last executing test programs: 2m7.875299599s ago: executing program 4 (id=1386): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}) 2m7.461787253s ago: executing program 4 (id=1392): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffda8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x4003, 0xffffff00}}, 0x10, 0x0}, 0x4040005) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x60}, 0x0) 2m7.34318564s ago: executing program 4 (id=1393): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r8) pipe(&(0x7f0000000040)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000380)) poll(&(0x7f0000000100)=[{r9, 0x4000}], 0x1, 0x5) sendmmsg$unix(r7, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2041}}], 0x2, 0x40008004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r6, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x438, 0x0, r8, 0x8, '\x00', r10, r5, 0x5, 0x8dc, 0x1}, 0x50) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x86, 0x3e, 0xffff, 0x40, @private1, @private2, 0x10, 0x8, 0x99, 0x6}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x4, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r11, r12, 0x25, 0x2, @val=@target_btf_id=r13}, 0x14) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x5, 0x6f5, 0x2, 0x7, 0x1, "9dad47d9909b442b683f32fde68bb7ef8822fe"}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast1, 0x3}, r1}}, 0x30) 2m5.607972321s ago: executing program 4 (id=1407): r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x10000000, r0, 'id0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20008084) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, 0x0, 0x0) syz_io_uring_setup(0xcd0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100), &(0x7f0000000500)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 2m2.789511785s ago: executing program 4 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) mremap(&(0x7f0000656000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000486000/0x1000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @empty, 0x5}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x2000000c) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100000, &(0x7f0000000540)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@data_err_abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = timerfd_create(0x2, 0x80000) timerfd_settime(r3, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) creat(0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) 2m1.575253376s ago: executing program 4 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_pidfd_open(r4, 0x0) r6 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_timeval(r7, 0x1, 0x57, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2m1.574629476s ago: executing program 32 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_pidfd_open(r4, 0x0) r6 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_timeval(r7, 0x1, 0x57, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 11.375551087s ago: executing program 3 (id=2109): r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100000009000100706ee80cb62fcfee0900030073797a32000000007c000000060a010400000000000000000100000008000b400000000060000480340001800b00010065787468647200002400000c080003400000000008000440000000220500020007000000280001800c0001006269747769736500180002800800034000000002080001400000001404000580140000001100010000"], 0xf0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x1fff8}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) 10.099551272s ago: executing program 3 (id=2115): r0 = socket(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 10.053393655s ago: executing program 3 (id=2116): syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x273}, 0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x50, 0x2, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80c80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file1\x00', 0x4000423) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x4000)=nil) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x10}}, 0x24, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4116, 0x1008}, {&(0x7f0000000040)=""/155, 0xfffffcfb}], 0x2, 0x16, 0xffffffff) 8.714471383s ago: executing program 3 (id=2120): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24048800) 8.619224238s ago: executing program 3 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100000009000100706ee80cb62fcfee0900030073797a32000000007c000000060a010400000000000000000100000008000b400000000060000480340001800b00010065787468647200002400000c080003400000000008000440000000220500020007000000280001800c0001006269747769736500180002800800034000000002080001400000001404000580140000001100010000"], 0xf0}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x1fff8}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) 6.803775694s ago: executing program 5 (id=2124): socket(0x1e, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000005dc0)={0x77359400}, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) 5.987735732s ago: executing program 0 (id=2129): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @empty}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$eJzs3U9oHNUfAPDvzGabNs3vlwoKKj0UFSqUbpL+0eqpvYqFQA+CFw2bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaYHXdnsbrpNd2MSs9ma/XxgkvdmJvN9b2a/LzvDDBNAzzpW/ZFGPBMRY0nEUNOyvqgvPFZbb3VlKX9/ZSmfRKVy6bckkoi4t7KUb6yf1H8fjojliHg6Ir7LRpxI1zd5oFEoLyxOjReLhdl6fXhu+upweWHx5JXp8cnCZGHm9MuvnD135uzoqdHm5t6vNNey2+vrjZ9vvn/jh9du3/z8i6PL+Q/Hkzgfg/Vlzf3YTbV9ko3zG+af6USwLkq63QB2JFPP82oqPRVDkalnfSuV5sGhf0+aB3RQpT+isi4qlWr6V4DekDyU7tIfekfje0D1/Lcx7eX3jzsXaicg1birK0v596IRv692bSIOrp2bDPyePHRmUj3fPLKXDWVfWr4eESN9fY9+/pP652/nRnajgXTUtxdqB+rR45+ujz/RYvwZbFw7/Zca499qffxbbRE/02b8G9tijD/f/OWTtvGv98ezLeMn6/GTFvHTiHh7Q3vaufXG1+faLat8GnE8Wsdv3vYm14eHL18pFkZqP1vG+Ob40Vfb9z9ioE382jXbg2sNae7/gXqb0k363Oyr7798bnmT+C8+v/nxb7X/D0XEB1uM/8S9z15vt+zO9eRu9VvAdo9/Etm4vcX4L50/9lO96KohAAAAAAAAAADsonTtXrYkza2X0zSXqz3D+2QMpMVSee7E5dL8zETtnrcjkU0bd1oN1epJtT5avx+3UT+1oX46Uw+YObRWz+VLxYku9x0AAAAAAAAAAAAAAAAAAAAeF4c3PP//R2bt+f+Nr6sG9qv2r/wG9jv5D73r4fzf7FWOwH7j/z/0rIr8h94l/6F3yX/oXfIfepf8h94l/6F3yX8AAAAAAAAAAAAAAAAAAAAAAAAAAOiIsYsXq1Pl/spSvlqf6FuYnyq9c3KiUJ7KTc/nc/nS7NXcZKk0WSzk8qXpf9peUipdHYmZ+WvDc4Xy3HB5YfGt6dL8TOOdooVsx3sEAAAAAAAAAAAAAAAAAAAA/z2Da1OS5iKytXqa5nIR/4uII0kkl68UCyMR8f+I+DGT7a/WR7vdaAAAAAAAAAAAAAAAAAAAANhnyguLU+PFYmG2c4W+eqgOhth6oW87K0fE8u42o7rFbf9Vtr4Du7zr9kchs5PPYXZsaOBxaPxeFro4KAEAAAAAAAAAAAAAAAAAQI968NDvVv/ir842CAAAAAAAAAAAAAAAAAAAAHpS+msSEdXp+NALgxuXHkhWM2u/I+LdW5c+ujY+Nzc7Wp1/d33+3Mf1+ae60X5gqxp5mkZENY8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB8oLi1PjxWJhdoeF/i2s0+0+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzE3wEAAP//C5/FIQ==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r7, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x6, 0x0, 0x0, 0xfd, 0x82, 0x0, 0x8404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x28000000000}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0xe6e3, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711169000000000085100000020000008500e7ff8900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f0000001640)="$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") 5.15887088s ago: executing program 0 (id=2132): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x6a410, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x6000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) 3.829476217s ago: executing program 1 (id=2134): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x4}]}, 0xbc}}, 0x40044) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) 3.761862122s ago: executing program 5 (id=2135): r0 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 3.758013552s ago: executing program 0 (id=2136): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) creat(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x2000000000000288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x185240, 0x148) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240), 0x0, 0x848, 0x0, 0x3) 3.715227334s ago: executing program 5 (id=2137): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 3.576857932s ago: executing program 0 (id=2138): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x22, 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xb, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x4, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) write$char_usb(r4, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000140)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)=0x802, 0x3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0xffffffff) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000001c0)=0x7, 0x4) pipe2$watch_queue(&(0x7f0000000200), 0x80) 3.501033307s ago: executing program 1 (id=2139): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x24000000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a3000000000090002007379003000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010064766d7270310000000000000000000008000740040000"], 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.500240647s ago: executing program 2 (id=2140): socket(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 3.394706993s ago: executing program 2 (id=2141): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') getdents64(r0, 0x0, 0x0) 3.377462954s ago: executing program 2 (id=2142): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x4}]}, 0xbc}}, 0x40044) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) 3.27239179s ago: executing program 2 (id=2143): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x840, &(0x7f0000000000), 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 3.220163463s ago: executing program 0 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_pidfd_open(0x0, 0x0) r4 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_timeval(r5, 0x1, 0x57, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 3.218784403s ago: executing program 5 (id=2145): syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x273}, 0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x50, 0x2, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80c80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file1\x00', 0x4000423) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x4000)=nil) r4 = open$dir(0x0, 0x40, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x10}}, 0x24, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4116, 0x1008}, {&(0x7f0000000040)=""/155, 0xfffffcfb}], 0x2, 0x16, 0xffffffff) 3.218472243s ago: executing program 1 (id=2146): socket(0x1e, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000005dc0)={0x77359400}, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) 3.09542822s ago: executing program 1 (id=2147): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x6a410, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x6000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 2.635401457s ago: executing program 2 (id=2148): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000200), 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10c80, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000001580)=""/127, 0x7f}], 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001980)=@delchain={0x2248, 0x65, 0x2, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0xfff1, 0xfff2}, {0x6, 0xfff3}}, [@f_tcindex={{0xc}, {0x44, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6b54}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xa50b}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x48ca}]}}, @f_tcindex={{0xc}, {0x2c, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x28263bd4}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffff9}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x4, 0xffe0}}]}}, @f_rsvp6={{0xa}, {0x85c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x7, 0x100}, {0x5, 0xea, 0x1}, 0x67, 0x3, 0x8c}}, @TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe}}, @TCA_RSVP_POLICE={0x814, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x66, 0x8, 0xf9, 0x10001, 0xffff770e, 0xfff, 0xfffffffa, 0x1, 0x7, 0x2b6, 0x8000, 0x3, 0x4, 0xb, 0x8, 0x2, 0x7, 0xfffffec0, 0x5, 0x7f, 0x2, 0x0, 0x29d657a, 0x40, 0x99a1, 0x0, 0x7, 0x6, 0x401, 0x81, 0x1000, 0x80, 0x3, 0x4bde, 0xfffffffb, 0x1, 0x6, 0x8, 0x7, 0x4, 0x1000, 0x9, 0x401, 0x9, 0x3, 0x6, 0x6, 0x10, 0x200, 0x1, 0x7, 0x0, 0x80, 0x3, 0x7407fc6a, 0x1, 0x10, 0xc, 0x4, 0xffff, 0x200, 0x8, 0x2, 0x3, 0x1, 0x6, 0x0, 0x0, 0x10, 0x8, 0x0, 0x7, 0x4, 0x363, 0x5a, 0xe1, 0x8, 0x9, 0x7, 0x4, 0x10001, 0x4da, 0x6, 0x0, 0x7, 0x1, 0xffff3828, 0x6055, 0x3, 0xe2ff, 0xed0, 0x100, 0x64f, 0x401, 0x828, 0xb8b7, 0xc8e, 0x81, 0x0, 0x7, 0x1000, 0x9, 0xffff, 0xbd, 0xfffffffb, 0x9, 0x7c, 0x9, 0x506d, 0x2, 0x9, 0xcf, 0x2, 0x1, 0xbfbf, 0x5, 0x3000, 0x3, 0x9, 0x200, 0x9, 0xc3, 0xb8, 0x100, 0x8000, 0x27a, 0x5, 0x1, 0xe, 0x3, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0xfffffffe, 0x8, 0x9, 0x0, 0x7fff, 0x3b, 0xc, 0xfffffff9, 0xd76e, 0x8, 0xfffffffc, 0x8, 0x2, 0x2, 0xfffffff9, 0x6, 0x2, 0x0, 0xffff, 0x9, 0xfffffff9, 0xfffffffa, 0x5, 0x7, 0x0, 0x2, 0xe, 0xfffffff8, 0x1a17, 0x89f6, 0x54e, 0x2, 0x3ff, 0x0, 0xb, 0x5280, 0x3, 0x2, 0x7, 0x2, 0x8, 0x3ff, 0x1b035b9c, 0x8, 0x8000, 0xb133, 0x9, 0x1, 0x2, 0x100000, 0x7f, 0x7fffffff, 0x9, 0xc52, 0xf, 0xf0, 0x4, 0x4, 0xd, 0x4, 0xffff, 0xe5f, 0x8001, 0x72, 0x304, 0xffffffff, 0x2, 0xc502, 0x2, 0x401, 0x6, 0xbb51, 0x7, 0xd02, 0x80, 0x7, 0x2, 0x9, 0x8, 0x6, 0x70b, 0x6b, 0x5, 0xfffffff8, 0x2, 0x4, 0x6b, 0x3, 0x1, 0xac, 0xfffff67a, 0xfffffffa, 0x6, 0x9, 0x8, 0x8, 0x2, 0x8, 0xb, 0x7, 0x3, 0x401, 0x3cdc, 0x6, 0x9, 0x3, 0x3, 0x9a, 0x2, 0x9, 0x94, 0x2, 0x97, 0x8001, 0x2, 0x5, 0x0, 0x5, 0x4, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xfff, 0xfffffffb, 0x4fec, 0x40, 0x5, 0x9, 0x1f8, 0x878e, 0x81, 0x3, 0x1, 0x7, 0x6db, 0x220, 0x3ff, 0x4, 0x0, 0xc00, 0x80000000, 0x80, 0x1, 0x8001, 0x8c, 0x3d, 0x4, 0x2, 0x0, 0x3, 0x3, 0xfffffffb, 0x5, 0x1, 0xfffffffc, 0x2, 0x0, 0x7fffffff, 0x4, 0x9, 0xe, 0x678, 0x3, 0x9, 0x0, 0x4, 0xe021, 0x4, 0xffffffff, 0x1, 0x6, 0x4, 0x2, 0xfffff54f, 0x10, 0x80, 0x2, 0x4, 0x7, 0x3, 0xfffffffb, 0x1, 0x6, 0xd7c7, 0x8000, 0x10001, 0x943, 0xd27f, 0xfff, 0x6, 0xfffffff8, 0x9, 0x8, 0x4, 0xc41, 0xff, 0x80000000, 0x7, 0x1, 0x8c1, 0x4b40, 0x4, 0x8, 0x5, 0x9, 0x7, 0x3, 0x0, 0x3, 0x0, 0x7, 0x2, 0x80000001, 0x4, 0x80, 0x2, 0xd2f, 0x4, 0x0, 0xfffffffa, 0x6, 0x7fff, 0xe223, 0x6, 0x4, 0x1, 0x3, 0xf, 0x3, 0x1833, 0x41, 0x8, 0x6f53, 0x101, 0x8001, 0x9, 0xb, 0x9, 0x3ff, 0x7fffffff, 0x5, 0xfffffff2, 0xb7, 0x8, 0x800, 0x1f054f, 0x5a92, 0x1000, 0x2, 0x45fc, 0xc02, 0x401, 0x40, 0x8, 0x0, 0x38880574, 0x0, 0x4, 0x8, 0x6, 0x4, 0x6, 0x100000, 0x1ff, 0x7ff, 0xfa, 0x81, 0x10001, 0x1, 0x10, 0x9, 0x4, 0x5a35bfca, 0x8, 0x1, 0x1de9, 0xad, 0x81, 0x0, 0x3, 0x638b, 0x1, 0x5, 0x7, 0x2, 0x2, 0xc9, 0xc36, 0x54, 0x0, 0x2, 0xfffffff5, 0xffff, 0x3, 0x1, 0x4, 0x9, 0x9, 0x8, 0xb, 0x1, 0x8, 0x7f, 0x7, 0x1, 0x5, 0x3, 0x6, 0x6, 0x5, 0x0, 0xa1, 0x400, 0x6, 0x3, 0x8, 0xe, 0x2, 0x1, 0x7, 0xfffffffd, 0xff, 0x9, 0x7ff, 0x8, 0x7, 0x4, 0x101, 0x9, 0xf88, 0x3, 0xd6, 0x4, 0x7, 0x10001, 0x6, 0x7, 0x6, 0x400, 0x4, 0x7a8, 0x2, 0x4, 0x1, 0x6, 0x6, 0x882d, 0x4, 0x8000, 0x2, 0x1ff, 0x4, 0x6, 0x0, 0x0, 0x73b0, 0x7, 0x5, 0xa8f, 0x5, 0x41c0, 0xfffff4f7, 0x8, 0x6, 0x1, 0xcd15, 0xa, 0x61a6, 0x1, 0x7, 0x7308, 0x6, 0xe, 0x0, 0x0, 0xc]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}, @f_rsvp6={{0xa}, {0x74, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x2, 0x80000001}, {0x2ac, 0x3, 0x3}, 0x32, 0x9, 0x9}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x3}}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}]}}, @f_rsvp6={{0xa}, {0x960, 0x2, [@TCA_RSVP_POLICE={0x8ec, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x51b}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x1, 0x40, 0x3, 0x58, 0xae0, 0x7, 0x3, 0x401, 0x40000f, 0x1, 0xfffffffa, 0x8, 0x1, 0x0, 0x4, 0x91e, 0x9, 0xe, 0x3, 0x1, 0x3, 0x5, 0x8, 0xff, 0x7fffffff, 0x4, 0x10, 0x800, 0x7fffffff, 0x54, 0x2a0ed697, 0x5, 0xb46, 0x8, 0x200, 0x7, 0x2, 0x800, 0xfffffffe, 0x160b, 0x6, 0xff, 0x9, 0x7, 0x10, 0xc6, 0x2e1, 0xda3, 0x80000001, 0xfffffff7, 0x6, 0x1000, 0x6, 0x5, 0x1, 0x22, 0x80000001, 0x7, 0x7, 0xf1, 0x8, 0xfffffe00, 0x7, 0x8001, 0x7, 0x6, 0x7, 0x0, 0x1aac0831, 0x9, 0xfffffffd, 0x8, 0x2, 0xbb0, 0xfffffff8, 0x2, 0xd462, 0x3, 0x3, 0x400, 0x8, 0x1, 0x6, 0x5, 0x7881, 0x6, 0x7, 0x9, 0x3920f99f, 0x5, 0x4, 0x101, 0x0, 0xb8b2, 0x7, 0x9, 0x0, 0x9, 0x83, 0x80000001, 0xceb8, 0xff, 0x54, 0x2, 0x0, 0x6, 0x1, 0x4, 0x117, 0x7, 0x4, 0x5, 0x0, 0x2, 0x3, 0x2, 0x6, 0x8001, 0xed9, 0x5, 0x5, 0x0, 0xd6, 0x1d, 0x5, 0x10, 0x0, 0x9, 0x0, 0x10000, 0x1ff, 0x80000001, 0x800000, 0x8, 0xfffff1fb, 0xf, 0xfffffffc, 0x1, 0xfffffffe, 0x1fd, 0x28b, 0x5d9, 0x9, 0x0, 0xfffffff7, 0x3, 0x5, 0xd25, 0x80000001, 0x0, 0xfffffff9, 0x80, 0x1b, 0x0, 0x7, 0x9, 0x8, 0x224, 0xff, 0x3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, 0x5, 0x1, 0x6, 0x9, 0x6, 0xd, 0x7, 0x5, 0x3, 0x8, 0x7, 0x5, 0x0, 0xe34, 0x8, 0x3, 0x100, 0x6f60, 0x1ff, 0xe, 0x40, 0x7, 0xce, 0x6, 0xf7, 0x4, 0x0, 0x9, 0xfffffff8, 0xd2, 0x7, 0x7, 0x3, 0x1000, 0x1ff, 0x69, 0x80, 0x77000000, 0xc8f, 0x1, 0x9, 0x0, 0x4, 0x1, 0x6, 0x9, 0xa, 0xc, 0x0, 0x8, 0x4, 0xfffffff7, 0x2e7dd84f, 0x2, 0xfffffffe, 0xa17, 0x1be0, 0xf8000000, 0x9, 0x8, 0x10001, 0xb, 0x9, 0x6, 0x6, 0x400, 0x81, 0x80, 0xffffb874, 0x10001, 0x4, 0xf, 0xd, 0x5d, 0x7fff, 0xd9c, 0x5, 0x9, 0x9, 0x1, 0xffffffff, 0x80000001, 0x5, 0xfffffffc, 0x7, 0x1, 0x9, 0x7ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x2, 0x35d4, 0x8, 0xffffff8d, 0x6, 0x6, 0x6, 0xfffffffb, 0x0, 0x2, 0x200000, 0x90000, 0xfffffffc, 0x200000, 0x4, 0x5, 0x2, 0xf, 0x9, 0xe66a, 0x800, 0x5, 0x80000000, 0xff, 0x8, 0x3, 0x6, 0x0, 0x7f, 0x8, 0x7c, 0x32, 0x5cb649f3, 0x5, 0x3, 0x200, 0x1, 0x5, 0x0, 0xd, 0xfffffff8, 0x2, 0x7ff, 0xc, 0xbe3, 0x0, 0xff, 0x80000000, 0x1000, 0x1, 0xf, 0xfffffffe, 0x9, 0x100, 0x412371a, 0xffff, 0x110b, 0x6, 0x0, 0xfffffffb, 0x1, 0x4, 0x400, 0xc, 0xdf, 0xfffffffb, 0x80000000, 0x2, 0x20000000, 0xfff, 0xfffffffc, 0x80000001, 0x1, 0x40, 0x0, 0x7, 0x6, 0x5, 0x2, 0x5, 0x0, 0x1a77b965, 0x1, 0xfffffff7, 0x6, 0xfffffff9, 0xedc1, 0xfff, 0x8, 0xf3, 0x7, 0x1, 0xaf62, 0x5, 0x54c, 0x200, 0x6, 0x6, 0x4, 0x8, 0x5, 0x2, 0x6, 0x1, 0x3, 0xc214, 0x4, 0xb60c, 0x3, 0x7, 0xa, 0xffff2298, 0xac, 0x6, 0xc0c2, 0x9, 0x0, 0x4, 0xa, 0xc, 0x2, 0x3, 0x6c, 0x7fff, 0x0, 0x3, 0x7d62, 0x1, 0x401, 0x7, 0x9e83, 0x5, 0x8001, 0x2, 0x6, 0x1, 0x7f, 0x5, 0x6e, 0x6, 0x10, 0x5, 0x3ff, 0x7, 0x2, 0x9, 0x6, 0x0, 0x3, 0x3, 0x14c4, 0x2, 0x6, 0x3, 0x1ff, 0x1000, 0xb, 0x53, 0x7, 0x9, 0x4, 0x3, 0x2, 0xa, 0x2, 0x6, 0x50000000, 0x8, 0x2, 0x401, 0x6, 0x9, 0x6, 0x0, 0x1000, 0xc, 0xd, 0x8, 0x8, 0xe, 0x5, 0x1ff, 0x3, 0x3, 0xe, 0x5, 0x4, 0x5, 0x5, 0xfa, 0xffffffff, 0xfc7, 0x101, 0x1ff, 0x875, 0x3, 0x3, 0x2, 0x2ae4, 0x74f, 0x0, 0xffffff61, 0x1, 0xb, 0x40, 0xffff, 0x7ff, 0x40, 0x9, 0x2, 0x3, 0x8, 0x7ff, 0x84e2, 0x563, 0x0, 0x2, 0x4c9, 0x7f, 0x9, 0x6, 0x3, 0x1, 0xa3, 0x3, 0x0, 0xec2b, 0x8, 0xd8, 0xf, 0x6, 0x8318, 0x4, 0x3, 0x5, 0x2, 0x0, 0x4, 0x3, 0x0, 0x80000001, 0xfffffffd, 0xffff, 0x4, 0x9, 0x3, 0x7, 0x4, 0x3, 0x2, 0x0, 0x10, 0xb589, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1bf1, 0x0, 0x7, 0x7, 0x25b7, {0xbe, 0x0, 0xff, 0x2, 0x2, 0x2}, {0x1d, 0x1, 0xa, 0x7, 0x8, 0xfffffff8}, 0x47, 0xfffffff9, 0xbcc7bb0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x7ff, 0x877e, 0x40, {0x1, 0x1, 0x5, 0x5, 0x400, 0x571e77f2}, {0x40, 0x0, 0x1, 0x7, 0x5e23, 0x55}, 0x5, 0x40, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc960, 0x3, 0x9, 0x6, 0x6, {0x9, 0x1, 0x400, 0x8000, 0x7, 0xd}, {0x8a, 0x1, 0x1, 0x7, 0x6, 0x4f8}, 0xf2, 0x5, 0x9}}]}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @private0}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x4, 0x6}, {0xb36, 0x2, 0xfffffff8}, 0x2, 0x3, 0x8}}]}}, @f_rsvp6={{0xa}, {0xf3c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_ACT={0xf24, 0x6, [@m_gact={0x1b8, 0x2, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x52c, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7b4, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc7c, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14a4, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x72, 0x5, 0x5, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x24a9, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2610, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x10000000, 0x9, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x4, 0x4d1e, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f4e, 0x5}}]}, {0xed, 0x6, "2a825fd04268df0b9ec6bde89e4c485453c6d2ddfa3f211e861279a49020be193168f5368e566efd9da851c16bbdafbc115232e8ab375dec616d48e52c6d71fe26a4b0d46148e9cddf6d0766beb25a36c1f68a356ba1ea47276dea4547a2285fb3499d3b9780326b80497b862e55c5f25bbc7117f954054a353c0078e84908250f644d761d3e821fa99531dab04619020cba386c8b1d53c664cfa68ce63cb5433297643c31dc87e76c26cf2b8ffd0857f4b9778c35007908498bf0717155d25b7a41e116684b86c405899a8fa01db159eae9c032afd86b0f14a0d761a6f433008fad30e49d41b02646"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0xd68, 0x1d, 0x0, 0x0, {{0xb}, {0xc78, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x9ea, 0x1, 0xdf, 0x7819, 0x80, 0x1, 0xfffffffe, 0x2, 0x29e, 0x0, 0x3, 0x1, 0xfacb, 0x3, 0x9, 0x8, 0x80, 0x0, 0x2, 0x8, 0x6, 0x5, 0x82a9c775, 0x2, 0x6, 0x2, 0x9, 0x1, 0x1, 0x8, 0x670e5f0e, 0x0, 0x2, 0x349a, 0xb, 0x800, 0x8, 0x6, 0x5, 0xb, 0x7, 0x0, 0x4, 0x101, 0x8, 0x4, 0x5, 0x1, 0xfffff033, 0x0, 0x0, 0x4, 0x7, 0xfff, 0xfffffffa, 0x8, 0x8, 0x3, 0x6, 0x2, 0x6, 0xd, 0x7, 0x1, 0x2, 0xd047, 0x6, 0x9, 0x8, 0xbb7, 0x8, 0x14, 0x96, 0x9, 0x6, 0x9, 0x8, 0x1, 0x8, 0x4, 0x8, 0x2, 0xfffffffe, 0x5, 0xffff1266, 0x9, 0x22, 0xffffffff, 0x7, 0x1, 0x9, 0x3, 0xfffffffb, 0x2, 0x1ff, 0x7, 0x40, 0x9, 0x1, 0x8, 0x8c, 0x0, 0xfffffffc, 0x0, 0x3, 0x1, 0x1, 0x1000, 0x6214, 0x1f, 0x3, 0x4, 0x200, 0x9, 0x7, 0x2, 0x8, 0x5, 0x1, 0x2, 0x3, 0x2, 0xfffffff7, 0x0, 0x800, 0x9, 0x5, 0x3, 0x8001, 0x6, 0x2, 0x7f, 0x96, 0x1, 0x7, 0x1, 0xe19e, 0x6, 0xb25e, 0x9, 0x6, 0x0, 0xdc1, 0x9, 0xc, 0xd, 0x3ff, 0x6, 0x2, 0x4, 0x3ff, 0x10000, 0x1, 0x1, 0x4, 0x48, 0xfffff001, 0x9, 0x8, 0x66, 0x3, 0x1, 0x3, 0xda21, 0x3, 0xc5, 0x3, 0x2, 0xf86, 0xffffff00, 0x0, 0x2, 0x9, 0x3, 0x0, 0x3ff, 0x4, 0x6, 0x8, 0x9, 0x6, 0x1, 0xe8f5, 0xdc, 0x401, 0x8, 0x6, 0x3, 0x4, 0x9fed, 0x5, 0x3, 0x0, 0xd, 0x0, 0x9db, 0x2, 0x8, 0xfffffffb, 0x7, 0x9, 0x5, 0xd, 0x10d6ea50, 0xfff, 0x1ff, 0xffffffff, 0x6, 0x7fff, 0x5, 0x9, 0x0, 0x3, 0xfffffffa, 0x7ff, 0x6, 0xe945, 0x5e49aebc, 0x7f, 0x6, 0x9, 0x61, 0x1fdf, 0x3, 0x8, 0x9, 0xb5, 0xff, 0x7, 0x5, 0x200, 0x40, 0xfffffffe, 0x6, 0xb, 0x9, 0xc9, 0x1, 0x2, 0x2, 0x0, 0x19, 0x4, 0x23cccf33, 0x3749, 0x9, 0x61, 0xc, 0xa, 0x8, 0x4, 0x8, 0x80000001, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xdcb, 0x1, 0x10000, 0x0, 0x2a, 0x6000000, 0x9, 0x7fffffff, 0xffff2094, 0x3, 0x3, 0xffffff01, 0x0, 0x6, 0xfffffff9, 0x9, 0x2, 0x4, 0xfffffff7, 0x7ff, 0x8, 0x1, 0xf, 0x6, 0xaa2, 0x45, 0x9, 0x8, 0x7ff, 0x3, 0xffffffff, 0x7, 0x8fdd, 0x7, 0x4, 0x1, 0x1, 0x7ff, 0x1, 0xfff, 0xc, 0x8001, 0x6, 0x9, 0x400, 0x1000, 0x1, 0x2, 0x6, 0xeb5, 0x1, 0x4, 0x3e, 0xe, 0xc48, 0x2, 0x5, 0x4, 0xa, 0xf3, 0x9, 0x7, 0x100, 0x3, 0x1, 0xd25, 0xd, 0x5, 0x6, 0x4, 0x2, 0x3, 0x8, 0xb11, 0x200, 0x1, 0x8, 0x5, 0x7, 0x1, 0x1, 0x3, 0x7f, 0xffffffff, 0xb, 0x3ff, 0x80, 0xffff, 0x25e7b530, 0x8, 0x80000001, 0x8, 0x3, 0x9, 0x3, 0x8, 0x2, 0x7fff, 0x1, 0x4, 0x1e, 0x3fd3731e, 0x2, 0x200, 0x8a90, 0x2, 0x9, 0x7fff, 0xffe00000, 0x8, 0xf, 0x10, 0x6, 0x8, 0xa, 0x1, 0x6, 0xfffff001, 0x9, 0x7fff, 0x6, 0x1, 0x5, 0x1, 0x7f, 0x1, 0x9, 0x8d, 0x4, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x3, 0x9, 0x7, 0x20db, 0x4, 0x3, 0x9, 0x8, 0x65db, 0x3, 0x8000, 0x5, 0x6, 0x3, 0x1, 0x7fffffff, 0x2, 0x51c2, 0x1, 0xbb2, 0x6, 0x1000, 0x0, 0x0, 0x7, 0x3, 0xe5, 0x80000001, 0x3ad8, 0x3, 0x200, 0xff, 0x40, 0xc, 0x78, 0x1, 0x401, 0x8, 0x80, 0x7, 0x3, 0x6, 0x5, 0x80000001, 0xa, 0x9, 0x9, 0x3000000, 0xb, 0x2, 0x2, 0xd, 0x5, 0x5, 0x4, 0x10, 0x8, 0x10000, 0x2, 0x2, 0x2, 0x8, 0x8, 0x0, 0x4, 0x5c9, 0x10001, 0x5, 0xfffffff7, 0x5, 0x0, 0x7ff, 0x80, 0x6, 0xdf2, 0x9, 0x3, 0xc, 0x64, 0x400, 0x101, 0x200, 0x8, 0x6, 0x10, 0x0, 0xb6a, 0x7fff, 0x6, 0x6, 0x4, 0xf70, 0x5, 0x2, 0x0, 0x2, 0x3, 0x2, 0x3, 0x2, 0x5, 0x8, 0x1000, 0x4, 0x80000000, 0x7, 0x4000, 0x7, 0x3ff, 0x1, 0x40, 0x7, 0xffffff01, 0x6, 0x1, 0x4, 0xe29, 0x4, 0x6, 0x2]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xed}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x8, 0x5, 0x8, 0x101, 0x3, 0x6, 0x6, 0x5, 0xe, 0x5, 0xbe9a, 0x7, 0x80000001, 0x6, 0x3ff, 0x3, 0x0, 0x4, 0x6, 0x80000001, 0x6, 0x0, 0x73fd, 0x6, 0x800, 0x401, 0x8, 0x8b95, 0x7ff, 0x80000001, 0x8, 0x7, 0x3c, 0x68d, 0x7, 0x9, 0x401, 0x3, 0x34a, 0x0, 0x9, 0x1000, 0xbc8, 0x4, 0x7, 0xff, 0x1, 0x5, 0x1, 0x5, 0x10000, 0x80000000, 0x3ff, 0x4, 0x9, 0x6, 0x1, 0x2, 0x1, 0xf31, 0x20c, 0x4ad, 0x2, 0x100, 0x6, 0xa0fc, 0x401, 0x1000, 0x2, 0x1, 0x3, 0x0, 0x2, 0x2, 0x29781500, 0x3, 0x10, 0x7, 0x1, 0xf, 0x401, 0xe, 0x0, 0x3, 0x0, 0x4, 0xfff, 0x80, 0x7ff, 0x171, 0x0, 0x5, 0xffff, 0x5, 0x0, 0xffff, 0x8, 0x7, 0x2, 0x1000, 0xcf9, 0x100, 0x0, 0x4000000, 0x9, 0xc54, 0x4, 0x0, 0x38, 0x8, 0x401, 0x2, 0x0, 0xb, 0xffff, 0x8001, 0x8, 0xaaa, 0x6, 0x3, 0xc, 0x6, 0x7, 0x1, 0x7ff, 0x30, 0x4, 0x5, 0x81, 0x0, 0xd0, 0x5, 0x13d, 0x2, 0x400, 0x8, 0x2, 0xfd, 0x3, 0x5, 0x4, 0x4, 0x10001, 0x7, 0x1ff, 0x9, 0x1ff, 0x1, 0x72, 0x9, 0xd, 0xfffffff7, 0x3, 0x8, 0x9746, 0x5d, 0xffffffff, 0x8, 0xfffffff7, 0x4, 0xff, 0x0, 0x2, 0x4, 0x1ff, 0x6, 0x4, 0x1, 0x9, 0x10000, 0x35, 0x0, 0x0, 0x2, 0x6, 0x6, 0x0, 0xfafd, 0x101, 0x4, 0x9, 0x4, 0x9, 0xaf0, 0x6, 0x10001, 0x7, 0x4, 0xa, 0x7, 0x2, 0xd0a6, 0x1, 0xfffffff8, 0x4, 0x7, 0x3, 0xfffffff8, 0x80000, 0x8, 0xcffb, 0xad51, 0x81, 0x3, 0x2, 0x4, 0x7, 0x5, 0x2, 0x0, 0x36, 0x100, 0x3, 0x8, 0x4, 0x3, 0xd7e041c5, 0x8, 0xa000000, 0x4, 0x7, 0x7fff, 0x6c4515d, 0xffff, 0x6ed, 0x8, 0x5, 0x5, 0x5, 0x0, 0x3, 0xff, 0x56c, 0xa5, 0x8, 0x3abd, 0xa, 0x4, 0x81, 0x9, 0x2, 0x1, 0x80, 0x5ae7, 0x80000001, 0x9, 0x4, 0x6, 0x2, 0x6, 0x0, 0x6, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff7993, 0x8, 0xad, 0xfffffff9, 0x2, {0xcd, 0x2, 0x4, 0x5, 0x9, 0x3}, {0x7f, 0x2, 0x9, 0x3, 0x83be, 0x6}, 0xc, 0xeed, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x102e4cae}]]}, {0xc7, 0x6, "4d88b6c16356299cec10e3ab1db890fa475e31d8e06bde269df1b117ac32686b9f09a006b8f424037da16b8e2bcbe77a832aa68314e01ed17c0e667b8f50c39b7ac1050d547e0454258f7a909d690b9f8a3bdcda729dedf8155be05c3799abba24e939fb7ef5551c24224645b23581309f7926c031431252ad7e983b99661eadf31c29d3e78aef0a6a631811349fd860d8e14f5f930a4e5d0d3e26c6b559e9bcee03268c505b3206a6831b0a171cf8400c8ad9fc55df88f1c1b382aa47b915ff983926"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2248}, 0x1, 0x0, 0x0, 0x4004}, 0x880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000001680)=[{0x20, 0x0, 0x0, 0xfbfff010}, {0x2e, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000480)=0x1) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="480000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14140000212000002800128008000100677470001c000280080007006401010008000300010000000500050000000000b4da2b7facad36765049dc13512157055ba5680fd582b8ed5cb8d0740d560197ca3b55b7e8e93f730de3dbd5728d31c09d859f18842f9a392ba5fcf436a45cb0027d8f5f97ad0d25be15ffb8dba2805dee511b051ce69675fa7681e273c851db96449b9f84436a7351cb5968f9455370f830843425e83a8178421e73689e11f3eea9555e11120e229ddad3a4062b9577e519633b87e36d8bc9a916ad5d08fb75e60b8bafc2d3233cf544d77a35338adcc3dc385c5b0fb719159849f934c4fc2c03bb4e64831697db5ed323f12dcda8ad77ad2a96d349da81c16f761ae7b37cae3fd098b4aeb0b3e3"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) 2.032679292s ago: executing program 5 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_pidfd_open(r4, 0x0) r6 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1.259337657s ago: executing program 0 (id=2150): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) 110.391364ms ago: executing program 1 (id=2151): socket(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 56.688717ms ago: executing program 1 (id=2152): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000000e00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$binfmt_misc(r1, &(0x7f0000001600)="cdc7afea6bae72b642dbcbbb125562252df92ab1f93a8659f50b0bf5d24aba2ca0cb7ecc67888551b20ea50f5e17", 0x2e) read$watch_queue(r0, &(0x7f0000004280)=""/144, 0x90) 19.82464ms ago: executing program 5 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_pidfd_open(r4, 0x0) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 5.76807ms ago: executing program 2 (id=2154): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x4}]}, 0xbc}}, 0x40044) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) 0s ago: executing program 3 (id=2155): r0 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) kernel console output (not intermixed with test programs): c5bf79 code=0x7ffc0000 [ 254.871420][ T28] audit: type=1326 audit(1771107294.976:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabac5bf79 code=0x7ffc0000 [ 254.895528][ T28] audit: type=1326 audit(1771107294.976:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffabac5bf79 code=0x7ffc0000 [ 255.424851][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.467761][T10952] FAULT_INJECTION: forcing a failure. [ 255.467761][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 255.490458][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.2.1663 Not tainted syzkaller #0 PREEMPT(full) [ 255.490489][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.490504][T10952] Call Trace: [ 255.490512][T10952] [ 255.490519][T10952] __dump_stack+0x1d/0x30 [ 255.490716][T10952] dump_stack_lvl+0x95/0xd0 [ 255.490747][T10952] dump_stack+0x15/0x1b [ 255.490798][T10952] should_fail_ex+0x263/0x280 [ 255.490820][T10952] should_failslab+0x8c/0xb0 [ 255.490849][T10952] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 255.490924][T10952] ? __alloc_skb+0x2d6/0x690 [ 255.490992][T10952] __alloc_skb+0x2d6/0x690 [ 255.491093][T10952] ? __alloc_skb+0x200/0x690 [ 255.491113][T10952] netlink_alloc_large_skb+0xbf/0xf0 [ 255.491143][T10952] netlink_sendmsg+0x40c/0x6f0 [ 255.491180][T10952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.491230][T10952] ____sys_sendmsg+0x5af/0x600 [ 255.491259][T10952] ___sys_sendmsg+0x195/0x1e0 [ 255.491297][T10952] __x64_sys_sendmsg+0xd4/0x160 [ 255.491335][T10952] x64_sys_call+0x194c/0x3020 [ 255.491413][T10952] do_syscall_64+0x12c/0x370 [ 255.491500][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.491523][T10952] RIP: 0033:0x7f5957e2bf79 [ 255.491538][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.491615][T10952] RSP: 002b:00007f5956887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.491640][T10952] RAX: ffffffffffffffda RBX: 00007f59580a5fa0 RCX: 00007f5957e2bf79 [ 255.491658][T10952] RDX: 000000000000c884 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.491688][T10952] RBP: 00007f5956887090 R08: 0000000000000000 R09: 0000000000000000 [ 255.491715][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.491731][T10952] R13: 00007f59580a6038 R14: 00007f59580a5fa0 R15: 00007fff846c61f8 [ 255.491760][T10952] [ 256.078353][T10972] can0: slcan on ptm0. [ 256.226103][T10989] loop5: detected capacity change from 0 to 512 [ 256.244085][T10989] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.275480][T10989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 256.324720][T10989] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.387383][T10989] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.469162][T11008] loop2: detected capacity change from 0 to 2048 [ 256.471375][T10989] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 256.491083][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 256.500637][T10989] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 256.533086][T10989] EXT4-fs (loop5): Remounting filesystem read-only [ 256.539696][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 256.539717][ C0] EXT4-fs (loop5): initial error at time 1771107296: mb_free_blocks:2047: inode 12: block 14 [ 256.539775][ C0] EXT4-fs (loop5): last error at time 1771107296: mb_free_blocks:2047: inode 12: block 14 [ 256.568489][T10989] EXT4-fs (loop5): 1 truncate cleaned up [ 256.574714][T10989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.587767][T11008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.622288][T11008] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 256.667734][T11008] EXT4-fs (loop2): shut down requested (1) [ 256.776221][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.785407][T10968] can0 (unregistered): slcan off ptm0. [ 256.791542][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.070178][T11044] loop5: detected capacity change from 0 to 256 [ 257.093604][T11044] FAT-fs (loop5): Directory bread(block 64) failed [ 257.100234][T11044] FAT-fs (loop5): Directory bread(block 65) failed [ 257.106929][T11044] FAT-fs (loop5): Directory bread(block 66) failed [ 257.113565][T11044] FAT-fs (loop5): Directory bread(block 67) failed [ 257.120243][T11044] FAT-fs (loop5): Directory bread(block 68) failed [ 257.126989][T11044] FAT-fs (loop5): Directory bread(block 69) failed [ 257.133725][T11044] FAT-fs (loop5): Directory bread(block 70) failed [ 257.140295][T11044] FAT-fs (loop5): Directory bread(block 71) failed [ 257.146843][T11044] FAT-fs (loop5): Directory bread(block 72) failed [ 257.153406][T11044] FAT-fs (loop5): Directory bread(block 73) failed [ 257.284014][T11046] can0: slcan on ptm1. [ 258.358705][T11049] loop2: detected capacity change from 0 to 256 [ 259.627091][T11056] 9p: Bad value for 'wfdno' [ 260.025490][T11049] FAT-fs (loop2): Directory bread(block 64) failed [ 260.032084][T11049] FAT-fs (loop2): Directory bread(block 65) failed [ 260.038799][T11049] FAT-fs (loop2): Directory bread(block 66) failed [ 260.045380][T11049] FAT-fs (loop2): Directory bread(block 67) failed [ 260.052046][T11049] FAT-fs (loop2): Directory bread(block 68) failed [ 260.058723][T11049] FAT-fs (loop2): Directory bread(block 69) failed [ 260.065336][T11049] FAT-fs (loop2): Directory bread(block 70) failed [ 260.071951][T11049] FAT-fs (loop2): Directory bread(block 71) failed [ 260.078697][T11049] FAT-fs (loop2): Directory bread(block 72) failed [ 260.085300][T11049] FAT-fs (loop2): Directory bread(block 73) failed [ 260.252465][T11064] netlink: 'syz.3.1685': attribute type 10 has an invalid length. [ 260.696942][T10996] can0 (unregistered): slcan off ptm1. [ 260.794312][T11081] FAULT_INJECTION: forcing a failure. [ 260.794312][T11081] name failslab, interval 1, probability 0, space 0, times 0 [ 260.814344][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.5.1687 Not tainted syzkaller #0 PREEMPT(full) [ 260.814447][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.814460][T11081] Call Trace: [ 260.814466][T11081] [ 260.814473][T11081] __dump_stack+0x1d/0x30 [ 260.814519][T11081] dump_stack_lvl+0x95/0xd0 [ 260.814543][T11081] dump_stack+0x15/0x1b [ 260.814631][T11081] should_fail_ex+0x263/0x280 [ 260.814655][T11081] should_failslab+0x8c/0xb0 [ 260.814686][T11081] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 260.814739][T11081] ? sidtab_sid2str_get+0xa0/0x130 [ 260.814771][T11081] ? sidtab_sid2str_put+0x1b5/0x360 [ 260.814821][T11081] kmemdup_noprof+0x2b/0x70 [ 260.814981][T11081] sidtab_sid2str_get+0xa0/0x130 [ 260.815009][T11081] security_sid_to_context_core+0x1eb/0x2e0 [ 260.815110][T11081] security_sid_to_context+0x27/0x40 [ 260.815137][T11081] avc_audit_post_callback+0x10f/0x540 [ 260.815177][T11081] ? audit_log_lsm_data+0x756/0xbb0 [ 260.815210][T11081] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 260.815251][T11081] common_lsm_audit+0x1ba/0x230 [ 260.815275][T11081] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 260.815377][T11081] ? avc_denied+0xe4/0x100 [ 260.815450][T11081] slow_avc_audit+0x14c/0x190 [ 260.815476][T11081] avc_has_perm+0x144/0x190 [ 260.815502][T11081] selinux_tun_dev_open+0xa4/0x120 [ 260.815535][T11081] security_tun_dev_open+0x32/0x60 [ 260.815577][T11081] tun_set_iff+0x30c/0x8a0 [ 260.815598][T11081] ? mutex_lock+0x57/0x90 [ 260.815620][T11081] __tun_chr_ioctl+0x65e/0x14d0 [ 260.815643][T11081] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 260.815734][T11081] tun_chr_ioctl+0x27/0x40 [ 260.815751][T11081] __se_sys_ioctl+0xce/0x140 [ 260.815828][T11081] __x64_sys_ioctl+0x43/0x50 [ 260.815854][T11081] x64_sys_call+0x1563/0x3020 [ 260.815877][T11081] do_syscall_64+0x12c/0x370 [ 260.815915][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.815954][T11081] RIP: 0033:0x7ffabac5bf79 [ 260.816033][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.816051][T11081] RSP: 002b:00007ffab96b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.816074][T11081] RAX: ffffffffffffffda RBX: 00007ffabaed5fa0 RCX: 00007ffabac5bf79 [ 260.816089][T11081] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000004 [ 260.816116][T11081] RBP: 00007ffab96b7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.816128][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.816138][T11081] R13: 00007ffabaed6038 R14: 00007ffabaed5fa0 R15: 00007ffd1a001ab8 [ 260.816199][T11081] [ 260.842098][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 260.842154][ T28] audit: type=1400 audit(1771107300.935:1767): avc: denied { relabelfrom } for pid=11080 comm="syz.5.1687" scontext=root:sysadm_r:sysadm_t tsid=137 tclass=tun_socket permissive=1 [ 261.109854][ T28] audit: type=1400 audit(1771107300.982:1768): avc: denied { relabelto } for pid=11080 comm="syz.5.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 261.154829][T11093] loop0: detected capacity change from 0 to 512 [ 261.369592][T11093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.444192][T11104] loop5: detected capacity change from 0 to 256 [ 261.465836][T11106] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 261.498570][T11093] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.596536][T11104] FAT-fs (loop5): Directory bread(block 64) failed [ 261.603229][T11104] FAT-fs (loop5): Directory bread(block 65) failed [ 261.609960][T11104] FAT-fs (loop5): Directory bread(block 66) failed [ 261.616616][T11104] FAT-fs (loop5): Directory bread(block 67) failed [ 261.623232][T11104] FAT-fs (loop5): Directory bread(block 68) failed [ 261.629821][T11104] FAT-fs (loop5): Directory bread(block 69) failed [ 261.636430][T11104] FAT-fs (loop5): Directory bread(block 70) failed [ 261.643149][T11104] FAT-fs (loop5): Directory bread(block 71) failed [ 261.649762][T11104] FAT-fs (loop5): Directory bread(block 72) failed [ 261.656449][T11104] FAT-fs (loop5): Directory bread(block 73) failed [ 261.920982][T11111] loop3: detected capacity change from 0 to 512 [ 262.028648][T11111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.243604][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.267931][T11111] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.311028][ T28] audit: type=1400 audit(1771107302.347:1769): avc: denied { ioctl } for pid=11110 comm="syz.3.1698" path="/363/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.560064][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.096726][T11121] loop0: detected capacity change from 0 to 256 [ 263.202805][T11121] FAT-fs (loop0): Directory bread(block 64) failed [ 263.209536][T11121] FAT-fs (loop0): Directory bread(block 65) failed [ 263.216447][T11121] FAT-fs (loop0): Directory bread(block 66) failed [ 263.223060][T11121] FAT-fs (loop0): Directory bread(block 67) failed [ 263.229786][T11121] FAT-fs (loop0): Directory bread(block 68) failed [ 263.236387][T11121] FAT-fs (loop0): Directory bread(block 69) failed [ 263.243204][T11121] FAT-fs (loop0): Directory bread(block 70) failed [ 263.249823][T11121] FAT-fs (loop0): Directory bread(block 71) failed [ 263.256573][T11121] FAT-fs (loop0): Directory bread(block 72) failed [ 263.263210][T11121] FAT-fs (loop0): Directory bread(block 73) failed [ 263.506761][T11126] syzkaller0: entered promiscuous mode [ 263.523455][T11126] syzkaller0: entered allmulticast mode [ 263.657733][T11084] loop2: detected capacity change from 0 to 1024 [ 263.726772][T11130] loop3: detected capacity change from 0 to 1024 [ 263.786927][T11130] EXT4-fs: inline encryption not supported [ 263.841650][T11130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.918176][T11130] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 263.994625][T11130] EXT4-fs (loop3): Remounting filesystem read-only [ 264.079939][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.568226][T11144] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 264.702736][T11150] loop1: detected capacity change from 0 to 1024 [ 264.738299][T11150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.827893][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.926967][ T28] audit: type=1400 audit(1771107304.798:1770): avc: denied { setopt } for pid=11158 comm="syz.5.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.002666][ T28] audit: type=1400 audit(1771107304.864:1771): avc: denied { setopt } for pid=11160 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 265.046884][T11172] loop5: detected capacity change from 0 to 2048 [ 265.102039][T11172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.158169][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1721'. [ 265.185400][T11181] loop1: detected capacity change from 0 to 2048 [ 265.201725][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.229861][T11181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.281557][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1723'. [ 265.301583][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.311784][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.322699][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.358318][T11194] loop1: detected capacity change from 0 to 1024 [ 265.373921][T11194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.412234][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.585650][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'. [ 265.598437][T11207] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.642785][T11210] xt_TCPMSS: Only works on TCP SYN packets [ 265.684453][T11207] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.736039][T11207] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.803100][T11207] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.886949][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.927368][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.945987][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.986746][T11220] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.008245][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.033329][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.062490][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.133984][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.226204][ T28] audit: type=1400 audit(1771107306.014:1772): avc: denied { bind } for pid=11231 comm="syz.3.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.267324][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.279533][T11232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.376159][ T28] audit: type=1326 audit(1771107306.154:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.410523][ T28] audit: type=1326 audit(1771107306.154:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.441141][ T28] audit: type=1326 audit(1771107306.154:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.490737][ T28] audit: type=1326 audit(1771107306.154:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.534242][T11238] set_capacity_and_notify: 5 callbacks suppressed [ 266.534258][T11238] loop1: detected capacity change from 0 to 8192 [ 266.552799][ T28] audit: type=1326 audit(1771107306.154:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.597541][ T28] audit: type=1326 audit(1771107306.164:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e24f1bf79 code=0x7ffc0000 [ 266.626399][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.654477][ T28] audit: type=1326 audit(1771107306.164:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e24f1bce2 code=0x7ffc0000 [ 266.683979][ T28] audit: type=1326 audit(1771107306.285:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e24edc84e code=0x7ffc0000 [ 266.707902][ T28] audit: type=1326 audit(1771107306.295:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0e24f1bda7 code=0x7ffc0000 [ 266.763561][T11238] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.960261][T11255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1749'. [ 267.028343][T11263] loop1: detected capacity change from 0 to 512 [ 267.061464][T11263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.114797][T11263] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.241693][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.274408][T11272] loop3: detected capacity change from 0 to 256 [ 267.432399][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 267.484444][T11279] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.497613][T11282] xt_TCPMSS: Only works on TCP SYN packets [ 267.542591][T11279] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.601624][T11287] loop2: detected capacity change from 0 to 256 [ 267.656356][T11287] FAT-fs (loop2): Directory bread(block 64) failed [ 267.663062][T11287] FAT-fs (loop2): Directory bread(block 65) failed [ 267.669829][T11287] FAT-fs (loop2): Directory bread(block 66) failed [ 267.676416][T11287] FAT-fs (loop2): Directory bread(block 67) failed [ 267.683204][T11287] FAT-fs (loop2): Directory bread(block 68) failed [ 267.689988][T11287] FAT-fs (loop2): Directory bread(block 69) failed [ 267.696527][T11287] FAT-fs (loop2): Directory bread(block 70) failed [ 267.703156][T11287] FAT-fs (loop2): Directory bread(block 71) failed [ 267.709867][T11287] FAT-fs (loop2): Directory bread(block 72) failed [ 267.716563][T11287] FAT-fs (loop2): Directory bread(block 73) failed [ 267.876992][T11279] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.057537][T11279] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.438998][ T70] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.508928][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.530286][ T70] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.585383][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.637723][T11305] loop0: detected capacity change from 0 to 2048 [ 268.683216][T11308] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1767'. [ 268.693671][T11305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.759535][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.828337][T11316] loop0: detected capacity change from 0 to 256 [ 268.997847][T11320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=11320 comm=syz.0.1772 [ 269.101492][T11314] can0: slcan on ptm0. [ 269.324149][T11290] can0 (unregistered): slcan off ptm0. [ 269.579130][ T3421] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 269.607359][ T3421] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.715447][T11359] loop2: detected capacity change from 0 to 256 [ 269.785324][T11359] FAT-fs (loop2): Directory bread(block 64) failed [ 269.792031][T11359] FAT-fs (loop2): Directory bread(block 65) failed [ 269.798638][T11359] FAT-fs (loop2): Directory bread(block 66) failed [ 269.805296][T11359] FAT-fs (loop2): Directory bread(block 67) failed [ 269.811997][T11359] FAT-fs (loop2): Directory bread(block 68) failed [ 269.818721][T11359] FAT-fs (loop2): Directory bread(block 69) failed [ 269.825281][T11359] FAT-fs (loop2): Directory bread(block 70) failed [ 269.831929][T11359] FAT-fs (loop2): Directory bread(block 71) failed [ 269.838820][T11359] FAT-fs (loop2): Directory bread(block 72) failed [ 269.845459][T11359] FAT-fs (loop2): Directory bread(block 73) failed [ 269.968750][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1777'. [ 270.102565][T11363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1777'. [ 270.140429][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 270.186087][T11362] fido_id[11362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.219520][T11358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11358 comm=syz.3.1777 [ 270.271844][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 270.281430][T11370] xt_TCPMSS: Only works on TCP SYN packets [ 270.300327][T11366] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.506014][T11372] xt_TCPMSS: Only works on TCP SYN packets [ 270.532795][T11369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.587151][T11366] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.632015][T11369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.673109][T11366] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.728437][T11369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.778294][T11366] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.814427][T11369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.873109][ T70] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.886025][ T70] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.902272][ T70] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.953984][ T70] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.972875][T11385] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 270.984076][ T70] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.006837][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.047818][ T70] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.081351][ T70] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.613669][T11393] loop0: detected capacity change from 0 to 256 [ 271.668717][T11393] FAT-fs (loop0): Directory bread(block 64) failed [ 271.675489][T11393] FAT-fs (loop0): Directory bread(block 65) failed [ 271.682091][T11393] FAT-fs (loop0): Directory bread(block 66) failed [ 271.688824][T11393] FAT-fs (loop0): Directory bread(block 67) failed [ 271.695386][T11393] FAT-fs (loop0): Directory bread(block 68) failed [ 271.702109][T11393] FAT-fs (loop0): Directory bread(block 69) failed [ 271.708734][T11393] FAT-fs (loop0): Directory bread(block 70) failed [ 271.715324][T11393] FAT-fs (loop0): Directory bread(block 71) failed [ 271.721991][T11393] FAT-fs (loop0): Directory bread(block 72) failed [ 271.728512][T11393] FAT-fs (loop0): Directory bread(block 73) failed [ 271.935170][T11398] loop3: detected capacity change from 0 to 128 [ 272.488373][T11417] loop3: detected capacity change from 0 to 512 [ 272.532542][T11417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.583707][T11417] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.673247][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 272.673262][ T28] audit: type=1400 audit(1771107312.047:1846): avc: denied { sqpoll } for pid=11421 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.733988][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.814406][T11425] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 272.907238][T11430] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1798'. [ 272.921060][ T28] audit: type=1400 audit(1771107312.281:1847): avc: denied { execute_no_trans } for pid=11429 comm="syz.3.1798" path="/392/file1" dev="tmpfs" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.558970][T11468] loop1: detected capacity change from 0 to 512 [ 273.599135][T11468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.616498][T11464] loop3: detected capacity change from 0 to 1024 [ 273.626531][T11464] EXT4-fs: Ignoring removed bh option [ 273.632089][T11464] ext4: Invalid gid '0x00000000ffffffff' [ 273.644715][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.653223][T11468] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.663741][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.719572][T11468] netlink: 'syz.1.1805': attribute type 10 has an invalid length. [ 273.732023][T11479] tipc: Started in network mode [ 273.737024][T11479] tipc: Node identity 2641ab50e663, cluster identity 4711 [ 273.744582][T11479] tipc: Enabled bearer , priority 0 [ 273.752735][T11468] macvlan1: entered allmulticast mode [ 273.766684][T11468] veth1_vlan: entered allmulticast mode [ 273.784582][T11468] team0: Port device macvlan1 added [ 273.790608][T11426] loop2: detected capacity change from 0 to 1024 [ 273.797677][T11479] syzkaller0: entered promiscuous mode [ 273.808753][T11479] syzkaller0: entered allmulticast mode [ 273.826070][T11479] netlink: 'syz.0.1806': attribute type 4 has an invalid length. [ 273.835325][T11479] tipc: Resetting bearer [ 273.841948][ T28] audit: type=1400 audit(1771107313.142:1848): avc: denied { setopt } for pid=11478 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.862218][T11478] tipc: Resetting bearer [ 273.878826][T11478] tipc: Disabling bearer [ 273.886024][ T28] audit: type=1400 audit(1771107313.142:1849): avc: denied { bind } for pid=11478 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.945604][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.984368][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 274.018783][T11494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.043283][T11502] xt_TCPMSS: Only works on TCP SYN packets [ 274.112085][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 274.139004][T11497] bond0: (slave bond_slave_0): Releasing backup interface [ 274.159037][T11494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.223151][T11519] netlink: 'syz.2.1809': attribute type 10 has an invalid length. [ 274.233931][T11494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.320754][T11494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.391212][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.403547][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.415860][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.430582][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.193338][T11621] loop5: detected capacity change from 0 to 256 [ 275.220239][T11621] FAT-fs (loop5): Directory bread(block 64) failed [ 275.227009][T11621] FAT-fs (loop5): Directory bread(block 65) failed [ 275.233711][T11621] FAT-fs (loop5): Directory bread(block 66) failed [ 275.240341][T11621] FAT-fs (loop5): Directory bread(block 67) failed [ 275.246943][T11621] FAT-fs (loop5): Directory bread(block 68) failed [ 275.253521][T11621] FAT-fs (loop5): Directory bread(block 69) failed [ 275.260221][T11621] FAT-fs (loop5): Directory bread(block 70) failed [ 275.266775][T11621] FAT-fs (loop5): Directory bread(block 71) failed [ 275.273536][T11621] FAT-fs (loop5): Directory bread(block 72) failed [ 275.280125][T11621] FAT-fs (loop5): Directory bread(block 73) failed [ 276.285713][T11626] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 276.703690][T11624] loop3: detected capacity change from 0 to 1024 [ 277.085194][T11634] loop2: detected capacity change from 0 to 512 [ 277.128272][T11634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.142284][T11634] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.205976][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.251882][T11645] tipc: Started in network mode [ 277.264503][T11645] tipc: Node identity 7a09990ba725, cluster identity 4711 [ 277.304798][T11645] tipc: Enabled bearer , priority 0 [ 277.331671][T11645] syzkaller0: entered promiscuous mode [ 277.337701][T11645] syzkaller0: entered allmulticast mode [ 277.403398][T11645] tipc: Resetting bearer [ 277.418310][T11652] loop5: detected capacity change from 0 to 256 [ 277.460558][T11644] tipc: Resetting bearer [ 277.498967][T11644] tipc: Disabling bearer [ 277.577225][T11652] FAT-fs (loop5): Directory bread(block 64) failed [ 277.583866][T11652] FAT-fs (loop5): Directory bread(block 65) failed [ 277.590650][T11652] FAT-fs (loop5): Directory bread(block 66) failed [ 277.597224][T11652] FAT-fs (loop5): Directory bread(block 67) failed [ 277.603944][T11652] FAT-fs (loop5): Directory bread(block 68) failed [ 277.610522][T11652] FAT-fs (loop5): Directory bread(block 69) failed [ 277.617204][T11652] FAT-fs (loop5): Directory bread(block 70) failed [ 277.623821][T11652] FAT-fs (loop5): Directory bread(block 71) failed [ 277.630413][T11652] FAT-fs (loop5): Directory bread(block 72) failed [ 277.636994][T11652] FAT-fs (loop5): Directory bread(block 73) failed [ 278.189810][T11651] loop2: detected capacity change from 0 to 1024 [ 278.359603][T11648] loop0: detected capacity change from 0 to 1024 [ 278.376269][T11651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.468895][T11651] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.501864][T11648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.580450][T11648] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.608682][T11651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1828: bg 0: block 112: padding at end of block bitmap is not set [ 278.702477][T11648] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1830: bg 0: block 112: padding at end of block bitmap is not set [ 278.755583][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.856688][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 279.450071][T11677] loop0: detected capacity change from 0 to 512 [ 279.478729][T11677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.511974][T11677] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.562740][T11688] bond1: Removing last ns target with arp_interval on [ 279.615370][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.667610][T11695] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1843'. [ 279.738404][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 279.813458][T11698] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.866953][T11698] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.923602][T11698] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.973665][T11698] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.031008][ T4441] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.041632][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 280.057467][ T70] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.065870][ T70] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.075968][T11709] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.090573][ T4441] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.125857][T11709] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.187570][T11709] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.233713][T11709] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.264948][T11719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11719 comm=syz.0.1848 [ 280.291461][T11721] loop1: detected capacity change from 0 to 512 [ 280.311666][T11719] can0: slcan on ptm0. [ 280.347927][T11721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.365886][ T4441] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.406293][ T4441] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.427457][T11721] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.452082][ T4441] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.507236][ T4441] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.559914][ T3421] IPVS: starting estimator thread 0... [ 280.569466][T11729] loop5: detected capacity change from 0 to 4096 [ 280.575989][ T28] audit: type=1400 audit(1771107319.418:1850): avc: denied { setopt } for pid=11732 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.615484][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.648317][T11729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.709553][T11735] IPVS: using max 2496 ests per chain, 124800 per kthread [ 280.762012][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1857'. [ 280.844512][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 280.861200][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.893060][T11751] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.928380][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 280.966895][T11758] xt_TCPMSS: Only works on TCP SYN packets [ 281.118343][T11757] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.228049][T11763] loop1: detected capacity change from 0 to 256 [ 281.256560][T11763] FAT-fs (loop1): Directory bread(block 64) failed [ 281.263230][T11763] FAT-fs (loop1): Directory bread(block 65) failed [ 281.269924][T11763] FAT-fs (loop1): Directory bread(block 66) failed [ 281.276551][T11763] FAT-fs (loop1): Directory bread(block 67) failed [ 281.283123][T11763] FAT-fs (loop1): Directory bread(block 68) failed [ 281.289684][T11763] FAT-fs (loop1): Directory bread(block 69) failed [ 281.296333][T11763] FAT-fs (loop1): Directory bread(block 70) failed [ 281.302907][T11763] FAT-fs (loop1): Directory bread(block 71) failed [ 281.309568][T11763] FAT-fs (loop1): Directory bread(block 72) failed [ 281.316254][T11763] FAT-fs (loop1): Directory bread(block 73) failed [ 281.492367][T11751] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.559316][T11757] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.591079][T11751] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.650719][T11706] can0 (unregistered): slcan off ptm0. [ 281.705132][T11757] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.775431][T11751] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.840449][T11757] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.052019][T11778] loop3: detected capacity change from 0 to 256 [ 282.064866][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.084186][ T28] audit: type=1400 audit(1771107320.850:1851): avc: denied { mounton } for pid=11777 comm="syz.3.1866" path="/406/file0/file0" dev="loop3" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 282.131683][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.140158][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.162141][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.242979][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.259857][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.269757][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.278592][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.500937][T11789] loop2: detected capacity change from 0 to 512 [ 283.040168][ T28] audit: type=1400 audit(1771107321.720:1852): avc: denied { ioctl } for pid=11786 comm="syz.5.1869" path="socket:[27131]" dev="sockfs" ino=27131 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.102486][T11789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.290243][T11789] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.323051][ T28] audit: type=1400 audit(1771107321.720:1853): avc: denied { bind } for pid=11786 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.447849][T11820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'. [ 283.488525][T11820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'. [ 283.498921][ T28] audit: type=1400 audit(1771107322.159:1854): avc: denied { read } for pid=11823 comm="syz.3.1877" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 283.543276][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.555266][T11829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11829 comm=syz.0.1874 [ 283.569346][T11831] GUP no longer grows the stack in syz.3.1877 (11831): 200000004000-20000000a000 (200000002000) [ 283.577117][ T28] audit: type=1400 audit(1771107322.159:1855): avc: denied { open } for pid=11823 comm="syz.3.1877" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 283.605131][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.3.1877 Not tainted syzkaller #0 PREEMPT(full) [ 283.605196][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 283.605212][T11831] Call Trace: [ 283.605221][T11831] [ 283.605229][T11831] __dump_stack+0x1d/0x30 [ 283.605257][T11831] dump_stack_lvl+0x95/0xd0 [ 283.605279][T11831] dump_stack+0x15/0x1b [ 283.605304][T11831] __get_user_pages+0x195b/0x1ea0 [ 283.605337][T11831] ? __perf_event_task_sched_in+0xa65/0xad0 [ 283.605387][T11831] ? __rcu_read_unlock+0x4e/0x70 [ 283.605433][T11831] get_user_pages_remote+0x1d5/0x6b0 [ 283.605476][T11831] __access_remote_vm+0x15c/0x580 [ 283.605516][T11831] access_remote_vm+0x32/0x40 [ 283.605622][T11831] proc_pid_cmdline_read+0x32b/0x6b0 [ 283.605714][T11831] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 283.605738][T11831] vfs_readv+0x432/0x6e0 [ 283.605774][T11831] __x64_sys_preadv+0xfd/0x1c0 [ 283.605835][T11831] x64_sys_call+0x2915/0x3020 [ 283.605868][T11831] do_syscall_64+0x12c/0x370 [ 283.605923][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.605947][T11831] RIP: 0033:0x7fca7a9fbf79 [ 283.605966][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.605984][T11831] RSP: 002b:00007fca7940d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 283.606010][T11831] RAX: ffffffffffffffda RBX: 00007fca7ac76090 RCX: 00007fca7a9fbf79 [ 283.606044][T11831] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000008 [ 283.606057][T11831] RBP: 00007fca7aa927e0 R08: 00000000fffffff9 R09: 0000000000000000 [ 283.606073][T11831] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 283.606089][T11831] R13: 00007fca7ac76128 R14: 00007fca7ac76090 R15: 00007ffd09db4568 [ 283.606149][T11831] [ 283.633188][ T28] audit: type=1400 audit(1771107322.159:1856): avc: denied { ioctl } for pid=11823 comm="syz.3.1877" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 283.938156][T11850] loop2: detected capacity change from 0 to 256 [ 284.016317][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 284.059574][T11856] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.081234][T11863] xt_TCPMSS: Only works on TCP SYN packets [ 284.121957][T11856] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.135959][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 284.150958][T11858] loop5: detected capacity change from 0 to 1024 [ 284.163120][T11858] EXT4-fs: Ignoring removed bh option [ 284.168588][T11858] ext4: Invalid gid '0x00000000ffffffff' [ 284.174592][T11869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.197642][T11856] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.216387][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.225074][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.319173][T11877] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 284.328514][T11869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.382035][T11856] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.493775][T11889] loop1: detected capacity change from 0 to 256 [ 284.503538][T11869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.553533][T11889] FAT-fs (loop1): Directory bread(block 64) failed [ 284.560138][T11889] FAT-fs (loop1): Directory bread(block 65) failed [ 284.566740][T11889] FAT-fs (loop1): Directory bread(block 66) failed [ 284.573357][T11889] FAT-fs (loop1): Directory bread(block 67) failed [ 284.580240][T11889] FAT-fs (loop1): Directory bread(block 68) failed [ 284.586867][T11889] FAT-fs (loop1): Directory bread(block 69) failed [ 284.593500][T11889] FAT-fs (loop1): Directory bread(block 70) failed [ 284.600166][T11889] FAT-fs (loop1): Directory bread(block 71) failed [ 284.606900][T11889] FAT-fs (loop1): Directory bread(block 72) failed [ 284.613604][T11889] FAT-fs (loop1): Directory bread(block 73) failed [ 284.850878][T11869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.279532][T11976] loop1: detected capacity change from 0 to 256 [ 286.331842][T11984] loop1: detected capacity change from 0 to 512 [ 286.356655][T11984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.377456][T11984] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.391051][T11984] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 286.399290][T11984] veth1_vlan: left allmulticast mode [ 286.419461][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.450071][T11996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1891'. [ 286.597359][T12012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1892'. [ 286.606862][T12012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1892'. [ 286.617473][T12010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12010 comm=syz.1.1892 [ 286.775465][T12016] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 286.803035][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 286.813137][T12018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.858407][T12019] xt_TCPMSS: Only works on TCP SYN packets [ 286.869068][T12018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.922946][T12018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.976284][T12018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.045773][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.057708][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.069189][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.081385][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.280792][ T1437] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.298354][ T1437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.311064][ T1437] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.327576][ T1437] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.357653][T12026] loop5: detected capacity change from 0 to 128 [ 287.368159][T12026] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.380750][T12026] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.393568][ T28] audit: type=1400 audit(1771107325.817:1857): avc: denied { ioctl } for pid=12025 comm="syz.5.1898" path="/86/bus/file1" dev="loop5" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.414291][T12026] SELinux: Context : is not valid (left unmapped). [ 287.424852][ T28] audit: type=1400 audit(1771107325.845:1858): avc: denied { relabelto } for pid=12025 comm="syz.5.1898" name="rdma.current" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 287.449770][ T28] audit: type=1400 audit(1771107325.845:1859): avc: denied { setcheckreqprot } for pid=12027 comm="syz.3.1899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 287.580146][T12026] ipt_REJECT: ECHOREPLY no longer supported. [ 287.616584][T12035] loop3: detected capacity change from 0 to 256 [ 287.683873][ T9784] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.732480][T12042] loop1: detected capacity change from 0 to 4096 [ 287.776321][T12042] EXT4-fs: Ignoring removed bh option [ 287.786823][T12042] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.808653][T12042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.850477][ T28] audit: type=1400 audit(1771107326.238:1860): avc: denied { append } for pid=12041 comm="syz.1.1903" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.885269][T12055] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1906'. [ 287.920663][T12055] .71·: renamed from .70· (while UP) [ 289.927441][T12055] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 289.963475][T12060] syzkaller0: entered promiscuous mode [ 289.969089][T12060] syzkaller0: entered allmulticast mode [ 289.981516][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.008887][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.017115][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.025335][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.076669][T12064] loop2: detected capacity change from 0 to 512 [ 290.090922][T12064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.108350][T12064] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.961215][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.982130][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.034790][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 291.067618][T12073] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.198902][T12073] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.254530][T12073] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.338910][T12080] loop5: detected capacity change from 0 to 256 [ 291.363328][T12080] FAT-fs (loop5): Directory bread(block 64) failed [ 291.370064][T12080] FAT-fs (loop5): Directory bread(block 65) failed [ 291.377006][T12080] FAT-fs (loop5): Directory bread(block 66) failed [ 291.383785][T12080] FAT-fs (loop5): Directory bread(block 67) failed [ 291.390590][T12080] FAT-fs (loop5): Directory bread(block 68) failed [ 291.397207][T12080] FAT-fs (loop5): Directory bread(block 69) failed [ 291.403847][T12080] FAT-fs (loop5): Directory bread(block 70) failed [ 291.410390][T12080] FAT-fs (loop5): Directory bread(block 71) failed [ 291.417153][T12080] FAT-fs (loop5): Directory bread(block 72) failed [ 291.423733][T12080] FAT-fs (loop5): Directory bread(block 73) failed [ 291.500281][T12073] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.665401][ T1437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.696007][ T1437] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.724508][ T1437] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.765840][ T1437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.784622][ T28] audit: type=1400 audit(1771107329.914:1861): avc: denied { read write } for pid=12083 comm="syz.3.1915" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 292.105923][ T28] audit: type=1400 audit(1771107329.951:1862): avc: denied { open } for pid=12083 comm="syz.3.1915" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.186873][T12092] netlink: 764 bytes leftover after parsing attributes in process `syz.1.1918'. [ 293.339448][T12090] loop3: detected capacity change from 0 to 256 [ 294.055936][T12090] FAT-fs (loop3): Directory bread(block 64) failed [ 294.062697][T12090] FAT-fs (loop3): Directory bread(block 65) failed [ 294.069408][T12090] FAT-fs (loop3): Directory bread(block 66) failed [ 294.076076][T12090] FAT-fs (loop3): Directory bread(block 67) failed [ 294.082783][T12090] FAT-fs (loop3): Directory bread(block 68) failed [ 294.089417][T12090] FAT-fs (loop3): Directory bread(block 69) failed [ 294.096141][T12090] FAT-fs (loop3): Directory bread(block 70) failed [ 294.102756][T12090] FAT-fs (loop3): Directory bread(block 71) failed [ 294.109500][T12090] FAT-fs (loop3): Directory bread(block 72) failed [ 294.116127][T12090] FAT-fs (loop3): Directory bread(block 73) failed [ 294.139387][T12096] loop2: detected capacity change from 0 to 512 [ 294.280552][T12096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.305596][T12096] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.384167][ T28] audit: type=1400 audit(1771107332.346:1863): avc: denied { watch watch_reads } for pid=12095 comm="syz.2.1920" path="/proc/1052" dev="proc" ino=27579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 294.549520][T12118] netlink: 'syz.3.1927': attribute type 2 has an invalid length. [ 294.671491][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.884541][T12128] loop3: detected capacity change from 0 to 1024 [ 294.916972][T12132] loop1: detected capacity change from 0 to 256 [ 295.071883][T12128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 295.086064][T12132] FAT-fs (loop1): Directory bread(block 64) failed [ 295.092730][T12132] FAT-fs (loop1): Directory bread(block 65) failed [ 295.099625][T12132] FAT-fs (loop1): Directory bread(block 66) failed [ 295.106288][T12132] FAT-fs (loop1): Directory bread(block 67) failed [ 295.113105][T12132] FAT-fs (loop1): Directory bread(block 68) failed [ 295.119719][T12132] FAT-fs (loop1): Directory bread(block 69) failed [ 295.126392][T12132] FAT-fs (loop1): Directory bread(block 70) failed [ 295.133087][T12132] FAT-fs (loop1): Directory bread(block 71) failed [ 295.139743][T12132] FAT-fs (loop1): Directory bread(block 72) failed [ 295.146347][T12132] FAT-fs (loop1): Directory bread(block 73) failed [ 295.266937][T12128] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.927993][T12143] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1933: bg 0: block 112: padding at end of block bitmap is not set [ 296.458383][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.503501][T12141] loop2: detected capacity change from 0 to 256 [ 297.029004][T12153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12153 comm=syz.0.1939 [ 297.713309][T12141] FAT-fs (loop2): Directory bread(block 64) failed [ 297.719984][T12141] FAT-fs (loop2): Directory bread(block 65) failed [ 297.726537][T12141] FAT-fs (loop2): Directory bread(block 66) failed [ 297.733273][T12141] FAT-fs (loop2): Directory bread(block 67) failed [ 297.740055][T12141] FAT-fs (loop2): Directory bread(block 68) failed [ 297.746736][T12141] FAT-fs (loop2): Directory bread(block 69) failed [ 297.753609][T12141] FAT-fs (loop2): Directory bread(block 70) failed [ 297.760203][T12141] FAT-fs (loop2): Directory bread(block 71) failed [ 297.766818][T12141] FAT-fs (loop2): Directory bread(block 72) failed [ 297.773494][T12141] FAT-fs (loop2): Directory bread(block 73) failed [ 298.132993][T12176] loop2: detected capacity change from 0 to 512 [ 298.162497][T12176] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.1946: corrupted xattr block 95: invalid header [ 298.178058][T12176] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.178402][T12176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1946: bg 0: block 7: invalid block bitmap [ 298.199965][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 298.199987][ C1] EXT4-fs (loop2): initial error at time 1771107335: ext4_expand_extra_isize_ea:2808: inode 11 [ 298.200034][ C1] EXT4-fs (loop2): last error at time 1771107335: ext4_expand_extra_isize_ea:2808: inode 11 [ 298.235535][T12176] loop2: lost filesystem error report for type 5 error -117 [ 298.235778][T12176] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 298.387992][T12176] loop2: lost filesystem error report for type 5 error -117 [ 298.388200][T12176] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.1946: corrupted xattr block 95: invalid header [ 298.409355][T12176] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.409528][T12176] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 298.427978][T12176] EXT4-fs (loop2): 1 orphan inode deleted [ 298.434172][T12176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.452172][T12186] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1948'. [ 298.471987][T12186] .70·: renamed from .71· (while UP) [ 298.507343][T12188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1950'. [ 298.540897][T12186] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 298.563486][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.737588][T12183] syzkaller0: entered promiscuous mode [ 298.751668][T12183] syzkaller0: entered allmulticast mode [ 299.067970][T12207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12207 comm=syz.2.1951 [ 299.114398][T12207] can0: slcan on ptm0. [ 299.341293][T12214] loop1: detected capacity change from 0 to 256 [ 299.667647][T12226] FAULT_INJECTION: forcing a failure. [ 299.667647][T12226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.704554][T12227] loop0: detected capacity change from 0 to 512 [ 299.722184][T12229] tmpfs: Bad value for 'nr_blocks' [ 299.771658][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.5.1960 Not tainted syzkaller #0 PREEMPT(full) [ 299.771700][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 299.771754][T12226] Call Trace: [ 299.771760][T12226] [ 299.771767][T12226] __dump_stack+0x1d/0x30 [ 299.771790][T12226] dump_stack_lvl+0x95/0xd0 [ 299.771849][T12226] dump_stack+0x15/0x1b [ 299.771868][T12226] should_fail_ex+0x263/0x280 [ 299.771913][T12226] should_fail+0xb/0x20 [ 299.771937][T12226] should_fail_usercopy+0x1a/0x20 [ 299.772033][T12226] _copy_from_iter+0xcf/0xea0 [ 299.772124][T12226] ? __alloc_skb+0x4f6/0x690 [ 299.772149][T12226] ? __alloc_skb+0x200/0x690 [ 299.772176][T12226] netlink_sendmsg+0x4ae/0x6f0 [ 299.772255][T12226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.772299][T12226] ____sys_sendmsg+0x5af/0x600 [ 299.772395][T12226] ___sys_sendmsg+0x195/0x1e0 [ 299.772463][T12226] __x64_sys_sendmsg+0xd4/0x160 [ 299.772539][T12226] x64_sys_call+0x194c/0x3020 [ 299.772604][T12226] do_syscall_64+0x12c/0x370 [ 299.772637][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.772682][T12226] RIP: 0033:0x7ffabac5bf79 [ 299.772700][T12226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.772718][T12226] RSP: 002b:00007ffab96b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.772738][T12226] RAX: ffffffffffffffda RBX: 00007ffabaed5fa0 RCX: 00007ffabac5bf79 [ 299.772817][T12226] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 299.772834][T12226] RBP: 00007ffab96b7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.772851][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.772866][T12226] R13: 00007ffabaed6038 R14: 00007ffabaed5fa0 R15: 00007ffd1a001ab8 [ 299.772886][T12226] [ 300.284516][T12227] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.1961: corrupted xattr block 95: invalid header [ 300.330438][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1967'. [ 300.393151][T12227] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.393769][T12227] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1961: bg 0: block 7: invalid block bitmap [ 300.403105][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 300.403132][ C0] EXT4-fs (loop0): initial error at time 1771107337: ext4_expand_extra_isize_ea:2808: inode 11 [ 300.403163][ C0] EXT4-fs (loop0): last error at time 1771107337: ext4_expand_extra_isize_ea:2808: inode 11 [ 300.615735][T12195] can0 (unregistered): slcan off ptm0. [ 300.696945][T12227] loop0: lost filesystem error report for type 5 error -117 [ 300.697823][T12227] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 300.800523][T12227] loop0: lost filesystem error report for type 5 error -117 [ 300.801059][T12227] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.1961: corrupted xattr block 95: invalid header [ 300.889519][T12256] loop3: detected capacity change from 0 to 1024 [ 300.928710][T12227] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.929443][T12227] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 301.002380][T12256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 301.033370][T12227] EXT4-fs (loop0): 1 orphan inode deleted [ 301.055099][T12227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.068422][T12256] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.184165][T12256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1969: bg 0: block 112: padding at end of block bitmap is not set [ 301.212605][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.314737][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.365516][T12214] FAT-fs (loop1): Directory bread(block 64) failed [ 301.372177][T12214] FAT-fs (loop1): Directory bread(block 65) failed [ 301.379020][T12214] FAT-fs (loop1): Directory bread(block 66) failed [ 301.385612][T12214] FAT-fs (loop1): Directory bread(block 67) failed [ 301.392370][T12214] FAT-fs (loop1): Directory bread(block 68) failed [ 301.398938][T12214] FAT-fs (loop1): Directory bread(block 69) failed [ 301.405540][T12214] FAT-fs (loop1): Directory bread(block 70) failed [ 301.412152][T12214] FAT-fs (loop1): Directory bread(block 71) failed [ 301.418892][T12214] FAT-fs (loop1): Directory bread(block 72) failed [ 301.425460][T12214] FAT-fs (loop1): Directory bread(block 73) failed [ 301.670356][T12269] Invalid logical block size (3) [ 301.903346][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 301.918057][T12292] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.996920][T12292] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.055238][T12292] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.094380][T12292] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.192683][ T399] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.219092][ T399] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.231910][ T399] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.259539][T12302] loop1: detected capacity change from 0 to 512 [ 302.266072][ T399] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.294879][T12307] FAULT_INJECTION: forcing a failure. [ 302.294879][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.309225][T12307] CPU: 1 UID: 0 PID: 12307 Comm: syz.5.1982 Not tainted syzkaller #0 PREEMPT(full) [ 302.309255][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.309275][T12307] Call Trace: [ 302.309317][T12307] [ 302.309324][T12307] __dump_stack+0x1d/0x30 [ 302.309352][T12307] dump_stack_lvl+0x95/0xd0 [ 302.309380][T12307] dump_stack+0x15/0x1b [ 302.309486][T12307] should_fail_ex+0x263/0x280 [ 302.309577][T12307] should_fail+0xb/0x20 [ 302.309601][T12307] should_fail_usercopy+0x1a/0x20 [ 302.309626][T12307] copy_fpstate_to_sigframe+0x650/0x7f0 [ 302.309655][T12307] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 302.309808][T12307] ? x86_task_fpu+0x36/0x60 [ 302.309834][T12307] get_sigframe+0x34c/0x470 [ 302.309864][T12307] ? get_signal+0xdc3/0xf60 [ 302.309957][T12307] x64_setup_rt_frame+0xa7/0x4e0 [ 302.310088][T12307] arch_do_signal_or_restart+0x24b/0x450 [ 302.310126][T12307] exit_to_user_mode_loop+0x6a/0x6f0 [ 302.310255][T12307] do_syscall_64+0x249/0x370 [ 302.310314][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.310340][T12307] RIP: 0033:0x7ffabac1c84e [ 302.310399][T12307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.310445][T12307] RSP: 002b:00007ffab96b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.310469][T12307] RAX: 0000000000000001 RBX: 00007ffab96b76c0 RCX: 00007ffabac1c84e [ 302.310485][T12307] RDX: 0000000000000001 RSI: 00007ffab96b7090 RDI: 0000000000000003 [ 302.310500][T12307] RBP: 00007ffab96b7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.310516][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.310531][T12307] R13: 00007ffabaed6038 R14: 00007ffabaed5fa0 R15: 00007ffd1a001ab8 [ 302.310554][T12307] [ 302.678880][T12302] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.1980: corrupted xattr block 95: invalid header [ 302.692932][T12302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 302.694108][T12302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1980: bg 0: block 7: invalid block bitmap [ 302.703374][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 302.703396][ C1] EXT4-fs (loop1): initial error at time 1771107340: ext4_expand_extra_isize_ea:2808: inode 11 [ 302.703441][ C1] EXT4-fs (loop1): last error at time 1771107340: ext4_expand_extra_isize_ea:2808: inode 11 [ 302.753758][T12302] loop1: lost filesystem error report for type 5 error -117 [ 302.754278][T12302] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 302.816793][T12302] loop1: lost filesystem error report for type 5 error -117 [ 302.816946][T12302] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.1980: corrupted xattr block 95: invalid header [ 302.838164][T12302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 302.838338][T12302] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 302.857188][T12302] EXT4-fs (loop1): 1 orphan inode deleted [ 302.864117][T12302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.873695][T12319] loop3: detected capacity change from 0 to 1024 [ 302.912164][T12319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 302.935525][T12297] loop2: detected capacity change from 0 to 1024 [ 302.943860][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.717088][T12346] FAULT_INJECTION: forcing a failure. [ 303.717088][T12346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.730355][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz.0.1994 Not tainted syzkaller #0 PREEMPT(full) [ 303.730389][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 303.730405][T12346] Call Trace: [ 303.730475][T12346] [ 303.730485][T12346] __dump_stack+0x1d/0x30 [ 303.730581][T12346] dump_stack_lvl+0x95/0xd0 [ 303.730611][T12346] dump_stack+0x15/0x1b [ 303.730637][T12346] should_fail_ex+0x263/0x280 [ 303.730668][T12346] should_fail+0xb/0x20 [ 303.730699][T12346] should_fail_usercopy+0x1a/0x20 [ 303.730724][T12346] _copy_from_user+0x1c/0xb0 [ 303.730835][T12346] ___sys_sendmsg+0xc1/0x1e0 [ 303.730888][T12346] __x64_sys_sendmsg+0xd4/0x160 [ 303.731004][T12346] x64_sys_call+0x194c/0x3020 [ 303.731037][T12346] do_syscall_64+0x12c/0x370 [ 303.731077][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.731161][T12346] RIP: 0033:0x7f6be38dbf79 [ 303.731180][T12346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.731203][T12346] RSP: 002b:00007f6be232f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.731226][T12346] RAX: ffffffffffffffda RBX: 00007f6be3b55fa0 RCX: 00007f6be38dbf79 [ 303.731262][T12346] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 303.731278][T12346] RBP: 00007f6be232f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.731298][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.731386][T12346] R13: 00007f6be3b56038 R14: 00007f6be3b55fa0 R15: 00007ffcb18c8f38 [ 303.731489][T12346] [ 304.093992][T12349] loop0: detected capacity change from 0 to 1024 [ 304.161164][T12349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.197935][T12349] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.266195][T12349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1995: bg 0: block 112: padding at end of block bitmap is not set [ 304.365682][T12358] loop2: detected capacity change from 0 to 2048 [ 304.395127][T12358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.475374][ T1437] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 304.495814][ T1437] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 304.508559][ T1437] EXT4-fs (loop2): This should not happen!! Data will be lost [ 304.508559][ T1437] [ 304.518826][ T1437] EXT4-fs (loop2): Total free blocks count 0 [ 304.525051][ T1437] EXT4-fs (loop2): Free/Dirty block details [ 304.531190][ T1437] EXT4-fs (loop2): free_blocks=4096 [ 304.536523][ T1437] EXT4-fs (loop2): dirty_blocks=512 [ 304.542051][ T1437] EXT4-fs (loop2): Block reservation details [ 304.548094][ T1437] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 304.555225][ T1437] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 304.610930][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.726561][T12369] loop0: detected capacity change from 0 to 1024 [ 304.792765][T12369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.807400][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2003'. [ 304.816340][T12374] .71·: renamed from .70· (while UP) [ 304.962503][T12376] loop1: detected capacity change from 0 to 256 [ 305.004869][T12376] FAT-fs (loop1): Directory bread(block 64) failed [ 305.011499][T12376] FAT-fs (loop1): Directory bread(block 65) failed [ 305.018181][T12376] FAT-fs (loop1): Directory bread(block 66) failed [ 305.024840][T12376] FAT-fs (loop1): Directory bread(block 67) failed [ 305.031470][T12376] FAT-fs (loop1): Directory bread(block 68) failed [ 305.038042][T12376] FAT-fs (loop1): Directory bread(block 69) failed [ 305.044684][T12376] FAT-fs (loop1): Directory bread(block 70) failed [ 305.051217][T12376] FAT-fs (loop1): Directory bread(block 71) failed [ 305.057760][T12376] FAT-fs (loop1): Directory bread(block 72) failed [ 305.064484][T12376] FAT-fs (loop1): Directory bread(block 73) failed [ 306.016491][T12319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.082699][T12382] loop5: detected capacity change from 0 to 8192 [ 306.232834][T12382] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 306.240613][T12382] FAT-fs (loop5): Filesystem has been set read-only [ 307.857503][T12374] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 307.860499][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 307.926598][T12384] loop5: detected capacity change from 0 to 512 [ 307.942071][T12379] syzkaller0: entered promiscuous mode [ 307.948220][T12384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.960454][T12379] syzkaller0: entered allmulticast mode [ 307.980518][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.011177][T12384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.045629][T12384] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.142989][T12384] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.2006: Allocating blocks 41-42 which overlap fs metadata [ 308.205801][T12384] loop5: lost filesystem error report for type 5 error -117 [ 308.214763][T12384] EXT4-fs (loop5): Remounting filesystem read-only [ 308.222154][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 308.222178][ C1] EXT4-fs (loop5): initial error at time 1771107345: ext4_mb_mark_diskspace_used:4224 [ 308.222217][ C1] EXT4-fs (loop5): last error at time 1771107345: ext4_mb_mark_diskspace_used:4224 [ 308.355505][T12384] Quota error (device loop5): write_blk: dquota write failed [ 308.381563][T12384] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 308.419429][T12384] Quota error (device loop5): write_blk: dquota write failed [ 308.451814][T12384] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 308.498731][T12384] EXT4-fs (loop5): 1 truncate cleaned up [ 308.514158][T12384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.543206][T12384] FAULT_INJECTION: forcing a failure. [ 308.543206][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 308.568905][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.5.2006 Not tainted syzkaller #0 PREEMPT(full) [ 308.569006][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 308.569019][T12384] Call Trace: [ 308.569026][T12384] [ 308.569034][T12384] __dump_stack+0x1d/0x30 [ 308.569061][T12384] dump_stack_lvl+0x95/0xd0 [ 308.569084][T12384] dump_stack+0x15/0x1b [ 308.569168][T12384] should_fail_ex+0x263/0x280 [ 308.569201][T12384] should_failslab+0x8c/0xb0 [ 308.569290][T12384] kmem_cache_alloc_noprof+0x66/0x400 [ 308.569332][T12384] ? do_getname+0x2e/0x1c0 [ 308.569416][T12384] ? mutex_lock+0x57/0x90 [ 308.569444][T12384] do_getname+0x2e/0x1c0 [ 308.569466][T12384] __se_sys_mknodat+0x24/0xf0 [ 308.569582][T12384] __x64_sys_mknodat+0x55/0x70 [ 308.569612][T12384] x64_sys_call+0x312/0x3020 [ 308.569638][T12384] do_syscall_64+0x12c/0x370 [ 308.569672][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.569754][T12384] RIP: 0033:0x7ffabac5bf79 [ 308.569771][T12384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.569790][T12384] RSP: 002b:00007ffab96b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 308.569810][T12384] RAX: ffffffffffffffda RBX: 00007ffabaed5fa0 RCX: 00007ffabac5bf79 [ 308.569825][T12384] RDX: 000000000000c1c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 308.569838][T12384] RBP: 00007ffab96b7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.569880][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.569894][T12384] R13: 00007ffabaed6038 R14: 00007ffabaed5fa0 R15: 00007ffd1a001ab8 [ 308.569916][T12384] [ 308.751906][T12437] loop0: detected capacity change from 0 to 1024 [ 308.778307][T12437] EXT4-fs: Ignoring removed bh option [ 308.795633][T12437] ext4: Invalid gid '0x00000000ffffffff' [ 308.836323][T12437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.844937][T12437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.868990][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.979437][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 309.052653][T12464] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.140969][T12456] loop3: detected capacity change from 0 to 1024 [ 309.152769][T12464] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.225289][T12478] loop5: detected capacity change from 0 to 256 [ 309.262723][T12478] FAT-fs (loop5): Directory bread(block 64) failed [ 309.269442][T12478] FAT-fs (loop5): Directory bread(block 65) failed [ 309.276199][T12478] FAT-fs (loop5): Directory bread(block 66) failed [ 309.282767][T12478] FAT-fs (loop5): Directory bread(block 67) failed [ 309.289415][T12478] FAT-fs (loop5): Directory bread(block 68) failed [ 309.295973][T12478] FAT-fs (loop5): Directory bread(block 69) failed [ 309.302656][T12478] FAT-fs (loop5): Directory bread(block 70) failed [ 309.309381][T12478] FAT-fs (loop5): Directory bread(block 71) failed [ 309.316015][T12478] FAT-fs (loop5): Directory bread(block 72) failed [ 309.322664][T12478] FAT-fs (loop5): Directory bread(block 73) failed [ 309.428863][T12464] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.471898][T12456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 309.580775][T12456] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.597642][T12464] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.744272][T12456] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2013: bg 0: block 112: padding at end of block bitmap is not set [ 309.799132][ T399] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.928723][ T1437] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.971156][ T1437] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.006611][ T1437] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.102370][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 310.128674][T12503] loop1: detected capacity change from 0 to 512 [ 310.168866][T12503] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.2022: corrupted xattr block 95: invalid header [ 310.237949][T12503] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 310.238310][T12503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2022: bg 0: block 7: invalid block bitmap [ 310.247666][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 310.247680][ C1] EXT4-fs (loop1): initial error at time 1771107347: ext4_expand_extra_isize_ea:2808: inode 11 [ 310.247705][ C1] EXT4-fs (loop1): last error at time 1771107347: ext4_expand_extra_isize_ea:2808: inode 11 [ 310.393676][T12503] loop1: lost filesystem error report for type 5 error -117 [ 310.417135][T12503] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 310.931481][T12520] loop3: detected capacity change from 0 to 256 [ 310.972530][T12520] FAT-fs (loop3): Directory bread(block 64) failed [ 310.979264][T12520] FAT-fs (loop3): Directory bread(block 65) failed [ 310.986102][T12520] FAT-fs (loop3): Directory bread(block 66) failed [ 310.992788][T12520] FAT-fs (loop3): Directory bread(block 67) failed [ 310.999582][T12520] FAT-fs (loop3): Directory bread(block 68) failed [ 311.006152][T12520] FAT-fs (loop3): Directory bread(block 69) failed [ 311.012815][T12520] FAT-fs (loop3): Directory bread(block 70) failed [ 311.019398][T12520] FAT-fs (loop3): Directory bread(block 71) failed [ 311.026154][T12520] FAT-fs (loop3): Directory bread(block 72) failed [ 311.032901][T12520] FAT-fs (loop3): Directory bread(block 73) failed [ 311.552267][T12503] loop1: lost filesystem error report for type 5 error -117 [ 311.555053][T12503] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.2022: corrupted xattr block 95: invalid header [ 311.784215][T12503] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 311.784480][T12503] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 311.851417][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 311.880078][T12503] EXT4-fs (loop1): 1 orphan inode deleted [ 311.912616][T12552] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.923143][T12503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.988447][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.035089][T12552] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.099040][T12552] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.173898][T12552] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.245306][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.260219][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.273332][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.285311][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.387769][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 312.398426][T12570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.462674][T12570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.559659][T12570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.577876][T12575] loop3: detected capacity change from 0 to 128 [ 312.584976][T12575] vfat: Unknown parameter 'shortnam [ 312.927853][T12589] loop2: detected capacity change from 0 to 512 [ 312.943959][T12589] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.2040: corrupted xattr block 95: invalid header [ 312.958219][T12589] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.960110][T12589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2040: bg 0: block 7: invalid block bitmap [ 312.969306][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 312.969322][ C0] EXT4-fs (loop2): initial error at time 1771107349: ext4_expand_extra_isize_ea:2808: inode 11 [ 312.969353][ C0] EXT4-fs (loop2): last error at time 1771107349: ext4_expand_extra_isize_ea:2808: inode 11 [ 312.991978][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.999832][T12589] loop2: lost filesystem error report for type 5 error -117 [ 313.036667][T12589] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 313.052920][T12589] loop2: lost filesystem error report for type 5 error -117 [ 313.053218][T12589] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.2040: corrupted xattr block 95: invalid header [ 313.057509][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.061420][T12589] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 313.090419][T12589] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 313.124477][T12589] EXT4-fs (loop2): 1 orphan inode deleted [ 313.138927][ T311] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.163423][T12589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.188497][ T311] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.198338][ T311] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.209247][ T311] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.246643][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.442635][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 313.466883][T12605] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.535974][T12605] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.540045][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 313.567708][T12614] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.600739][T12605] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.638339][T12614] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.691668][T12605] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.754045][T12614] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.841516][T12614] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.857399][T12625] loop0: detected capacity change from 0 to 512 [ 313.866893][T12625] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.2055: corrupted xattr block 95: invalid header [ 313.881239][T12625] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 313.882218][T12625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2055: bg 0: block 7: invalid block bitmap [ 313.891458][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 313.891478][ C1] EXT4-fs (loop0): initial error at time 1771107350: ext4_expand_extra_isize_ea:2808: inode 11 [ 313.891514][ C1] EXT4-fs (loop0): last error at time 1771107350: ext4_expand_extra_isize_ea:2808: inode 11 [ 313.934644][T12625] loop0: lost filesystem error report for type 5 error -117 [ 313.941359][T12625] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 313.957556][T12625] loop0: lost filesystem error report for type 5 error -117 [ 313.957911][T12625] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.2055: corrupted xattr block 95: invalid header [ 313.971590][ T1437] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.982228][T12625] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 313.991109][ T1437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.992624][T12625] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 314.021169][ T311] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.021598][T12625] EXT4-fs (loop0): 1 orphan inode deleted [ 314.038857][ T311] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.044076][T12625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.075584][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.250673][T12637] loop3: detected capacity change from 0 to 128 [ 314.278997][T12637] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.291736][T12637] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.324059][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.497299][T12654] loop1: detected capacity change from 0 to 512 [ 314.509715][T12642] loop0: detected capacity change from 0 to 1024 [ 314.531379][T12654] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.2067: corrupted xattr block 95: invalid header [ 314.565745][T12654] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 314.566017][T12654] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2067: bg 0: block 7: invalid block bitmap [ 314.575210][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 314.575245][ C0] EXT4-fs (loop1): initial error at time 1771107351: ext4_expand_extra_isize_ea:2808: inode 11 [ 314.575281][ C0] EXT4-fs (loop1): last error at time 1771107351: ext4_expand_extra_isize_ea:2808: inode 11 [ 314.619147][T12657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2066'. [ 314.628422][T12654] loop1: lost filesystem error report for type 5 error -117 [ 314.628576][T12654] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 314.649745][T12654] loop1: lost filesystem error report for type 5 error -117 [ 314.652745][T12657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2066'. [ 314.676060][T12642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 314.688829][T12654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.2067: corrupted xattr block 95: invalid header [ 314.703867][T12642] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.719527][T12656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12656 comm=syz.3.2066 [ 314.736068][T12654] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 314.744641][T12654] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 314.777844][T12642] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2061: bg 0: block 112: padding at end of block bitmap is not set [ 314.786467][T12654] EXT4-fs (loop1): 1 orphan inode deleted [ 314.806737][T12654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.821894][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 314.841767][T12662] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.855140][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.897806][T12662] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.942527][T12662] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.005238][ T1437] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.013671][ T1437] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.036794][ T1437] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.047374][ T1437] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.089275][T12662] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.107477][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.204685][T12670] loop1: detected capacity change from 0 to 256 [ 315.255900][T12670] FAT-fs (loop1): Directory bread(block 64) failed [ 315.262676][T12670] FAT-fs (loop1): Directory bread(block 65) failed [ 315.269527][T12670] FAT-fs (loop1): Directory bread(block 66) failed [ 315.276163][T12670] FAT-fs (loop1): Directory bread(block 67) failed [ 315.282772][T12670] FAT-fs (loop1): Directory bread(block 68) failed [ 315.289453][T12670] FAT-fs (loop1): Directory bread(block 69) failed [ 315.296206][T12670] FAT-fs (loop1): Directory bread(block 70) failed [ 315.302823][T12670] FAT-fs (loop1): Directory bread(block 71) failed [ 315.309501][T12670] FAT-fs (loop1): Directory bread(block 72) failed [ 315.316146][T12670] FAT-fs (loop1): Directory bread(block 73) failed [ 316.231125][T12674] loop0: detected capacity change from 0 to 128 [ 316.377186][T12674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.472470][T12674] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.526579][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.535968][T12672] Falling back ldisc for ptm0. [ 316.997458][T12716] loop0: detected capacity change from 0 to 512 [ 317.034377][T12716] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.2079: corrupted xattr block 95: invalid header [ 317.069187][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 317.101931][T12722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.121878][T12716] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 317.132415][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 317.148050][ C0] EXT4-fs (loop0): initial error at time 1771107353: ext4_expand_extra_isize_ea:2808: inode 11 [ 317.158417][ C0] EXT4-fs (loop0): last error at time 1771107353: ext4_expand_extra_isize_ea:2808: inode 11 [ 317.168675][T12716] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2079: bg 0: block 7: invalid block bitmap [ 317.186126][T12716] loop0: lost filesystem error report for type 5 error -117 [ 317.193436][T12716] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 317.218090][T12716] loop0: lost filesystem error report for type 5 error -117 [ 317.219010][T12716] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.2079: corrupted xattr block 95: invalid header [ 317.260844][T12716] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 317.261827][T12716] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 317.291598][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 317.300977][T12716] EXT4-fs (loop0): 1 orphan inode deleted [ 317.307569][T12716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.347368][T12722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.365867][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.391700][T12722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.436571][T12737] loop3: detected capacity change from 0 to 512 [ 317.465772][T12737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.486177][T12722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.506862][T12737] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.525206][T12750] FAULT_INJECTION: forcing a failure. [ 317.525206][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 317.563361][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.0.2090 Not tainted syzkaller #0 PREEMPT(full) [ 317.563407][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 317.563483][T12750] Call Trace: [ 317.563491][T12750] [ 317.563500][T12750] __dump_stack+0x1d/0x30 [ 317.563530][T12750] dump_stack_lvl+0x95/0xd0 [ 317.563560][T12750] dump_stack+0x15/0x1b [ 317.563585][T12750] should_fail_ex+0x263/0x280 [ 317.563615][T12750] should_failslab+0x8c/0xb0 [ 317.563678][T12750] __kmalloc_noprof+0xb8/0x4e0 [ 317.563714][T12750] ? nf_tables_newrule+0xd77/0x16e0 [ 317.563782][T12750] nf_tables_newrule+0xd77/0x16e0 [ 317.563821][T12750] nfnetlink_rcv+0xc1e/0x1720 [ 317.563876][T12750] netlink_unicast+0x5c0/0x690 [ 317.563908][T12750] netlink_sendmsg+0x5c8/0x6f0 [ 317.563980][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.564004][T12750] ____sys_sendmsg+0x5af/0x600 [ 317.564038][T12750] ___sys_sendmsg+0x195/0x1e0 [ 317.564102][T12750] __x64_sys_sendmsg+0xd4/0x160 [ 317.564239][T12750] x64_sys_call+0x194c/0x3020 [ 317.564272][T12750] do_syscall_64+0x12c/0x370 [ 317.564312][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.564339][T12750] RIP: 0033:0x7f6be38dbf79 [ 317.564357][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.564452][T12750] RSP: 002b:00007f6be232f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.564476][T12750] RAX: ffffffffffffffda RBX: 00007f6be3b55fa0 RCX: 00007f6be38dbf79 [ 317.564492][T12750] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 317.564506][T12750] RBP: 00007f6be232f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.564521][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.564535][T12750] R13: 00007f6be3b56038 R14: 00007f6be3b55fa0 R15: 00007ffcb18c8f38 [ 317.564632][T12750] [ 317.769518][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.909019][T12756] loop1: detected capacity change from 0 to 1024 [ 317.925113][T12756] EXT4-fs: Ignoring removed bh option [ 317.937563][T12756] ext4: Invalid gid '0x00000000ffffffff' [ 317.953913][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.965637][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.185229][T12867] loop0: detected capacity change from 0 to 512 [ 319.205866][T12867] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.2095: corrupted xattr block 95: invalid header [ 319.240356][T12867] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 319.240585][T12867] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2095: bg 0: block 7: invalid block bitmap [ 319.249769][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 319.249781][ C1] EXT4-fs (loop0): initial error at time 1771107355: ext4_expand_extra_isize_ea:2808: inode 11 [ 319.249811][ C1] EXT4-fs (loop0): last error at time 1771107355: ext4_expand_extra_isize_ea:2808: inode 11 [ 319.314915][T12867] loop0: lost filesystem error report for type 5 error -117 [ 319.315121][T12867] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 319.345441][T12867] loop0: lost filesystem error report for type 5 error -117 [ 319.345693][T12867] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.2095: corrupted xattr block 95: invalid header [ 319.387092][T12867] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 319.387300][T12867] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 319.424373][T12867] EXT4-fs (loop0): 1 orphan inode deleted [ 319.437565][T12867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.492224][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.891887][T12905] loop0: detected capacity change from 0 to 256 [ 319.918271][T12905] FAT-fs (loop0): Directory bread(block 64) failed [ 319.924860][T12905] FAT-fs (loop0): Directory bread(block 65) failed [ 319.931462][T12905] FAT-fs (loop0): Directory bread(block 66) failed [ 319.938091][T12905] FAT-fs (loop0): Directory bread(block 67) failed [ 319.944897][T12905] FAT-fs (loop0): Directory bread(block 68) failed [ 319.951439][T12905] FAT-fs (loop0): Directory bread(block 69) failed [ 319.958271][T12905] FAT-fs (loop0): Directory bread(block 70) failed [ 319.964809][T12905] FAT-fs (loop0): Directory bread(block 71) failed [ 319.971520][T12905] FAT-fs (loop0): Directory bread(block 72) failed [ 319.978229][T12905] FAT-fs (loop0): Directory bread(block 73) failed [ 320.201923][T12909] loop3: detected capacity change from 0 to 512 [ 320.226863][T12909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.276704][T12909] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.449263][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.472613][T12913] loop1: detected capacity change from 0 to 512 [ 320.482048][T12913] EXT4-fs: Ignoring removed bh option [ 320.524342][T12913] EXT4-fs: Ignoring removed oldalloc option [ 320.531780][T12913] EXT4-fs: Invalid want_extra_isize 232 [ 320.928063][ T28] audit: type=1326 audit(1771107357.181:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.1.2102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e24f1bf79 code=0x0 [ 320.996031][T12918] loop1: detected capacity change from 0 to 1024 [ 321.035008][T12918] EXT4-fs: Ignoring removed bh option [ 321.066975][T12919] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2103'. [ 321.077676][T12918] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.134244][T12919] .70·: renamed from .71· (while UP) [ 321.143290][T12918] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.2102: lblock 2 mapped to illegal pblock 2 (length 1) [ 321.193528][T12918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 321.193672][T12918] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 321.202932][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 321.202947][ C1] EXT4-fs (loop1): initial error at time 1771107357: ext4_map_blocks:776: inode 3: block 2 [ 321.202983][ C1] EXT4-fs (loop1): last error at time 1771107357: ext4_map_blocks:776: inode 3: block 2 [ 321.279063][T12918] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.2102: lblock 0 mapped to illegal pblock 48 (length 1) [ 321.312445][T12918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 321.312642][T12918] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 321.344619][T12918] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2102: Failed to acquire dquot type 0 [ 321.365936][T12918] loop1: lost filesystem error report for type 5 error -117 [ 321.366126][T12918] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 321.404473][T12918] loop1: lost filesystem error report for type 5 error -117 [ 321.404625][T12918] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.2102: mark_inode_dirty error [ 321.438829][T12918] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 321.438982][T12918] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 321.478051][T12918] EXT4-fs (loop1): 1 orphan inode deleted [ 321.491171][T12918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.585780][ T28] audit: type=1400 audit(1771107357.798:1865): avc: denied { remount } for pid=12912 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 321.658773][ T96] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.673843][ T96] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 321.679439][T12919] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 321.682620][ T96] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 0 [ 321.728265][T12922] syzkaller0: entered promiscuous mode [ 321.734042][T12922] syzkaller0: entered allmulticast mode [ 322.244369][T12913] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 322.256923][T12918] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 322.272143][ T96] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.275984][T12925] loop0: detected capacity change from 0 to 512 [ 322.317422][ T399] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.325712][ T8841] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.334985][ T8841] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.348535][T12925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.395981][T12925] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.039731][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.124220][ T8843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.155500][ T8843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.181768][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.191364][ T8843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.216673][ T8843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.228509][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 324.267665][T12937] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.286283][T12945] xt_TCPMSS: Only works on TCP SYN packets [ 324.300086][T12942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2111'. [ 324.400666][T12937] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.483671][T12952] loop0: detected capacity change from 0 to 1024 [ 324.587292][T12952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 324.610765][T12937] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.700031][T12952] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.760713][T12937] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.959032][T12944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2112: bg 0: block 112: padding at end of block bitmap is not set [ 325.049968][ T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.155405][ T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.241349][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.364305][ T8841] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.425876][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 325.505980][T12972] loop2: detected capacity change from 0 to 1024 [ 325.512884][T12972] EXT4-fs: Ignoring removed bh option [ 325.557418][T12972] ext4: Invalid gid '0x00000000ffffffff' [ 325.618749][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.778130][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.205208][T12989] loop0: detected capacity change from 0 to 256 [ 326.300497][T12989] FAT-fs (loop0): Directory bread(block 64) failed [ 326.307327][T12989] FAT-fs (loop0): Directory bread(block 65) failed [ 326.314007][T12989] FAT-fs (loop0): Directory bread(block 66) failed [ 326.320612][T12989] FAT-fs (loop0): Directory bread(block 67) failed [ 326.327200][T12989] FAT-fs (loop0): Directory bread(block 68) failed [ 326.333864][T12989] FAT-fs (loop0): Directory bread(block 69) failed [ 326.340551][T12989] FAT-fs (loop0): Directory bread(block 70) failed [ 326.347158][T12989] FAT-fs (loop0): Directory bread(block 71) failed [ 326.353991][T12989] FAT-fs (loop0): Directory bread(block 72) failed [ 326.360736][T12989] FAT-fs (loop0): Directory bread(block 73) failed [ 326.462187][T12991] loop5: detected capacity change from 0 to 128 [ 326.508724][T12991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.530498][T12991] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.809609][ T9784] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.045287][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 327.856705][T13016] loop1: detected capacity change from 0 to 256 [ 327.961055][T13019] loop5: detected capacity change from 0 to 512 [ 328.423834][T13016] FAT-fs (loop1): Directory bread(block 64) failed [ 328.430525][T13016] FAT-fs (loop1): Directory bread(block 65) failed [ 328.437487][T13016] FAT-fs (loop1): Directory bread(block 66) failed [ 328.444082][T13016] FAT-fs (loop1): Directory bread(block 67) failed [ 328.450940][T13016] FAT-fs (loop1): Directory bread(block 68) failed [ 328.457505][T13016] FAT-fs (loop1): Directory bread(block 69) failed [ 328.464452][T13016] FAT-fs (loop1): Directory bread(block 70) failed [ 328.471115][T13016] FAT-fs (loop1): Directory bread(block 71) failed [ 328.477775][T13016] FAT-fs (loop1): Directory bread(block 72) failed [ 328.484449][T13016] FAT-fs (loop1): Directory bread(block 73) failed [ 328.536206][T13016] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 328.559057][T13019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.573799][T13019] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.594202][T13011] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.799412][T13054] FAULT_INJECTION: forcing a failure. [ 328.799412][T13054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.812968][T13054] CPU: 0 UID: 0 PID: 13054 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(full) [ 328.813002][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 328.813019][T13054] Call Trace: [ 328.813027][T13054] [ 328.813098][T13054] __dump_stack+0x1d/0x30 [ 328.813123][T13054] dump_stack_lvl+0x95/0xd0 [ 328.813147][T13054] dump_stack+0x15/0x1b [ 328.813173][T13054] should_fail_ex+0x263/0x280 [ 328.813257][T13054] should_fail_alloc_page+0xf2/0x100 [ 328.813293][T13054] __alloc_frozen_pages_noprof+0x108/0x360 [ 328.813404][T13054] alloc_pages_mpol+0xb3/0x260 [ 328.813438][T13054] ? css_rstat_updated+0xbb/0x280 [ 328.813467][T13054] vma_alloc_folio_noprof+0x1a9/0x300 [ 328.813531][T13054] handle_mm_fault+0x111f/0x3020 [ 328.813565][T13054] ? _raw_spin_lock+0x52/0xa0 [ 328.813603][T13054] ? pte_offset_map_lock+0x1d9/0x240 [ 328.813687][T13054] __get_user_pages+0x1023/0x1ea0 [ 328.813736][T13054] __mm_populate+0x242/0x390 [ 328.813848][T13054] do_mlock+0x47c/0x520 [ 328.813867][T13054] ? mutex_unlock+0x4e/0x90 [ 328.813891][T13054] ? fput+0x8f/0xc0 [ 328.813928][T13054] ? ksys_write+0x194/0x1a0 [ 328.813966][T13054] __x64_sys_mlock+0x36/0x50 [ 328.813997][T13054] x64_sys_call+0x1ab3/0x3020 [ 328.814105][T13054] do_syscall_64+0x12c/0x370 [ 328.814137][T13054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.814161][T13054] RIP: 0033:0x7f5957e2bf79 [ 328.814199][T13054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.814221][T13054] RSP: 002b:00007f5956887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 328.814244][T13054] RAX: ffffffffffffffda RBX: 00007f59580a5fa0 RCX: 00007f5957e2bf79 [ 328.814257][T13054] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 328.814270][T13054] RBP: 00007f5956887090 R08: 0000000000000000 R09: 0000000000000000 [ 328.814286][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.814363][T13054] R13: 00007f59580a6038 R14: 00007f59580a5fa0 R15: 00007fff846c61f8 [ 328.814382][T13054] [ 329.551331][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.641537][T13011] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.669894][T13064] loop1: detected capacity change from 0 to 512 [ 329.714688][T13064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.740956][T13011] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.758168][T13064] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2130: invalid indirect mapped block 4294967295 (level 0) [ 329.797239][T13064] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.800772][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 329.816388][ C1] EXT4-fs (loop1): initial error at time 1771107365: ext4_free_branches:1023: inode 16 [ 329.826064][ C1] EXT4-fs (loop1): last error at time 1771107365: ext4_free_branches:1023: inode 16 [ 329.860756][T13011] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.870722][T13064] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2130: invalid indirect mapped block 4294967295 (level 1) [ 329.893758][T13062] loop0: detected capacity change from 0 to 1024 [ 329.935811][T13064] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.936665][T13064] EXT4-fs (loop1): 1 orphan inode deleted [ 329.953957][T13064] EXT4-fs (loop1): 1 truncate cleaned up [ 329.960427][T13064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.995416][T13062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 330.010455][T13062] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.065162][T13062] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2129: bg 0: block 112: padding at end of block bitmap is not set [ 330.198345][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.420714][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 331.696744][T13080] loop2: detected capacity change from 0 to 512 [ 331.733742][T13080] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.2133: corrupted xattr block 95: invalid header [ 331.757250][T13080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.761043][T13080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2133: bg 0: block 7: invalid block bitmap [ 331.770235][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 331.770249][ C0] EXT4-fs (loop2): initial error at time 1771107367: ext4_expand_extra_isize_ea:2808: inode 11 [ 331.770272][ C0] EXT4-fs (loop2): last error at time 1771107367: ext4_expand_extra_isize_ea:2808: inode 11 [ 331.775494][T13083] loop1: detected capacity change from 0 to 512 [ 331.799758][T13080] loop2: lost filesystem error report for type 5 error -117 [ 331.825459][T13080] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 331.855388][T13087] loop0: detected capacity change from 0 to 1024 [ 331.868227][T13080] loop2: lost filesystem error report for type 5 error -117 [ 331.876820][T13083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.886722][T13087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.902371][T13080] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.2133: corrupted xattr block 95: invalid header [ 331.924665][T13092] loop5: detected capacity change from 0 to 512 [ 331.943831][T13083] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.955675][T13080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.956182][T13080] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 331.978625][T13080] EXT4-fs (loop2): 1 orphan inode deleted [ 332.003615][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.013333][T13092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.034382][T13080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.045030][T13092] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.058010][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.099728][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.101248][T13092] netlink: 'syz.5.2137': attribute type 10 has an invalid length. [ 332.209049][T13104] loop2: detected capacity change from 0 to 512 [ 332.242551][T13104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.255103][T13092] macvlan1: entered allmulticast mode [ 332.262447][T13092] veth1_vlan: entered allmulticast mode [ 332.269746][T13092] team0: Port device macvlan1 added [ 332.270984][T13104] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.305951][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.367014][ T9784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.454708][T13113] loop2: detected capacity change from 0 to 128 [ 332.545804][T13119] loop0: detected capacity change from 0 to 256 [ 332.572874][T13119] FAT-fs (loop0): Directory bread(block 64) failed [ 332.579476][T13119] FAT-fs (loop0): Directory bread(block 65) failed [ 332.586114][T13119] FAT-fs (loop0): Directory bread(block 66) failed [ 332.592722][T13119] FAT-fs (loop0): Directory bread(block 67) failed [ 332.599449][T13119] FAT-fs (loop0): Directory bread(block 68) failed [ 332.606076][T13119] FAT-fs (loop0): Directory bread(block 69) failed [ 332.612819][T13119] FAT-fs (loop0): Directory bread(block 70) failed [ 332.619417][T13119] FAT-fs (loop0): Directory bread(block 71) failed [ 332.626016][T13119] FAT-fs (loop0): Directory bread(block 72) failed [ 332.632666][T13119] FAT-fs (loop0): Directory bread(block 73) failed [ 332.807257][T13113] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.834580][T13113] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.945960][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.155738][T13127] loop5: detected capacity change from 0 to 256 [ 334.184365][T13127] FAT-fs (loop5): Directory bread(block 64) failed [ 334.191050][T13127] FAT-fs (loop5): Directory bread(block 65) failed [ 334.197638][T13127] FAT-fs (loop5): Directory bread(block 66) failed [ 334.204209][T13127] FAT-fs (loop5): Directory bread(block 67) failed [ 334.210837][T13127] FAT-fs (loop5): Directory bread(block 68) failed [ 334.217441][T13127] FAT-fs (loop5): Directory bread(block 69) failed [ 334.224075][T13127] FAT-fs (loop5): Directory bread(block 70) failed [ 334.230701][T13127] FAT-fs (loop5): Directory bread(block 71) failed [ 334.237339][T13127] FAT-fs (loop5): Directory bread(block 72) failed [ 334.243889][T13127] FAT-fs (loop5): Directory bread(block 73) failed [ 334.643866][T13131] Falling back ldisc for ptm0. [ 335.477403][ T1437] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.497067][ T1437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.509636][ T1437] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.537016][T13136] loop1: detected capacity change from 0 to 512 [ 335.555553][ T399] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.583926][T13138] loop2: detected capacity change from 0 to 512 [ 335.590743][ T3002] ================================================================== [ 335.598852][ T3002] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 335.605464][ T3002] [ 335.607803][ T3002] read-write to 0xffff88810824ba80 of 4 bytes by task 5589 on cpu 1: [ 335.615874][ T3002] dont_mount+0x2a/0x40 [ 335.620051][ T3002] vfs_unlink+0x206/0x490 [ 335.624411][ T3002] filename_unlinkat+0x1e2/0x410 [ 335.629380][ T3002] __se_sys_unlink+0x2b/0xe0 [ 335.633991][ T3002] __x64_sys_unlink+0x1f/0x30 [ 335.638747][ T3002] x64_sys_call+0x2eb6/0x3020 [ 335.643454][ T3002] do_syscall_64+0x12c/0x370 [ 335.648066][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.653974][ T3002] [ 335.656311][ T3002] read to 0xffff88810824ba80 of 4 bytes by task 3002 on cpu 0: [ 335.663865][ T3002] lookup_fast+0xf0/0x320 [ 335.668206][ T3002] path_lookupat+0x15c/0x500 [ 335.672800][ T3002] filename_lookup+0x190/0x390 [ 335.677580][ T3002] do_readlinkat+0x74/0x2f0 [ 335.682106][ T3002] __x64_sys_readlink+0x47/0x60 [ 335.686964][ T3002] x64_sys_call+0x2b51/0x3020 [ 335.691655][ T3002] do_syscall_64+0x12c/0x370 [ 335.696265][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.702162][ T3002] [ 335.704490][ T3002] value changed: 0x00300080 -> 0x00004080 [ 335.710204][ T3002] [ 335.712537][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 335.718699][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 335.727563][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 335.737628][ T3002] ================================================================== [ 335.868501][T13136] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.2152: corrupted xattr block 95: invalid header [ 335.870536][T13138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.882639][T13136] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.895166][T13138] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.895175][T13136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2152: bg 0: block 7: invalid block bitmap [ 335.895204][T13136] loop1: lost filesystem error report for type 5 error -117 [ 335.914752][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 335.914794][ C1] EXT4-fs (loop1): initial error at time 1771107371: ext4_expand_extra_isize_ea:2808: inode 11 [ 335.914840][ C1] EXT4-fs (loop1): last error at time 1771107371: ext4_expand_extra_isize_ea:2808: inode 11 [ 336.032324][T13136] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 336.069719][T13148] FAT-fs (loop5): Directory bread(block 64) failed [ 336.076345][T13148] FAT-fs (loop5): Directory bread(block 65) failed [ 336.083276][T13148] FAT-fs (loop5): Directory bread(block 66) failed [ 336.089879][T13148] FAT-fs (loop5): Directory bread(block 67) failed [ 336.096413][T13148] FAT-fs (loop5): Directory bread(block 68) failed [ 336.103049][T13148] FAT-fs (loop5): Directory bread(block 69) failed [ 336.109754][T13148] FAT-fs (loop5): Directory bread(block 70) failed [ 336.116320][T13148] FAT-fs (loop5): Directory bread(block 71) failed [ 336.122965][T13148] FAT-fs (loop5): Directory bread(block 72) failed [ 336.129546][T13148] FAT-fs (loop5): Directory bread(block 73) failed [ 336.215801][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.230717][T13136] loop1: lost filesystem error report for type 5 error -117 [ 336.231205][T13136] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.2152: corrupted xattr block 95: invalid header [ 336.260955][T13136] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 336.261361][T13136] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 336.281069][T13136] EXT4-fs (loop1): 1 orphan inode deleted [ 336.287401][T13136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.992070][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.