326 audit(1781330576.690:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.2.3442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x0 [ 721.572393][T15445] loop2: detected capacity change from 0 to 136 [ 721.610452][T15445] iso9660: Unknown parameter '' [ 721.740348][ T28] audit: type=1326 audit(1781330577.026:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 721.855510][ T28] audit: type=1326 audit(1781330577.057:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 721.900734][ T28] audit: type=1326 audit(1781330577.057:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 721.968143][ T28] audit: type=1326 audit(1781330577.057:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 721.972256][T15455] loop5: detected capacity change from 0 to 136 [ 722.006266][ T28] audit: type=1326 audit(1781330577.057:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 722.031975][ T28] audit: type=1326 audit(1781330577.057:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 722.057866][ T28] audit: type=1326 audit(1781330577.057:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 722.126899][ T28] audit: type=1326 audit(1781330577.057:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 722.168381][T11130] usb usb8-port1: unable to enumerate USB device [ 722.572629][ T28] audit: type=1326 audit(1781330577.057:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.2.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 722.725015][T15470] loop1: detected capacity change from 0 to 256 [ 722.804164][T15455] Attempt to read inode for relocated directory [ 722.813486][T15455] sch_fq: defrate 2 ignored. [ 722.829314][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3456'. [ 722.894920][T15477] netlink: 'syz.1.3455': attribute type 5 has an invalid length. [ 723.869432][T15496] rdma_rxe: rxe_newlink: failed to add syz_tun [ 723.894585][T15500] loop1: detected capacity change from 0 to 512 [ 723.907044][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3462'. [ 724.042135][T15500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.088457][T15500] ext2: Unknown parameter 'nouser_xattr' [ 725.156754][T15506] loop5: detected capacity change from 0 to 256 [ 725.796082][T15506] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 726.118626][T15514] loop5: detected capacity change from 0 to 4096 [ 726.168142][T15514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.385772][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 726.385848][ T28] audit: type=1400 audit(1781330581.887:5771): avc: denied { write } for pid=15513 comm="syz.5.3470" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.671416][ T28] audit: type=1400 audit(1781330582.191:5772): avc: denied { mounton } for pid=15513 comm="syz.5.3470" path="/586/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 726.743015][T15532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3474'. [ 726.792445][T15532] loop3: detected capacity change from 0 to 128 [ 726.822993][T15532] vfat: Unknown parameter '' [ 726.931554][ T28] audit: type=1400 audit(1781330582.475:5773): avc: denied { write } for pid=6201 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.956835][ T28] audit: type=1400 audit(1781330582.475:5774): avc: denied { rmdir } for pid=6201 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.983253][ T6201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.016402][ T28] audit: type=1400 audit(1781330582.496:5775): avc: denied { write } for pid=6201 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.045440][ T28] audit: type=1400 audit(1781330582.496:5776): avc: denied { write } for pid=6201 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.068369][ T28] audit: type=1400 audit(1781330582.496:5777): avc: denied { unlink } for pid=6201 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 727.097513][ T28] audit: type=1400 audit(1781330582.496:5778): avc: denied { write } for pid=6201 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.121978][ T28] audit: type=1400 audit(1781330582.496:5779): avc: denied { write } for pid=6201 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.184369][ T28] audit: type=1400 audit(1781330582.496:5780): avc: denied { write } for pid=6201 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.412488][T15544] loop3: detected capacity change from 0 to 512 [ 727.438271][T15544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.051157][T15555] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3482'. [ 728.459939][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3485'. [ 728.481254][T15556] loop6: detected capacity change from 0 to 512 [ 728.609828][T15573] loop2: detected capacity change from 0 to 256 [ 728.625471][T15573] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 728.685126][T15556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 728.693491][T15556] ext2: Unknown parameter 'nouser_xattr' [ 729.038875][T15578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3487'. [ 729.107590][T15572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 729.114249][T15572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 729.300565][T15572] vhci_hcd vhci_hcd.0: Device attached [ 729.401138][T15577] loop5: detected capacity change from 0 to 128 [ 729.403673][T15579] vhci_hcd: connection closed [ 729.435590][T15577] vfat: Unknown parameter '' [ 729.458735][ T6542] vhci_hcd vhci_hcd.1: stop threads [ 729.464000][ T6542] vhci_hcd vhci_hcd.1: release socket [ 729.469408][ T6542] vhci_hcd vhci_hcd.1: disconnect device [ 729.479978][T15583] loop2: detected capacity change from 0 to 2048 [ 729.731108][T15583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.032808][T15593] loop6: detected capacity change from 0 to 512 [ 730.074089][T15593] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 730.090084][T15593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 730.108660][T15593] System zones: 1-12 [ 730.112966][T15593] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3492: bad orphan inode 131072 [ 730.123556][T15593] loop6: lost filesystem error report for type 5 error -117 [ 730.124730][T15593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.165218][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.215807][T15583] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3488: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 730.243523][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.254348][T15583] EXT4-fs (loop2): Remounting filesystem read-only [ 731.022055][T15609] loop6: detected capacity change from 0 to 256 [ 731.072748][T15609] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 731.090582][T15610] loop3: detected capacity change from 0 to 136 [ 731.146421][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.174817][T15610] Attempt to read inode for relocated directory [ 731.215474][T15610] sch_fq: defrate 2 ignored. [ 731.303231][T15612] loop1: detected capacity change from 0 to 2048 [ 731.313147][T15616] loop2: detected capacity change from 0 to 136 [ 731.319750][T15616] iso9660: Unknown parameter '' [ 731.429518][T15612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.445210][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3501'. [ 731.456642][T15612] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3497: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 731.475359][T15624] loop2: detected capacity change from 0 to 128 [ 731.482010][T15624] vfat: Unknown parameter '' [ 731.491448][T15612] EXT4-fs (loop1): Remounting filesystem read-only [ 731.530914][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 731.530933][ T28] audit: type=1400 audit(1781330587.305:5831): avc: denied { write } for pid=15611 comm="syz.1.3497" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 731.577477][T15626] bond1: option ad_user_port_key: invalid value (2311) [ 731.584390][T15626] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 731.593263][T15626] bond1 (unregistering): Released all slaves [ 731.634164][T15630] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 731.642266][T15630] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3502'. [ 731.693575][T15630] netlink: 'syz.2.3502': attribute type 3 has an invalid length. [ 731.701436][T15630] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3502'. [ 731.705378][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.725582][T15629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15629 comm=syz.5.3503 [ 731.935816][ T28] audit: type=1326 audit(1781330587.672:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 731.986271][ T28] audit: type=1326 audit(1781330587.672:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.014144][ T28] audit: type=1326 audit(1781330587.672:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.023379][T15646] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3508'. [ 732.053232][ T28] audit: type=1326 audit(1781330587.672:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.163736][ T28] audit: type=1326 audit(1781330587.672:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.189303][ T28] audit: type=1326 audit(1781330587.672:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.214884][ T28] audit: type=1326 audit(1781330587.672:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.392750][T15653] loop5: detected capacity change from 0 to 136 [ 732.418959][T15653] Attempt to read inode for relocated directory [ 732.427525][T15653] sch_fq: defrate 2 ignored. [ 732.536519][T15651] loop1: detected capacity change from 0 to 2048 [ 732.563504][ T28] audit: type=1326 audit(1781330587.672:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.589438][ T28] audit: type=1326 audit(1781330587.672:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.1.3507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679dfdce59 code=0x7ffc0000 [ 732.864293][T15657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3512'. [ 733.081307][T15664] loop6: detected capacity change from 0 to 512 [ 733.170705][T15651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.257647][T15651] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3509: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 733.281527][T15657] loop5: detected capacity change from 0 to 128 [ 733.294676][T15657] vfat: Unknown parameter '' [ 733.346107][T15651] EXT4-fs (loop1): Remounting filesystem read-only [ 733.374597][T15664] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 733.431795][T15664] EXT4-fs (loop6): group descriptors corrupted! [ 733.606789][T15663] nfs: Bad value for 'fsc' [ 734.164740][T15670] macsec0: entered promiscuous mode [ 734.194415][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.241279][T15672] bond1: option ad_user_port_key: invalid value (2311) [ 734.254850][T15672] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 734.293367][T15672] bond1 (unregistering): Released all slaves [ 734.321550][T15674] netlink: 'syz.6.3516': attribute type 1 has an invalid length. [ 734.329648][T15674] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3516'. [ 734.350053][T15670] loop5: detected capacity change from 0 to 256 [ 734.360387][T15676] EXT4-fs: Ignoring removed bh option [ 734.365904][T15676] EXT4-fs: Ignoring removed oldalloc option [ 734.387477][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.397637][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.407792][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.418141][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.428344][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.438471][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.448613][T15670] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.511562][T15674] netlink: 'syz.6.3516': attribute type 3 has an invalid length. [ 734.520544][T15674] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3516'. [ 734.532061][T15676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.597697][T15683] random: crng reseeded on system resumption [ 734.603875][T15669] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.627772][T15676] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3517'. [ 734.639894][T15669] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.663945][T15669] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.848958][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.997828][ T3589] usb usb8-port1: attempt power cycle [ 735.066202][T15669] macsec0: left promiscuous mode [ 735.153324][T15694] Attempt to read inode for relocated directory [ 735.184102][T15694] sch_fq: defrate 2 ignored. [ 735.258845][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 735.271274][T15703] vfat: Unknown parameter '' [ 735.363048][T15707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.390376][T15707] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3527: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 735.407297][T15707] EXT4-fs (loop1): Remounting filesystem read-only [ 735.480348][T15710] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 735.496156][T15710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.558478][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.981220][T15719] random: crng reseeded on system resumption [ 735.991250][T15716] bond1: option ad_user_port_key: invalid value (2311) [ 736.011894][T15716] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 736.033618][T15716] bond1 (unregistering): Released all slaves [ 736.180191][T15720] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 736.202496][T15720] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3529'. [ 737.153199][T15720] netlink: 'syz.1.3529': attribute type 3 has an invalid length. [ 737.172262][T15720] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3529'. [ 737.535221][ T6201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.545071][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3533'. [ 737.569469][T15732] rdma_rxe: rxe_newlink: failed to add syz_tun [ 737.581580][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 737.581596][ T28] audit: type=1326 audit(1781330593.657:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.652574][ T28] audit: type=1326 audit(1781330593.699:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.680073][ T28] audit: type=1326 audit(1781330593.699:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.747451][T15744] set_capacity_and_notify: 5 callbacks suppressed [ 737.747476][T15744] loop6: detected capacity change from 0 to 136 [ 737.767308][T15744] Attempt to read inode for relocated directory [ 737.792624][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3536'. [ 737.803466][T15744] sch_fq: defrate 2 ignored. [ 737.813124][ T28] audit: type=1326 audit(1781330593.699:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.889405][T15746] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(1) [ 737.895986][T15746] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 737.904425][ T28] audit: type=1326 audit(1781330593.699:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.939481][T15746] vhci_hcd vhci_hcd.0: Device attached [ 737.947255][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3538'. [ 737.969204][ T28] audit: type=1326 audit(1781330593.699:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 737.999086][ T28] audit: type=1326 audit(1781330593.699:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 738.050577][ T28] audit: type=1326 audit(1781330593.699:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 738.079533][ T28] audit: type=1326 audit(1781330593.699:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 738.105725][ T28] audit: type=1326 audit(1781330593.699:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.5.3532" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fb537ce59 code=0x7ffc0000 [ 738.131467][T15753] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(1) [ 738.138013][T15753] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 738.146764][T15753] vhci_hcd vhci_hcd.0: Device attached [ 738.197410][ T3420] usb 12-1: SetAddress Request (14) to port 0 [ 738.203567][ T3420] usb 12-1: new SuperSpeed USB device number 14 using vhci_hcd [ 738.407205][ T9310] usb 14-1: SetAddress Request (6) to port 0 [ 738.413369][ T9310] usb 14-1: new SuperSpeed USB device number 6 using vhci_hcd [ 738.522389][T15750] vhci_hcd: connection reset by peer [ 738.527979][ T3589] usb usb8-port1: unable to enumerate USB device [ 738.659733][ T2116] vhci_hcd vhci_hcd.5: stop threads [ 738.665561][ T2116] vhci_hcd vhci_hcd.5: release socket [ 738.678090][ T2116] vhci_hcd vhci_hcd.5: disconnect device [ 738.694020][T15770] bond1: option ad_user_port_key: invalid value (2311) [ 738.701375][T15770] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 738.713228][T15770] bond1 (unregistering): Released all slaves [ 738.856544][T15779] loop5: detected capacity change from 0 to 1024 [ 738.866093][T15779] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 738.887656][T15779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.010874][T15770] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 739.052323][T15755] vhci_hcd: connection reset by peer [ 739.109380][T15770] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3543'. [ 739.154742][T10112] vhci_hcd vhci_hcd.6: stop threads [ 739.188605][T10112] vhci_hcd vhci_hcd.6: release socket [ 739.234289][T10112] vhci_hcd vhci_hcd.6: disconnect device [ 739.530122][T15785] loop6: detected capacity change from 0 to 136 [ 739.538023][T15790] loop2: detected capacity change from 0 to 512 [ 739.558482][T15770] netlink: 'syz.3.3543': attribute type 3 has an invalid length. [ 739.581918][T15790] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 739.591830][T15785] Attempt to read inode for relocated directory [ 739.623032][T15770] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3543'. [ 739.633663][T15785] sch_fq: defrate 2 ignored. [ 739.641501][T15790] EXT4-fs (loop2): 1 truncate cleaned up [ 739.662835][T15790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.738300][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3551'. [ 739.762211][T15790] geneve1: entered promiscuous mode [ 739.887853][T15799] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.3549: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 739.908233][T15790] geneve1: left promiscuous mode [ 740.560266][ T6201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.681352][T15805] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 740.688017][T15805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.839151][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.886015][T15805] vhci_hcd vhci_hcd.0: Device attached [ 740.931927][T15808] vhci_hcd: connection closed [ 740.932194][ T12] vhci_hcd vhci_hcd.1: stop threads [ 740.964668][ T12] vhci_hcd vhci_hcd.1: release socket [ 740.991098][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 741.017895][T15822] loop3: detected capacity change from 0 to 2048 [ 741.029850][T15823] FAULT_INJECTION: forcing a failure. [ 741.029850][T15823] name failslab, interval 1, probability 0, space 0, times 0 [ 741.042799][T15823] CPU: 0 UID: 0 PID: 15823 Comm: syz.2.3555 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 741.042830][T15823] Tainted: [W]=WARN [ 741.042838][T15823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.042852][T15823] Call Trace: [ 741.042893][T15823] [ 741.042903][T15823] __dump_stack+0x1d/0x30 [ 741.042985][T15823] dump_stack_lvl+0x95/0xd0 [ 741.043011][T15823] dump_stack+0x15/0x1b [ 741.043036][T15823] should_fail_ex+0x25e/0x270 [ 741.043071][T15823] should_failslab+0x8c/0xb0 [ 741.043136][T15823] kmem_cache_alloc_noprof+0x66/0x3f0 [ 741.043170][T15823] ? security_file_alloc+0x32/0xf0 [ 741.043196][T15823] security_file_alloc+0x32/0xf0 [ 741.043224][T15823] init_file+0x5b/0x1b0 [ 741.043252][T15823] alloc_empty_file+0x85/0x1e0 [ 741.043282][T15823] path_openat+0x64/0x2020 [ 741.043313][T15823] ? _parse_integer_limit+0x170/0x190 [ 741.043386][T15823] ? _parse_integer+0x27/0x40 [ 741.043425][T15823] ? kstrtoull+0x111/0x140 [ 741.043461][T15823] ? kstrtouint+0x76/0xc0 [ 741.043543][T15823] do_file_open+0x16c/0x290 [ 741.043579][T15823] do_sys_openat2+0x94/0x130 [ 741.043619][T15823] __x64_sys_openat+0xf2/0x120 [ 741.043643][T15823] x64_sys_call+0x1e39/0x3020 [ 741.043673][T15823] do_syscall_64+0x136/0x3c0 [ 741.043714][T15823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.043771][T15823] RIP: 0033:0x7fa3f992ce59 [ 741.043787][T15823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.043815][T15823] RSP: 002b:00007fa3f8366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 741.043887][T15823] RAX: ffffffffffffffda RBX: 00007fa3f9ba6090 RCX: 00007fa3f992ce59 [ 741.043924][T15823] RDX: 0000000000028000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 741.043958][T15823] RBP: 00007fa3f8366090 R08: 0000000000000000 R09: 0000000000000000 [ 741.043976][T15823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.043993][T15823] R13: 00007fa3f9ba6128 R14: 00007fa3f9ba6090 R15: 00007ffc1243b278 [ 741.044058][T15823] [ 741.508623][T15822] loop3: p1 p2 p3 [ 741.512767][T15822] loop3: p1 size 16777216 extends beyond EOD, truncated [ 741.521068][T15822] loop3: p2 size 458752 extends beyond EOD, truncated [ 741.529963][T15822] loop3: p3 start 3036741376 is beyond EOD, truncated [ 741.602853][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.610311][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.618104][T15815] bridge_slave_0: entered allmulticast mode [ 741.624896][T15815] bridge_slave_0: entered promiscuous mode [ 741.631966][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.639116][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.646365][T15815] bridge_slave_1: entered allmulticast mode [ 741.653052][T15815] bridge_slave_1: entered promiscuous mode [ 741.678460][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.689234][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.709657][T15815] team0: Port device team_slave_0 added [ 741.716590][T15815] team0: Port device team_slave_1 added [ 741.737100][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.744289][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.772524][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.783924][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.791540][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.831628][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.853666][T15835] loop1: detected capacity change from 0 to 512 [ 741.869140][T15844] loop2: detected capacity change from 0 to 512 [ 741.886996][T15815] hsr_slave_0: entered promiscuous mode [ 741.896034][T15815] hsr_slave_1: entered promiscuous mode [ 741.905182][T15844] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 741.916241][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 741.922173][T15815] Cannot create hsr debugfs directory [ 741.932871][T15844] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 741.937663][T15835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.957966][T15835] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.981617][T15835] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.3557: Directory hole found for htree leaf block 0 [ 742.012441][T15844] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 742.023503][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.218212][T15854] loop1: detected capacity change from 0 to 136 [ 742.234505][T15854] Attempt to read inode for relocated directory [ 742.526290][T15856] loop3: detected capacity change from 0 to 512 [ 742.553236][T15854] sch_fq: defrate 2 ignored. [ 742.797936][ T3365] usb usb8-port1: attempt power cycle [ 742.854977][T15856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.877366][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 742.877392][ T28] audit: type=1400 audit(1781330599.200:5948): avc: denied { write } for pid=15849 comm="syz.3.3561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.942863][T15860] bond1: option ad_user_port_key: invalid value (2311) [ 743.091557][ T3420] usb 12-1: device descriptor read/8, error -110 [ 743.100311][T15860] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 743.110914][T15867] netlink: 'syz.1.3563': attribute type 1 has an invalid length. [ 743.114209][T15860] bond1 (unregistering): Released all slaves [ 743.118688][T15867] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3563'. [ 743.165261][T15867] netlink: 'syz.1.3563': attribute type 3 has an invalid length. [ 743.173181][T15867] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3563'. [ 743.435095][ T3420] usb 12-1: new SuperSpeed USB device number 14 using vhci_hcd [ 743.447096][ T9310] usb 14-1: device descriptor read/8, error -110 [ 743.542680][ T9310] usb 14-1: new SuperSpeed USB device number 6 using vhci_hcd [ 743.550464][ T3420] usb 12-1: enqueue for inactive port 0 [ 743.586809][T15856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.606685][ T3420] usb 12-1: enqueue for inactive port 0 [ 743.641911][ T9310] usb 14-1: enqueue for inactive port 0 [ 743.668426][ T3420] usb 12-1: enqueue for inactive port 0 [ 743.694057][ T9310] usb 14-1: enqueue for inactive port 0 [ 743.895919][T15815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 743.912054][ T9310] usb 14-1: enqueue for inactive port 0 [ 744.035404][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.054810][T15815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 744.075431][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.536175][T15873] loop1: detected capacity change from 0 to 1024 [ 744.966286][T15873] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 744.994096][T15873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.154435][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'. [ 745.337751][T15882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 745.344310][T15882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 745.357431][T15815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 745.371048][T15882] vhci_hcd vhci_hcd.0: Device attached [ 745.374685][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.387906][T15815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 745.398314][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.488082][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.511171][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.531058][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.538328][T10112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.562944][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.570112][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.626719][ T11] usb 6-1: SetAddress Request (8) to port 0 [ 745.632785][ T11] usb 6-1: new SuperSpeed USB device number 8 using vhci_hcd [ 745.751193][ T3420] usb usb12-port1: attempt power cycle [ 745.797362][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.817371][ T9310] usb usb14-port1: attempt power cycle [ 745.823185][ T3365] usb usb8-port1: unable to enumerate USB device [ 745.832761][T15804] hub 8-0:1.0: USB hub found [ 745.837592][T15804] hub 8-0:1.0: 8 ports detected [ 745.904416][T15883] vhci_hcd: connection reset by peer [ 745.915835][ T68] vhci_hcd vhci_hcd.2: stop threads [ 745.931998][ T68] vhci_hcd vhci_hcd.2: release socket [ 745.943238][T15902] FAULT_INJECTION: forcing a failure. [ 745.943238][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.974979][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 746.020340][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.6.3567 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 746.020384][T15902] Tainted: [W]=WARN [ 746.020393][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.020484][T15902] Call Trace: [ 746.020493][T15902] [ 746.020504][T15902] __dump_stack+0x1d/0x30 [ 746.020534][T15902] dump_stack_lvl+0x95/0xd0 [ 746.020605][T15902] dump_stack+0x15/0x1b [ 746.020695][T15902] should_fail_ex+0x25e/0x270 [ 746.020741][T15902] should_fail+0xb/0x20 [ 746.020764][T15902] should_fail_usercopy+0x1a/0x20 [ 746.020792][T15902] _copy_from_user+0x1c/0xb0 [ 746.020900][T15902] sctp_getsockopt_encap_port+0x76/0x390 [ 746.020938][T15902] sctp_getsockopt+0x99c/0xaa0 [ 746.020996][T15902] sock_common_getsockopt+0x60/0x70 [ 746.021037][T15902] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 746.021092][T15902] do_sock_getsockopt+0x2f5/0x570 [ 746.021123][T15902] ? vfs_write+0x844/0x9b0 [ 746.021156][T15902] __x64_sys_getsockopt+0x11d/0x1a0 [ 746.021189][T15902] x64_sys_call+0x2dcf/0x3020 [ 746.021287][T15902] do_syscall_64+0x136/0x3c0 [ 746.021328][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.021358][T15902] RIP: 0033:0x7fcbb6f2ce59 [ 746.021395][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.021429][T15902] RSP: 002b:00007fcbb597f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 746.021455][T15902] RAX: ffffffffffffffda RBX: 00007fcbb71a5fa0 RCX: 00007fcbb6f2ce59 [ 746.021518][T15902] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 746.021537][T15902] RBP: 00007fcbb597f090 R08: 0000200000000480 R09: 0000000000000000 [ 746.021550][T15902] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 746.021566][T15902] R13: 00007fcbb71a6038 R14: 00007fcbb71a5fa0 R15: 00007ffdcdf81e28 [ 746.021592][T15902] [ 746.398501][ T28] audit: type=1326 audit(1781330602.896:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.424292][ T28] audit: type=1326 audit(1781330602.896:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.499214][ T28] audit: type=1326 audit(1781330602.896:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.526815][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.528020][ T28] audit: type=1326 audit(1781330602.896:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.561615][ T28] audit: type=1326 audit(1781330602.906:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.590543][ T28] audit: type=1326 audit(1781330602.906:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.621405][ T28] audit: type=1326 audit(1781330602.906:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.672449][ T28] audit: type=1326 audit(1781330602.906:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.695778][T15917] loop1: detected capacity change from 0 to 136 [ 746.708867][T15919] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3573'. [ 746.753250][T15917] Attempt to read inode for relocated directory [ 746.759378][ T28] audit: type=1326 audit(1781330602.906:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.6.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 746.786349][T15917] sch_fq: defrate 2 ignored. [ 746.922500][T15933] xt_l2tp: missing protocol rule (udp|l2tpip) [ 746.938037][T15815] veth0_vlan: entered promiscuous mode [ 746.964649][T15815] veth1_vlan: entered promiscuous mode [ 746.984469][T15815] veth0_macvtap: entered promiscuous mode [ 747.000502][T15936] loop6: detected capacity change from 0 to 1024 [ 747.003393][T15815] veth1_macvtap: entered promiscuous mode [ 747.024238][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.036234][T15936] EXT4-fs (loop6): invalid inodes per group: 0 [ 747.036234][T15936] [ 747.063038][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.081846][T10443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.100815][T10443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.129111][T10443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.140229][T10443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.222524][T15945] ip6t_srh: unknown srh match flags 5800 [ 747.292050][T15947] random: crng reseeded on system resumption [ 747.589040][T15956] loop1: detected capacity change from 0 to 1024 [ 747.613716][T15956] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 747.725788][T15956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.818203][ T9310] usb usb14-port1: unable to enumerate USB device [ 747.824793][ T3365] usb usb8-port1: attempt power cycle [ 747.846340][ T3420] usb usb12-port1: unable to enumerate USB device [ 748.412557][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3582'. [ 748.481603][T15964] loop5: detected capacity change from 0 to 256 [ 748.493548][T15962] loop2: detected capacity change from 0 to 136 [ 748.542534][T15964] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 748.563716][T15962] Attempt to read inode for relocated directory [ 748.591128][T15962] sch_fq: defrate 2 ignored. [ 748.777900][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3585'. [ 748.907336][T15969] loop6: detected capacity change from 0 to 512 [ 748.961156][T15969] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 748.989840][T15969] EXT4-fs (loop6): 1 orphan inode deleted [ 748.995621][T15969] EXT4-fs (loop6): 1 truncate cleaned up [ 749.001883][T15969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.899770][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.025148][ T11] usb 6-1: device descriptor read/8, error -110 [ 751.137534][T15992] random: crng reseeded on system resumption [ 751.173857][T15990] loop6: detected capacity change from 0 to 512 [ 751.193107][T15990] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 751.220521][T15994] netlink: 'syz.5.3593': attribute type 8 has an invalid length. [ 751.239866][T15990] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 751.249479][T15994] sch_fq: defrate 0 ignored. [ 751.312942][T15990] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 751.333899][T15998] loop5: detected capacity change from 0 to 512 [ 751.381651][T15998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.452674][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.466534][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 751.466550][ T28] audit: type=1400 audit(1781330608.229:5970): avc: denied { write } for pid=15993 comm="syz.5.3593" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.978067][ T3365] usb usb8-port1: unable to enumerate USB device [ 751.984548][ T11] usb 6-1: new SuperSpeed USB device number 8 using vhci_hcd [ 752.008497][ T11] usb 6-1: enqueue for inactive port 0 [ 752.014020][ T11] usb 6-1: enqueue for inactive port 0 [ 752.022693][ T11] usb 6-1: enqueue for inactive port 0 [ 752.165747][T16002] rdma_rxe: rxe_newlink: failed to add syz_tun [ 752.173409][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 752.216406][T16005] loop3: detected capacity change from 0 to 256 [ 752.225887][T16005] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 752.685830][T16011] loop2: detected capacity change from 0 to 512 [ 752.694320][T16011] EXT4-fs: Ignoring removed bh option [ 752.706787][T16011] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 752.733441][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.744997][T16011] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3597: corrupted in-inode xattr: e_value size too large [ 752.760937][T16011] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 752.761138][T16011] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3597: couldn't read orphan inode 15 (err -117) [ 752.770379][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 752.770405][ C0] EXT4-fs (loop2): initial error at time 1781330609: ext4_iget_extra_inode:5128: inode 15 [ 752.770436][ C0] EXT4-fs (loop2): last error at time 1781330609: ext4_iget_extra_inode:5128: inode 15 [ 752.818955][T16011] loop2: lost filesystem error report for type 5 error -117 [ 752.819660][T16011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.875042][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3600'. [ 752.906270][T16019] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(1) [ 752.912913][T16019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.921691][T16019] vhci_hcd vhci_hcd.0: Device attached [ 752.943784][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3597'. [ 752.959508][T16020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3601'. [ 752.994853][T16026] loop6: detected capacity change from 0 to 256 [ 753.190566][ T3402] usb 8-1: SetAddress Request (106) to port 0 [ 753.196739][ T3402] usb 8-1: new SuperSpeed USB device number 106 using vhci_hcd [ 753.764001][T16021] vhci_hcd: connection reset by peer [ 753.774765][ T314] vhci_hcd vhci_hcd.3: stop threads [ 753.906565][ T314] vhci_hcd vhci_hcd.3: release socket [ 753.965460][ T314] vhci_hcd vhci_hcd.3: disconnect device [ 754.002735][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.092979][T16036] loop6: detected capacity change from 0 to 136 [ 754.116037][T16040] random: crng reseeded on system resumption [ 754.124065][T16036] iso9660: Unknown parameter '' [ 754.181579][ T11] usb usb6-port1: attempt power cycle [ 754.339521][T16042] loop6: detected capacity change from 0 to 1024 [ 754.366009][T16042] EXT4-fs: Ignoring removed bh option [ 754.570841][T16042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.594921][ T28] audit: type=1400 audit(1781330611.516:5971): avc: denied { write } for pid=16041 comm="syz.6.3608" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.801242][T16056] loop2: detected capacity change from 0 to 2048 [ 754.838552][T16056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.301721][T16064] loop5: detected capacity change from 0 to 256 [ 755.325011][T16064] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 755.380645][T16068] loop1: detected capacity change from 0 to 512 [ 755.401060][T16068] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 755.416631][T16069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'. [ 755.417154][T16068] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 755.461156][T16068] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 755.578194][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.687439][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3616'. [ 755.791617][T16056] Set syz1 is full, maxelem 65536 reached [ 755.877679][T16078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 755.884333][T16078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.014343][T16078] vhci_hcd vhci_hcd.0: Device attached [ 756.033485][T16077] loop5: detected capacity change from 0 to 2048 [ 756.097620][T16079] vhci_hcd: connection closed [ 756.102926][ T2116] vhci_hcd vhci_hcd.3: stop threads [ 756.112906][ T2116] vhci_hcd vhci_hcd.3: release socket [ 756.118637][ T2116] vhci_hcd vhci_hcd.3: disconnect device [ 756.224683][T16077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.339624][T16089] loop1: detected capacity change from 0 to 136 [ 756.346689][T16077] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3615: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 756.350314][T16089] iso9660: Unknown parameter '' [ 756.363322][ T28] audit: type=1400 audit(1781330613.363:5972): avc: denied { write } for pid=16073 comm="syz.5.3615" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 756.388536][T16077] EXT4-fs (loop5): Remounting filesystem read-only [ 756.420275][T16091] rdma_rxe: rxe_newlink: failed to add syz_tun [ 756.427683][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3619'. [ 756.504318][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.755728][ T3420] IPVS: starting estimator thread 0... [ 756.894273][T16100] IPVS: using max 2208 ests per chain, 110400 per kthread [ 757.119560][T16102] random: crng reseeded on system resumption [ 757.155685][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.444637][T16110] loop5: detected capacity change from 0 to 256 [ 757.463566][T16110] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 757.658375][T16116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 758.046733][ T3402] usb 8-1: device descriptor read/8, error -110 [ 758.160935][ T3402] usb 8-1: new SuperSpeed USB device number 106 using vhci_hcd [ 758.190917][ T3402] usb 8-1: enqueue for inactive port 0 [ 758.198476][ T3402] usb 8-1: enqueue for inactive port 0 [ 758.205139][ T11] usb usb6-port1: unable to enumerate USB device [ 758.206169][ T3402] usb 8-1: enqueue for inactive port 0 [ 758.330922][T16120] loop3: detected capacity change from 0 to 512 [ 758.349399][T16120] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 758.368679][T16120] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 758.399228][T16120] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 758.453419][T16124] tipc: Enabling of bearer rejected, failed to enable media [ 759.466062][T16140] bond1: option ad_user_port_key: invalid value (2311) [ 759.472980][T16140] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 759.481404][T16140] bond1 (unregistering): Released all slaves [ 759.584757][T16140] netlink: 'syz.6.3633': attribute type 1 has an invalid length. [ 759.714070][T16140] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3633'. [ 759.904187][ T3402] usb usb8-port1: attempt power cycle [ 760.139447][T16159] random: crng reseeded on system resumption [ 761.037196][ T28] audit: type=1400 audit(1781330618.277:5973): avc: denied { write } for pid=16165 comm="syz.5.3640" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 762.329407][T16175] loop5: detected capacity change from 0 to 256 [ 762.338603][T16175] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.296006][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3642'. [ 763.895704][T16198] loop5: detected capacity change from 0 to 512 [ 764.124278][T16198] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 764.154576][T16198] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 764.239567][T16198] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 764.254249][T16205] loop6: detected capacity change from 0 to 2048 [ 764.279368][T16205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.645721][T16214] IPv6: NLM_F_REPLACE set, but no existing node found! [ 764.730913][T16217] random: crng reseeded on system resumption [ 764.958671][ T3402] usb usb8-port1: unable to enumerate USB device [ 765.966503][T16235] loop1: detected capacity change from 0 to 256 [ 765.990651][T16235] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 767.293430][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.146141][T16243] loop5: detected capacity change from 0 to 512 [ 768.165641][T16243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 768.202356][T16243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 768.210324][T16243] System zones: 1-12 [ 768.214360][T16243] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3660: bad orphan inode 131072 [ 768.224756][T16243] loop5: lost filesystem error report for type 5 error -117 [ 768.231561][T16250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3658'. [ 768.257582][T16243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.283104][ T28] audit: type=1400 audit(1781330625.878:5974): avc: denied { write } for pid=16242 comm="syz.5.3660" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 768.361728][T16257] loop3: detected capacity change from 0 to 512 [ 768.370455][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.372341][T16258] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3663'. [ 768.384566][T16257] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 768.412903][T16257] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 768.434349][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 768.446977][T16260] loop6: detected capacity change from 0 to 136 [ 768.469801][T16257] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 768.481158][T16260] Attempt to read inode for relocated directory [ 768.488996][T16260] sch_fq: defrate 2 ignored. [ 768.540029][T16262] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(1) [ 768.546695][T16262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 768.554816][T16262] vhci_hcd vhci_hcd.0: Device attached [ 768.623201][T16270] tipc: Enabling of bearer rejected, failed to enable media [ 768.661210][ T28] audit: type=1326 audit(1781330626.288:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.689683][ T28] audit: type=1326 audit(1781330626.288:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.737573][ T28] audit: type=1326 audit(1781330626.288:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.765098][ T28] audit: type=1326 audit(1781330626.288:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.811639][ T28] audit: type=1326 audit(1781330626.288:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.837307][ T28] audit: type=1326 audit(1781330626.351:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f992ce59 code=0x7ffc0000 [ 768.862897][ T28] audit: type=1326 audit(1781330626.351:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3f992cbc2 code=0x7ffc0000 [ 768.888237][ T28] audit: type=1326 audit(1781330626.351:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa3f992cc57 code=0x7ffc0000 [ 768.918648][ T28] audit: type=1326 audit(1781330626.351:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.2.3669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa3f98e9b51 code=0x7ffc0000 [ 769.012121][T16275] loop2: detected capacity change from 0 to 512 [ 769.025987][T16275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 769.036964][T16275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 769.046037][T16275] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 769.244747][T16283] loop1: detected capacity change from 0 to 512 [ 769.252891][T16275] EXT4-fs (loop2): failed to initialize system zone (-117) [ 769.262864][T16275] EXT4-fs (loop2): mount failed [ 769.276186][T16283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 769.287103][T16283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 769.295690][T16283] System zones: 1-12 [ 769.341856][T16283] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3670: bad orphan inode 131072 [ 769.352455][T16283] loop1: lost filesystem error report for type 5 error -117 [ 769.372778][T16283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.386129][T16265] vhci_hcd: connection closed [ 769.413123][ T12] vhci_hcd vhci_hcd.5: stop threads [ 769.466705][ T3402] usb 12-1: SetAddress Request (18) to port 0 [ 769.507062][ T3402] usb 12-1: new SuperSpeed USB device number 18 using vhci_hcd [ 769.551932][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.562856][T16290] loop3: detected capacity change from 0 to 136 [ 769.603049][T16290] iso9660: Unknown parameter '' [ 769.749939][ T12] vhci_hcd vhci_hcd.5: release socket [ 769.756114][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 770.059151][T16303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3676'. [ 770.524947][T16309] loop1: detected capacity change from 0 to 128 [ 770.532058][T16309] vfat: Unknown parameter '' [ 770.623703][T16316] loop5: detected capacity change from 0 to 136 [ 770.639353][T16316] iso9660: Unknown parameter '' [ 771.144513][T16324] loop6: detected capacity change from 0 to 512 [ 771.157649][T16324] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 771.166818][T16324] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 771.219754][T16327] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(1) [ 771.226322][T16327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.234643][T16327] vhci_hcd vhci_hcd.0: Device attached [ 771.268054][T16324] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 771.270292][T16328] loop5: detected capacity change from 0 to 2048 [ 771.339815][T16341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 771.366270][T16328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.415616][T16344] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3686'. [ 771.427132][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 771.445885][T16328] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3684: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 771.462844][T16328] EXT4-fs (loop5): Remounting filesystem read-only [ 771.474001][T16347] loop3: detected capacity change from 0 to 2048 [ 771.505906][T16347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.519372][T16347] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.531553][T16347] FAULT_INJECTION: forcing a failure. [ 771.531553][T16347] name failslab, interval 1, probability 0, space 0, times 0 [ 771.544763][T16347] CPU: 1 UID: 0 PID: 16347 Comm: syz.3.3688 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 771.544815][T16347] Tainted: [W]=WARN [ 771.544823][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.544836][T16347] Call Trace: [ 771.544844][T16347] [ 771.544855][T16347] __dump_stack+0x1d/0x30 [ 771.544887][T16347] dump_stack_lvl+0x95/0xd0 [ 771.544915][T16347] dump_stack+0x15/0x1b [ 771.544952][T16347] should_fail_ex+0x25e/0x270 [ 771.544987][T16347] should_failslab+0x8c/0xb0 [ 771.545057][T16347] kmem_cache_alloc_noprof+0x66/0x3f0 [ 771.545092][T16347] ? alloc_empty_file+0x70/0x1e0 [ 771.545120][T16347] alloc_empty_file+0x70/0x1e0 [ 771.545207][T16347] path_openat+0x64/0x2020 [ 771.545244][T16347] ? _parse_integer_limit+0x170/0x190 [ 771.545288][T16347] ? _parse_integer+0x27/0x40 [ 771.545324][T16347] ? kstrtoull+0x111/0x140 [ 771.545353][T16347] ? kstrtouint+0x76/0xc0 [ 771.545400][T16347] do_file_open+0x16c/0x290 [ 771.545475][T16347] do_sys_openat2+0x94/0x130 [ 771.545509][T16347] __x64_sys_openat+0xf2/0x120 [ 771.545536][T16347] x64_sys_call+0x1e39/0x3020 [ 771.545665][T16347] do_syscall_64+0x136/0x3c0 [ 771.545732][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.545821][T16347] RIP: 0033:0x7f5cb41cce59 [ 771.545842][T16347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.545867][T16347] RSP: 002b:00007f5cb2c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.545892][T16347] RAX: ffffffffffffffda RBX: 00007f5cb4445fa0 RCX: 00007f5cb41cce59 [ 771.545906][T16347] RDX: 00000000001a9741 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 771.545921][T16347] RBP: 00007f5cb2c27090 R08: 0000000000000000 R09: 0000000000000000 [ 771.545938][T16347] R10: 0000000000000160 R11: 0000000000000246 R12: 0000000000000001 [ 771.545955][T16347] R13: 00007f5cb4446038 R14: 00007f5cb4445fa0 R15: 00007ffd6cc62d68 [ 771.546052][T16347] [ 771.791450][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.002657][T16336] vhci_hcd: connection closed [ 772.003175][ T314] vhci_hcd vhci_hcd.1: stop threads [ 772.017473][ T314] vhci_hcd vhci_hcd.1: release socket [ 772.023774][ T314] vhci_hcd vhci_hcd.1: disconnect device [ 772.086967][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.099644][T16360] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3691'. [ 772.116529][T16363] bond1: option ad_user_port_key: invalid value (2311) [ 772.124190][T16363] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 772.133679][T16363] bond1 (unregistering): Released all slaves [ 772.160697][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 772.171883][T16366] netlink: 'syz.2.3692': attribute type 1 has an invalid length. [ 772.180418][T16366] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3692'. [ 772.367538][T16375] FAULT_INJECTION: forcing a failure. [ 772.367538][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 772.395284][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.3.3695 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 772.395326][T16375] Tainted: [W]=WARN [ 772.395333][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.395419][T16375] Call Trace: [ 772.395428][T16375] [ 772.395439][T16375] __dump_stack+0x1d/0x30 [ 772.395467][T16375] dump_stack_lvl+0x95/0xd0 [ 772.395495][T16375] dump_stack+0x15/0x1b [ 772.395528][T16375] should_fail_ex+0x25e/0x270 [ 772.395565][T16375] should_failslab+0x8c/0xb0 [ 772.395605][T16375] kmem_cache_alloc_noprof+0x66/0x3f0 [ 772.395692][T16375] ? skb_clone+0x151/0x1f0 [ 772.395726][T16375] skb_clone+0x151/0x1f0 [ 772.395751][T16375] __netlink_deliver_tap+0x2be/0x510 [ 772.395789][T16375] netlink_unicast+0x654/0x680 [ 772.395823][T16375] netlink_sendmsg+0x5be/0x6f0 [ 772.395859][T16375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.395898][T16375] ____sys_sendmsg+0x532/0x580 [ 772.395977][T16375] ___sys_sendmsg+0x195/0x1e0 [ 772.396108][T16375] __x64_sys_sendmsg+0xd4/0x160 [ 772.396147][T16375] x64_sys_call+0x194c/0x3020 [ 772.396198][T16375] do_syscall_64+0x136/0x3c0 [ 772.396232][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.396258][T16375] RIP: 0033:0x7f5cb41cce59 [ 772.396279][T16375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.396303][T16375] RSP: 002b:00007f5cb2c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.396365][T16375] RAX: ffffffffffffffda RBX: 00007f5cb4445fa0 RCX: 00007f5cb41cce59 [ 772.396444][T16375] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 772.396459][T16375] RBP: 00007f5cb2c27090 R08: 0000000000000000 R09: 0000000000000000 [ 772.396479][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.396496][T16375] R13: 00007f5cb4446038 R14: 00007f5cb4445fa0 R15: 00007ffd6cc62d68 [ 772.396526][T16375] [ 773.265330][T16388] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(1) [ 773.271906][T16388] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 773.909445][T16388] vhci_hcd vhci_hcd.0: Device attached [ 774.193633][T16390] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(1) [ 774.200200][T16390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 774.221868][T16398] __nla_validate_parse: 1 callbacks suppressed [ 774.221895][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3702'. [ 774.247346][T16390] vhci_hcd vhci_hcd.0: Device attached [ 774.419918][ T3402] usb 12-1: device descriptor read/8, error -110 [ 774.521509][T16402] loop2: detected capacity change from 0 to 512 [ 774.533953][ T3402] usb 12-1: new SuperSpeed USB device number 18 using vhci_hcd [ 774.540860][T16402] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 774.550036][T16402] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 774.718040][ T11] usb 8-1: SetAddress Request (110) to port 0 [ 774.727114][ T11] usb 8-1: new SuperSpeed USB device number 110 using vhci_hcd [ 774.749808][T16402] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 774.772387][T16407] loop5: detected capacity change from 0 to 1024 [ 774.782679][T16407] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 774.802153][T16407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.848072][ T3505] usb 14-1: SetAddress Request (10) to port 0 [ 774.854362][ T3505] usb 14-1: new SuperSpeed USB device number 10 using vhci_hcd [ 775.034457][T16391] vhci_hcd: connection reset by peer [ 775.042970][T10112] vhci_hcd vhci_hcd.3: stop threads [ 775.048803][T10112] vhci_hcd vhci_hcd.3: release socket [ 775.062462][T10112] vhci_hcd vhci_hcd.3: disconnect device [ 775.093223][T16412] loop3: detected capacity change from 0 to 136 [ 775.116331][T16412] Attempt to read inode for relocated directory [ 775.128601][T16395] vhci_hcd: connection reset by peer [ 775.138892][T10112] vhci_hcd vhci_hcd.6: stop threads [ 775.155280][T16412] sch_fq: defrate 2 ignored. [ 775.162329][T10112] vhci_hcd vhci_hcd.6: release socket [ 775.181047][T10112] vhci_hcd vhci_hcd.6: disconnect device [ 775.479325][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.497000][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 775.497014][ T28] audit: type=1326 audit(1781330633.469:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 775.501110][ T3402] usb 12-1: enqueue for inactive port 0 [ 775.534534][ T3402] usb 12-1: enqueue for inactive port 0 [ 775.540213][ T3402] usb 12-1: enqueue for inactive port 0 [ 775.649769][ T28] audit: type=1326 audit(1781330633.469:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 775.688443][ T28] audit: type=1326 audit(1781330633.490:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 775.704971][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3709'. [ 775.872709][T16426] batman_adv: batadv0: Adding interface: dummy0 [ 775.917155][T16426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.427392][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 776.458260][T16426] batman_adv: batadv0: Interface activated: dummy0 [ 776.496353][ T28] audit: type=1326 audit(1781330633.490:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.521902][ T28] audit: type=1326 audit(1781330633.490:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.547626][ T28] audit: type=1326 audit(1781330633.490:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.614899][ T28] audit: type=1326 audit(1781330633.501:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.643103][ T28] audit: type=1326 audit(1781330633.501:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.674695][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3713'. [ 776.724384][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3713'. [ 776.736301][T16437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3713'. [ 776.745970][ T28] audit: type=1326 audit(1781330633.669:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 776.799720][ T28] audit: type=1326 audit(1781330633.753:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.6.3707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb6f2ce59 code=0x7ffc0000 [ 777.344832][ T3402] usb usb12-port1: attempt power cycle [ 777.966788][T16447] lo speed is unknown, defaulting to 1000 [ 777.982207][T16447] lo speed is unknown, defaulting to 1000 [ 777.998066][T16447] lo speed is unknown, defaulting to 1000 [ 778.057391][T16459] random: crng reseeded on system resumption [ 778.081576][T16447] infiniband sz1: set active [ 778.086490][ T3589] lo speed is unknown, defaulting to 1000 [ 778.093140][T16447] infiniband sz1: added lo [ 778.099051][T16447] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 778.099240][T16447] infiniband sz1: Couldn't open port 1 [ 778.126603][T16447] RDS/IB: sz1: added [ 778.137393][T16447] smc: adding ib device sz1 with port count 1 [ 778.146325][T16447] smc: ib device sz1 port 1 has no pnetid [ 778.155266][T16447] lo speed is unknown, defaulting to 1000 [ 778.167979][ T3589] lo speed is unknown, defaulting to 1000 [ 778.243261][T16447] lo speed is unknown, defaulting to 1000 [ 778.314045][T16447] lo speed is unknown, defaulting to 1000 [ 778.383189][T16471] batadv1: entered promiscuous mode [ 778.388470][T16471] batadv1: entered allmulticast mode [ 778.438899][T16447] lo speed is unknown, defaulting to 1000 [ 778.479032][T16468] loop2: detected capacity change from 0 to 512 [ 778.513331][T16464] lo speed is unknown, defaulting to 1000 [ 778.526937][T16468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.539583][T16468] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.550955][T16468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.583898][T16447] lo speed is unknown, defaulting to 1000 [ 778.621942][T16479] loop6: detected capacity change from 0 to 512 [ 778.646603][T16479] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 778.665155][T16479] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 778.688400][T16447] lo speed is unknown, defaulting to 1000 [ 778.698524][T16479] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 778.903269][T16493] loop1: detected capacity change from 0 to 136 [ 778.965878][T16493] iso9660: Unknown parameter '' [ 779.211198][ T3402] usb usb12-port1: unable to enumerate USB device [ 779.417665][T16499] loop3: detected capacity change from 0 to 512 [ 779.442938][T16499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 779.458991][T16503] loop5: detected capacity change from 0 to 512 [ 779.470864][T16503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 779.544308][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3730'. [ 779.553511][ T11] usb 8-1: device descriptor read/8, error -110 [ 779.652436][T16499] EXT4-fs (loop3): 1 orphan inode deleted [ 779.658421][T16499] EXT4-fs (loop3): 1 truncate cleaned up [ 779.665449][T16499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.682317][T16503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 779.690335][T16503] System zones: 1-12 [ 779.694835][T16503] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3731: bad orphan inode 131072 [ 779.705386][T16503] loop5: lost filesystem error report for type 5 error -117 [ 779.744746][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 779.758791][ C0] EXT4-fs (loop5): initial error at time 1781330637: ext4_orphan_get:1423 [ 779.767361][ C0] EXT4-fs (loop5): last error at time 1781330637: ext4_orphan_get:1423 [ 779.853246][ T11] usb 8-1: new SuperSpeed USB device number 110 using vhci_hcd [ 779.868887][ T3505] usb 14-1: device descriptor read/8, error -110 [ 779.993463][ T3505] usb 14-1: new SuperSpeed USB device number 10 using vhci_hcd [ 780.001899][ T11] usb 8-1: enqueue for inactive port 0 [ 780.007422][ T11] usb 8-1: enqueue for inactive port 0 [ 780.013605][ T11] usb 8-1: enqueue for inactive port 0 [ 780.093187][ T3505] usb 14-1: enqueue for inactive port 0 [ 780.106169][ T3505] usb 14-1: enqueue for inactive port 0 [ 780.173526][ T3505] usb 14-1: enqueue for inactive port 0 [ 780.198922][T16503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.219469][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.288091][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.314179][T16522] random: crng reseeded on system resumption [ 780.359290][T16524] rdma_rxe: rxe_newlink: failed to add lo [ 780.444386][T16526] loop5: detected capacity change from 0 to 512 [ 780.554969][T16526] veth0_vlan: entered allmulticast mode [ 780.565106][T16535] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3738'. [ 780.584350][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3735'. [ 780.610140][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 780.680915][T16526] veth0_vlan (unregistering): left allmulticast mode [ 780.837862][T16540] loop6: detected capacity change from 0 to 136 [ 780.846633][T16540] iso9660: Unknown parameter '' [ 780.924255][T16545] loop6: detected capacity change from 0 to 136 [ 780.977389][T16545] Attempt to read inode for relocated directory [ 780.997969][T16545] sch_fq: defrate 2 ignored. [ 781.002848][T16547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 781.125319][ T3505] usb usb14-port1: attempt power cycle [ 781.131393][ T11] usb usb8-port1: attempt power cycle [ 781.214133][T16549] lo speed is unknown, defaulting to 1000 [ 781.300222][T16555] loop5: detected capacity change from 0 to 512 [ 781.356870][T16555] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 781.370380][T16555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 781.378337][T16555] System zones: 1-12 [ 781.390145][T16555] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3746: bad orphan inode 131072 [ 781.400551][T16555] loop5: lost filesystem error report for type 5 error -117 [ 781.402069][T16565] rdma_rxe: rxe_newlink: failed to add lo [ 781.415190][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 781.415214][ C1] EXT4-fs (loop5): initial error at time 1781330639: ext4_orphan_get:1423 [ 781.415239][ C1] EXT4-fs (loop5): last error at time 1781330639: ext4_orphan_get:1423 [ 781.443656][T16555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.460665][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.463749][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 781.463801][ T28] audit: type=1400 audit(1781330639.727:6335): avc: denied { write } for pid=16554 comm="syz.5.3746" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 781.477613][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.508951][T16565] syz_tun: entered allmulticast mode [ 781.516921][T16564] syz_tun: left allmulticast mode [ 781.540336][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.580497][T16570] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(1) [ 781.587108][T16570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 781.595364][T16570] vhci_hcd vhci_hcd.0: Device attached [ 781.608975][T16573] loop6: detected capacity change from 0 to 512 [ 781.617131][T16567] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3750'. [ 781.631966][T16573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.650279][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 781.685087][T16578] loop2: detected capacity change from 0 to 512 [ 781.702050][T16578] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 781.717578][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.734646][T16578] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3753: corrupted in-inode xattr: e_value size too large [ 781.754273][T16578] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 781.754439][T16578] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3753: couldn't read orphan inode 15 (err -117) [ 781.764634][T16580] loop3: detected capacity change from 0 to 136 [ 781.782133][T16578] loop2: lost filesystem error report for type 5 error -117 [ 781.783873][T16578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.810419][T16580] iso9660: Unknown parameter '' [ 781.833200][T16583] loop6: detected capacity change from 0 to 136 [ 781.864720][T16583] Attempt to read inode for relocated directory [ 781.878685][ T3381] usb 12-1: SetAddress Request (22) to port 0 [ 781.884839][ T3381] usb 12-1: new SuperSpeed USB device number 22 using vhci_hcd [ 781.894488][T16578] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3753: corrupted in-inode xattr: e_value size too large [ 781.912779][T16583] sch_fq: defrate 2 ignored. [ 781.934443][T16578] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3753: corrupted in-inode xattr: e_value size too large [ 782.044919][T16590] FAULT_INJECTION: forcing a failure. [ 782.044919][T16590] name failslab, interval 1, probability 0, space 0, times 0 [ 782.100323][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.3.3757 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 782.100367][T16590] Tainted: [W]=WARN [ 782.100376][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 782.100391][T16590] Call Trace: [ 782.100400][T16590] [ 782.100411][T16590] __dump_stack+0x1d/0x30 [ 782.100443][T16590] dump_stack_lvl+0x95/0xd0 [ 782.100528][T16590] dump_stack+0x15/0x1b [ 782.100552][T16590] should_fail_ex+0x25e/0x270 [ 782.100588][T16590] should_failslab+0x8c/0xb0 [ 782.100625][T16590] kmem_cache_alloc_noprof+0x66/0x3f0 [ 782.100716][T16590] ? skb_clone+0x151/0x1f0 [ 782.100749][T16590] skb_clone+0x151/0x1f0 [ 782.100774][T16590] __netlink_deliver_tap+0x2be/0x510 [ 782.100906][T16590] netlink_unicast+0x654/0x680 [ 782.100975][T16590] netlink_sendmsg+0x5be/0x6f0 [ 782.101012][T16590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.101052][T16590] ____sys_sendmsg+0x532/0x580 [ 782.101160][T16590] ___sys_sendmsg+0x195/0x1e0 [ 782.101204][T16590] __x64_sys_sendmsg+0xd4/0x160 [ 782.101283][T16590] x64_sys_call+0x194c/0x3020 [ 782.101315][T16590] do_syscall_64+0x136/0x3c0 [ 782.101399][T16590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.101429][T16590] RIP: 0033:0x7f5cb41cce59 [ 782.101450][T16590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.101476][T16590] RSP: 002b:00007f5cb2c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.101503][T16590] RAX: ffffffffffffffda RBX: 00007f5cb4445fa0 RCX: 00007f5cb41cce59 [ 782.101582][T16590] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 782.101600][T16590] RBP: 00007f5cb2c27090 R08: 0000000000000000 R09: 0000000000000000 [ 782.101632][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.101644][T16590] R13: 00007f5cb4446038 R14: 00007f5cb4445fa0 R15: 00007ffd6cc62d68 [ 782.101663][T16590] [ 782.333999][T16571] vhci_hcd: connection reset by peer [ 782.353750][ T68] vhci_hcd vhci_hcd.5: stop threads [ 782.359147][ T68] vhci_hcd vhci_hcd.5: release socket [ 782.365369][ T68] vhci_hcd vhci_hcd.5: disconnect device [ 782.440658][T16596] rdma_rxe: rxe_newlink: failed to add syz_tun [ 782.461083][T16606] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 782.484431][T16606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 782.539817][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3759'. [ 782.605732][T16606] System zones: 1-12 [ 782.610028][T16606] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3761: bad orphan inode 131072 [ 782.620468][T16606] loop5: lost filesystem error report for type 5 error -117 [ 782.621870][T16606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.663461][ T28] audit: type=1400 audit(1781330640.955:6336): avc: denied { write } for pid=16599 comm="syz.5.3761" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 782.720543][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.024809][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.141674][T16617] vfat: Unknown parameter '' [ 783.199990][ T3505] usb usb14-port1: unable to enumerate USB device [ 783.207076][ T11] usb usb8-port1: unable to enumerate USB device [ 783.373993][T16622] iso9660: Unknown parameter '' [ 784.458558][T16625] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3766: bg 0: block 104: invalid block bitmap [ 784.480081][T16639] rdma_rxe: rxe_newlink: failed to add lo [ 784.579660][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.599665][T16625] loop5: lost filesystem error report for type 5 error -117 [ 784.601218][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 784.615067][ C0] EXT4-fs (loop5): initial error at time 1781330643: ext4_validate_block_bitmap:432 [ 784.624504][ C0] EXT4-fs (loop5): last error at time 1781330643: ext4_validate_block_bitmap:432 [ 784.635119][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.644785][T16625] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 784.655279][T16639] syz_tun: entered allmulticast mode [ 784.660905][T16625] loop5: lost filesystem error report for type 5 error -117 [ 784.672684][T16636] syz_tun: left allmulticast mode [ 784.686119][T16625] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3766: invalid indirect mapped block 1 (level 1) [ 784.699315][T16625] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 784.719240][T16625] EXT4-fs (loop5): 1 truncate cleaned up [ 784.734494][T16625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.753871][T16646] set_capacity_and_notify: 4 callbacks suppressed [ 784.753886][T16646] loop2: detected capacity change from 0 to 136 [ 784.777058][T16625] xt_hashlimit: size too large, truncated to 1048576 [ 784.783772][T16625] xt_hashlimit: overflow, try lower: 3/0 [ 784.813439][T16646] iso9660: Unknown parameter '' [ 784.921888][T16649] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(1) [ 784.928504][T16649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 784.944668][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.959303][T16652] loop2: detected capacity change from 0 to 512 [ 784.968240][T16649] vhci_hcd vhci_hcd.0: Device attached [ 785.008168][T16652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 785.033368][T16652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 785.044543][T16652] System zones: 1-12 [ 785.048682][T16652] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3773: bad orphan inode 131072 [ 785.059190][ T9310] usb 8-1: SetAddress Request (114) to port 0 [ 785.065659][ T9310] usb 8-1: new SuperSpeed USB device number 114 using vhci_hcd [ 785.073733][T16652] loop2: lost filesystem error report for type 5 error -117 [ 785.074477][T16652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.115309][ T28] audit: type=1400 audit(1781330643.559:6337): avc: denied { write } for pid=16651 comm="syz.2.3773" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 785.151991][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.323745][T16668] loop2: detected capacity change from 0 to 136 [ 785.333430][T16668] iso9660: Unknown parameter '' [ 785.386050][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3778'. [ 785.692721][T16653] vhci_hcd: connection reset by peer [ 785.698715][ T68] vhci_hcd vhci_hcd.3: stop threads [ 785.704038][ T68] vhci_hcd vhci_hcd.3: release socket [ 785.709635][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 786.331501][T16690] FAULT_INJECTION: forcing a failure. [ 786.331501][T16690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 786.366229][T16690] CPU: 0 UID: 0 PID: 16690 Comm: syz.3.3784 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 786.366273][T16690] Tainted: [W]=WARN [ 786.366283][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.366300][T16690] Call Trace: [ 786.366309][T16690] [ 786.366318][T16690] __dump_stack+0x1d/0x30 [ 786.366436][T16690] dump_stack_lvl+0x95/0xd0 [ 786.366463][T16690] dump_stack+0x15/0x1b [ 786.366553][T16690] should_fail_ex+0x25e/0x270 [ 786.366595][T16690] should_fail_alloc_page+0xf2/0x100 [ 786.366703][T16690] __alloc_frozen_pages_noprof+0x108/0x350 [ 786.366730][T16690] alloc_pages_mpol+0xa9/0x1d0 [ 786.366758][T16690] folio_alloc_mpol_noprof+0x39/0x80 [ 786.366838][T16690] shmem_get_folio_gfp+0x405/0xdc0 [ 786.366892][T16690] shmem_fault+0xf6/0x250 [ 786.366920][T16690] ? __pfx_shmem_fault+0x10/0x10 [ 786.366949][T16690] handle_mm_fault+0x19a3/0x2da0 [ 786.367049][T16690] do_user_addr_fault+0x402/0x1060 [ 786.367159][T16690] exc_page_fault+0x62/0xa0 [ 786.367193][T16690] asm_exc_page_fault+0x26/0x30 [ 786.367214][T16690] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 786.367237][T16690] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 786.367266][T16690] RSP: 0018:ffffc90005e3bd50 EFLAGS: 00050246 [ 786.367285][T16690] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 786.367298][T16690] RDX: 0000000000000000 RSI: ffffc90005e3bd90 RDI: 0000200000019680 [ 786.367311][T16690] RBP: 0000000000000000 R08: 0000000000000673 R09: 0000000000000000 [ 786.367324][T16690] R10: 0001c90005e3bd90 R11: 0001c90005e3bd97 R12: 0000200000019688 [ 786.367386][T16690] R13: 00007ffffffff000 R14: 0000200000019680 R15: ffffc90005e3bd90 [ 786.367407][T16690] _copy_to_user+0x7c/0xa0 [ 786.367458][T16690] msr_read+0xc9/0x160 [ 786.367483][T16690] ? __pfx_msr_read+0x10/0x10 [ 786.367507][T16690] vfs_read+0x18e/0x7c0 [ 786.367598][T16690] ? __rcu_read_unlock+0x4e/0x70 [ 786.367618][T16690] ? __fget_files+0x184/0x1c0 [ 786.367640][T16690] ksys_read+0xdc/0x1a0 [ 786.367677][T16690] __x64_sys_read+0x40/0x50 [ 786.367758][T16690] x64_sys_call+0x2886/0x3020 [ 786.367791][T16690] do_syscall_64+0x136/0x3c0 [ 786.367921][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.367949][T16690] RIP: 0033:0x7f5cb41cce59 [ 786.367965][T16690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.367996][T16690] RSP: 002b:00007f5cb2c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.368014][T16690] RAX: ffffffffffffffda RBX: 00007f5cb4445fa0 RCX: 00007f5cb41cce59 [ 786.368030][T16690] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 786.368054][T16690] RBP: 00007f5cb2c27090 R08: 0000000000000000 R09: 0000000000000000 [ 786.368067][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.368078][T16690] R13: 00007f5cb4446038 R14: 00007f5cb4445fa0 R15: 00007ffd6cc62d68 [ 786.368175][T16690] [ 787.105431][ T3381] usb 12-1: device descriptor read/8, error -110 [ 787.158369][T16697] loop5: detected capacity change from 0 to 256 [ 787.187904][T16699] loop3: detected capacity change from 0 to 512 [ 787.192628][ T3381] usb 12-1: new SuperSpeed USB device number 22 using vhci_hcd [ 787.219324][T16697] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.231266][T16699] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 787.240060][ T3381] usb 12-1: enqueue for inactive port 0 [ 787.240304][T16699] EXT4-fs (loop3): couldn't read superblock of external journal [ 787.245737][ T3381] usb 12-1: enqueue for inactive port 0 [ 787.259039][ T3381] usb 12-1: enqueue for inactive port 0 [ 787.613170][T16701] rdma_rxe: rxe_newlink: failed to add lo [ 787.644413][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.653977][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.670453][T16701] syz_tun: entered allmulticast mode [ 787.678273][T16700] syz_tun: left allmulticast mode [ 788.132005][T16703] lo speed is unknown, defaulting to 1000 [ 788.273702][T16708] loop2: detected capacity change from 0 to 512 [ 788.282862][T16708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 788.302603][T16708] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 788.346089][ T3381] usb usb12-port1: attempt power cycle [ 788.360628][T16708] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 788.793563][T16717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 788.800259][T16717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 789.016533][T16717] vhci_hcd vhci_hcd.0: Device attached [ 789.133006][T16718] vhci_hcd: connection closed [ 789.134552][ T314] vhci_hcd vhci_hcd.3: stop threads [ 789.144917][ T314] vhci_hcd vhci_hcd.3: release socket [ 789.150465][ T314] vhci_hcd vhci_hcd.3: disconnect device [ 789.237631][T16721] loop2: detected capacity change from 0 to 136 [ 789.266186][T16721] Attempt to read inode for relocated directory [ 789.274747][T16721] sch_fq: defrate 2 ignored. [ 789.635262][T16734] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3796'. [ 789.671200][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'. [ 789.887574][ T9310] usb 8-1: device descriptor read/8, error -110 [ 790.011228][ T9310] usb 8-1: new SuperSpeed USB device number 114 using vhci_hcd [ 790.049597][ T9310] usb 8-1: enqueue for inactive port 0 [ 790.095222][ T9310] usb 8-1: enqueue for inactive port 0 [ 790.142955][ T9310] usb 8-1: enqueue for inactive port 0 [ 790.564730][T16741] rdma_rxe: rxe_newlink: failed to add lo [ 790.590322][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.630037][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.646766][T16741] syz_tun: entered allmulticast mode [ 790.673638][T16740] syz_tun: left allmulticast mode [ 791.016218][T16743] loop6: detected capacity change from 0 to 512 [ 791.060658][T16745] lo speed is unknown, defaulting to 1000 [ 791.137892][ T3381] usb usb12-port1: unable to enumerate USB device [ 791.147583][T16743] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 791.167973][T16743] EXT4-fs (loop6): 1 orphan inode deleted [ 791.173847][T16743] EXT4-fs (loop6): 1 truncate cleaned up [ 791.180062][T16743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.206394][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.221571][T16745] loop5: detected capacity change from 0 to 512 [ 791.245334][ T9310] usb usb8-port1: attempt power cycle [ 791.296331][T16751] loop2: detected capacity change from 0 to 136 [ 791.322649][T16745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.344883][T16751] Attempt to read inode for relocated directory [ 791.353648][T16751] sch_fq: defrate 2 ignored. [ 791.404950][T15815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.422834][T16755] rdma_rxe: rxe_newlink: failed to add syz_tun [ 791.442138][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3804'. [ 791.564909][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3807'. [ 791.577630][T16761] loop6: detected capacity change from 0 to 512 [ 791.579151][T16763] FAULT_INJECTION: forcing a failure. [ 791.579151][T16763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.600670][T16761] EXT4-fs (loop6): orphan cleanup on readonly fs [ 791.607774][T16761] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3807: bad orphan inode 17 [ 791.635952][T16763] CPU: 1 UID: 0 PID: 16763 Comm: syz.3.3806 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 791.636014][T16763] Tainted: [W]=WARN [ 791.636056][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.636073][T16763] Call Trace: [ 791.636082][T16763] [ 791.636093][T16763] __dump_stack+0x1d/0x30 [ 791.636124][T16763] dump_stack_lvl+0x95/0xd0 [ 791.636156][T16763] dump_stack+0x15/0x1b [ 791.636182][T16763] should_fail_ex+0x25e/0x270 [ 791.636229][T16763] should_fail+0xb/0x20 [ 791.636251][T16763] should_fail_usercopy+0x1a/0x20 [ 791.636341][T16763] _copy_from_user+0x1c/0xb0 [ 791.636370][T16763] ___sys_sendmsg+0xc1/0x1e0 [ 791.636418][T16763] __sys_sendmmsg+0x185/0x320 [ 791.636499][T16763] __x64_sys_sendmmsg+0x57/0x70 [ 791.636530][T16763] x64_sys_call+0x27aa/0x3020 [ 791.636562][T16763] do_syscall_64+0x136/0x3c0 [ 791.636602][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.636683][T16763] RIP: 0033:0x7f5cb41cce59 [ 791.636700][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.636750][T16763] RSP: 002b:00007f5cb2c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 791.636777][T16763] RAX: ffffffffffffffda RBX: 00007f5cb4445fa0 RCX: 00007f5cb41cce59 [ 791.636805][T16763] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 791.636823][T16763] RBP: 00007f5cb2c27090 R08: 0000000000000000 R09: 0000000000000000 [ 791.636841][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.636853][T16763] R13: 00007f5cb4446038 R14: 00007f5cb4445fa0 R15: 00007ffd6cc62d68 [ 791.636952][T16763] [ 791.830322][T16761] loop6: lost filesystem error report for type 5 error -117 [ 791.830441][T16761] ext4_test_bit(bit=16, block=4) = 1 [ 791.844552][T16761] is_bad_inode(inode)=0 [ 791.849556][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 791.854403][T16761] NEXT_ORPHAN(inode)=0 [ 791.856038][ C1] EXT4-fs (loop6): initial error at time 1781330650: ext4_orphan_get:1423 [ 791.868708][ C1] EXT4-fs (loop6): last error at time 1781330650: ext4_orphan_get:1423 [ 791.869044][T16761] max_ino=32 [ 791.881446][T16761] i_nlink=1 [ 791.893573][T16761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 791.916925][T16771] loop3: detected capacity change from 0 to 512 [ 791.927933][T16771] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 791.939171][T16771] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 791.948071][T16768] loop5: detected capacity change from 0 to 128 [ 791.950116][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.987975][T16771] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 792.015007][T16768] vfat: Unknown parameter '' [ 792.078710][T16774] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(1) [ 792.085304][T16774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 792.093438][T16774] vhci_hcd vhci_hcd.0: Device attached [ 792.417615][T16783] loop5: detected capacity change from 0 to 256 [ 792.453336][T16783] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 792.786186][T16777] vhci_hcd: connection closed [ 792.788562][ T314] vhci_hcd vhci_hcd.6: stop threads [ 792.801080][T16785] loop3: detected capacity change from 0 to 512 [ 792.805306][ T314] vhci_hcd vhci_hcd.6: release socket [ 792.813156][T16785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 792.833374][T16789] loop6: detected capacity change from 0 to 136 [ 792.839496][ T314] vhci_hcd vhci_hcd.6: disconnect device [ 792.842850][T16785] EXT4-fs (loop3): 1 orphan inode deleted [ 792.851213][T16785] EXT4-fs (loop3): 1 truncate cleaned up [ 792.858247][T16789] Attempt to read inode for relocated directory [ 792.859124][T16789] sch_fq: defrate 2 ignored. [ 792.957092][T16785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.985518][T16791] rdma_rxe: rxe_newlink: failed to add lo [ 793.086988][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.096048][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.104606][T16788] syz_tun: entered allmulticast mode [ 793.124985][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.342543][T16786] syz_tun: left allmulticast mode [ 793.390133][T16793] lo speed is unknown, defaulting to 1000 [ 793.548394][ T9310] usb usb8-port1: unable to enumerate USB device [ 793.557023][T16638] hub 8-0:1.0: USB hub found [ 793.561751][T16638] hub 8-0:1.0: 8 ports detected [ 793.653923][T16801] loop6: detected capacity change from 0 to 512 [ 793.691824][T16801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.030124][T16808] vfat: Unknown parameter '' [ 794.266898][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.529317][T16822] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 794.578782][T16822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 794.624009][T16822] System zones: 1-12 [ 794.654388][T16825] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 794.669891][T16822] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3822: bad orphan inode 131072 [ 794.700736][T16825] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 794.710745][T16814] vfat: Unknown parameter '.' [ 794.719852][T16822] loop6: lost filesystem error report for type 5 error -117 [ 794.728341][T16822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.730297][T16828] rdma_rxe: rxe_newlink: failed to add syz_tun [ 794.769710][ T28] audit: type=1400 audit(1781330653.701:6338): avc: denied { write } for pid=16818 comm="syz.6.3822" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.784491][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3824'. [ 794.831314][T16825] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 794.846173][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.004283][T16834] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 796.374759][ T3505] usb usb8-port1: attempt power cycle [ 796.409302][T16834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.488127][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.497423][T16839] set_capacity_and_notify: 5 callbacks suppressed [ 796.497444][T16839] loop6: detected capacity change from 0 to 136 [ 796.582410][T16844] random: crng reseeded on system resumption [ 796.592544][T16839] Attempt to read inode for relocated directory [ 796.625449][T16839] sch_fq: defrate 2 ignored. [ 796.738665][T16849] rdma_rxe: rxe_newlink: failed to add lo [ 796.760553][T16849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.774337][T16849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.890638][T16849] syz_tun: entered allmulticast mode [ 796.980437][T16848] syz_tun: left allmulticast mode [ 797.599271][T16862] lo speed is unknown, defaulting to 1000 [ 797.619463][T16865] loop1: detected capacity change from 0 to 128 [ 797.627326][T16865] msdos: Unknown parameter 'fl{sh' [ 797.674977][T16867] FAULT_INJECTION: forcing a failure. [ 797.674977][T16867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.707238][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.6.3835 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 797.707299][T16867] Tainted: [W]=WARN [ 797.707366][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.707383][T16867] Call Trace: [ 797.707391][T16867] [ 797.707399][T16867] __dump_stack+0x1d/0x30 [ 797.707423][T16867] dump_stack_lvl+0x95/0xd0 [ 797.707491][T16867] dump_stack+0x15/0x1b [ 797.707509][T16867] should_fail_ex+0x25e/0x270 [ 797.707551][T16867] should_fail_alloc_page+0xf2/0x100 [ 797.707594][T16867] __alloc_frozen_pages_noprof+0x108/0x350 [ 797.707710][T16867] alloc_pages_mpol+0xa9/0x1d0 [ 797.707737][T16867] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 797.707772][T16867] handle_mm_fault+0x1022/0x2da0 [ 797.707816][T16867] do_user_addr_fault+0x402/0x1060 [ 797.707888][T16867] exc_page_fault+0x62/0xa0 [ 797.707921][T16867] asm_exc_page_fault+0x26/0x30 [ 797.707949][T16867] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 797.708088][T16867] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 797.708154][T16867] RSP: 0018:ffffc9000634bca8 EFLAGS: 00050202 [ 797.708256][T16867] RAX: ffff88810530be45 RBX: ffff88811a150006 RCX: 0000000000000002 [ 797.708276][T16867] RDX: 0000000000000000 RSI: ffff88811a150006 RDI: 0000200000000080 [ 797.708295][T16867] RBP: 0000200000000080 R08: 0000000000000601 R09: 0000000000000000 [ 797.708313][T16867] R10: 000188811a150006 R11: 000188811a150007 R12: 0000200000000082 [ 797.708332][T16867] R13: ffffc9000634be28 R14: 0000000000000002 R15: 00007ffffffff000 [ 797.708352][T16867] _copy_to_iter+0x141/0xea0 [ 797.708433][T16867] ? xt_mttg_seq_stop+0xb0/0xc0 [ 797.708470][T16867] ? traverse+0x385/0x3b0 [ 797.708497][T16867] seq_read_iter+0x1c5/0x8f0 [ 797.708524][T16867] ? avc_policy_seqno+0x15/0x30 [ 797.708648][T16867] ? selinux_file_permission+0x1dc/0x310 [ 797.708689][T16867] proc_reg_read_iter+0x110/0x180 [ 797.708796][T16867] vfs_read+0x699/0x7c0 [ 797.708890][T16867] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 797.708931][T16867] __x64_sys_pread64+0xfd/0x150 [ 797.708961][T16867] x64_sys_call+0x27b5/0x3020 [ 797.708992][T16867] do_syscall_64+0x136/0x3c0 [ 797.709034][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.709167][T16867] RIP: 0033:0x7fcbb6f2ce59 [ 797.709209][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.709231][T16867] RSP: 002b:00007fcbb597f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 797.709332][T16867] RAX: ffffffffffffffda RBX: 00007fcbb71a5fa0 RCX: 00007fcbb6f2ce59 [ 797.709351][T16867] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000003 [ 797.709366][T16867] RBP: 00007fcbb597f090 R08: 0000000000000000 R09: 0000000000000000 [ 797.709379][T16867] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 797.709460][T16867] R13: 00007fcbb71a6038 R14: 00007fcbb71a5fa0 R15: 00007ffdcdf81e28 [ 797.709486][T16867] [ 798.231129][ T3505] usb usb8-port1: unable to enumerate USB device [ 798.256525][T16873] loop5: detected capacity change from 0 to 1024 [ 798.281930][T16873] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 798.320095][T16876] loop6: detected capacity change from 0 to 136 [ 798.341280][T16876] Attempt to read inode for relocated directory [ 798.371370][T16876] sch_fq: defrate 2 ignored. [ 798.398978][T16885] random: crng reseeded on system resumption [ 798.424991][T16862] loop3: detected capacity change from 0 to 2048 [ 798.474657][T16890] usb usb7: usbfs: process 16890 (syz.1.3845) did not claim interface 0 before use [ 798.506749][T16862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.539079][T16890] tipc: Enabling of bearer rejected, failed to enable media [ 798.625842][T16901] program syz.6.3849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 798.635441][T16887] lo speed is unknown, defaulting to 1000 [ 798.713454][T16906] loop6: detected capacity change from 0 to 512 [ 798.748942][T16906] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 798.759450][T16906] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 798.821027][T16906] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 798.833376][T16888] loop2: detected capacity change from 0 to 2048 [ 798.998411][T16919] loop5: detected capacity change from 0 to 256 [ 799.002575][T16912] veth4: entered allmulticast mode [ 799.106973][T16912] veth5: entered promiscuous mode [ 799.149018][T16912] veth5: entered allmulticast mode [ 799.248773][T16919] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 799.355209][T16888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.615788][T16915] lo speed is unknown, defaulting to 1000 [ 799.799584][T16933] loop6: detected capacity change from 0 to 136 [ 799.810444][T16933] Attempt to read inode for relocated directory [ 799.825272][T16933] sch_fq: defrate 2 ignored. [ 799.866453][T16862] Set syz1 is full, maxelem 65536 reached [ 799.927920][T16938] random: crng reseeded on system resumption [ 800.235936][T16949] bond1: option ad_user_port_key: invalid value (2311) [ 800.267429][T16949] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 800.285669][T16888] Set syz1 is full, maxelem 65536 reached [ 800.295072][T16954] netlink: 'syz.6.3863': attribute type 1 has an invalid length. [ 800.303807][T16954] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3863'. [ 800.381210][T16949] bond1 (unregistering): Released all slaves [ 800.513023][T16958] lo speed is unknown, defaulting to 1000 [ 800.586560][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.604603][T16963] loop6: detected capacity change from 0 to 512 [ 800.689928][T16963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 800.707612][T16963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 800.718629][T16963] System zones: 1-12 [ 800.725180][T16963] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3868: bad orphan inode 131072 [ 800.753493][T16963] loop6: lost filesystem error report for type 5 error -117 [ 800.754088][T16963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.809541][ T28] audit: type=1400 audit(1781330660.032:6339): avc: denied { write } for pid=16962 comm="syz.6.3868" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 800.894463][T16966] lo speed is unknown, defaulting to 1000 [ 800.954592][T11073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.023625][ T3293] ================================================================== [ 801.031748][ T3293] BUG: KCSAN: data-race in __dentry_kill / __dentry_kill [ 801.038799][ T3293] [ 801.041122][ T3293] write to 0xffff88811ae59c00 of 4 bytes by task 2983 on cpu 1: [ 801.048783][ T3293] __dentry_kill+0xa8/0x4c0 [ 801.053413][ T3293] finish_dput+0x2b/0x210 [ 801.057749][ T3293] dput+0x52/0x60 [ 801.061410][ T3293] lookup_fast+0x29f/0x320 [ 801.065834][ T3293] path_lookupat+0x120/0x4c0 [ 801.070431][ T3293] filename_lookup+0x18f/0x390 [ 801.075320][ T3293] do_readlinkat+0x74/0x2f0 [ 801.079858][ T3293] __x64_sys_readlink+0x47/0x60 [ 801.084732][ T3293] x64_sys_call+0x2b51/0x3020 [ 801.089453][ T3293] do_syscall_64+0x136/0x3c0 [ 801.094057][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.099960][ T3293] [ 801.102288][ T3293] read to 0xffff88811ae59c00 of 4 bytes by task 3293 on cpu 0: [ 801.109829][ T3293] __dentry_kill+0x27d/0x4c0 [ 801.114460][ T3293] finish_dput+0x2b/0x210 [ 801.118800][ T3293] dput+0x52/0x60 [ 801.122448][ T3293] lookup_fast+0x29f/0x320 [ 801.126928][ T3293] link_path_walk+0x523/0xdd0 [ 801.131629][ T3293] path_openat+0x1bf/0x2020 [ 801.136142][ T3293] do_file_open+0x16c/0x290 [ 801.140656][ T3293] do_sys_openat2+0x94/0x130 [ 801.145265][ T3293] __x64_sys_openat+0xf2/0x120 [ 801.150132][ T3293] x64_sys_call+0x1e39/0x3020 [ 801.154844][ T3293] do_syscall_64+0x136/0x3c0 [ 801.159455][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.165372][ T3293] [ 801.167736][ T3293] value changed: 0x00140004 -> 0x00000004 [ 801.173563][ T3293] [ 801.175891][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 801.182058][ T3293] CPU: 0 UID: 0 PID: 3293 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 801.192480][ T3293] Tainted: [W]=WARN [ 801.196371][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 801.206469][ T3293] ================================================================== [ 801.264410][T16970] Attempt to read inode for relocated directory [ 801.322296][T16970] sch_fq: defrate 2 ignored. [ 801.328945][T16971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.345877][T16958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.364347][T13409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.401801][T13818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.529202][T12919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.