last executing test programs: 37.890646776s ago: executing program 0 (id=28): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000280012800b00010069703667726500001800028014000600fe8000000000000000000000000000aa08000a00", @ANYRES32=0x0, @ANYBLOB="c3ce43e42fe9aa9a8aa396e2df2c234d1e93b82013e62a6805fc3875dc0702220600000013e1ef068ca084ac65e370cf49f0000000000000000000009a6e15367c9bcde0b71b5bde4e1c9e288d98dae69f65c9d5e898f3a19f7a5e017e8949ff41214ab6384264c89f96db30f8ffb76be9bcd05d39440781308d5def871d6b1aaba5981ad43f1400"], 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) 37.27438163s ago: executing program 0 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000ebff000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec0000002100010028bd700000000000fc0200000000000000000000000000012001000000000000000000000000000200000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f6b66fd052000000000000000000000fc020000000000000000000000000001ff0100000000000000000000000000013c0400000000000002000a000a01210100000200000000080000000000000000000000000000000000000000ffffffff000000000000000000000000200100000000000000000000000000006c010000000000000a000200d5cdaff14028d3464f498291bc8dbefc0104000000000000a8d6b9b18b89ab277ff7f1a3ed425d6606f5cddb9a40315cc9c1b602e615a372c3b232b2b0e84e3af01319bd0a799b64261faa3a85ddfa62c4347583ced12bc2f8dcfdb7817f5efdffffff3e5db59428cc63a1a67f5cb96403008db4e0af989f2d9aa9b7655b8362de7e8d4d8eade1f84ac9317b979dce565ebf538a8ba3ecca32a96f17437c9b95ba43638a816b365db371f3da0740"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 37.095352224s ago: executing program 0 (id=37): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000880)={0x5, 0x80, 0x35, 0x5, 0x0, 0x4, 0x0, 0x200, 0xe6e6cb221b722633, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0x3}, 0x110000, 0x4, 0x0, 0x5, 0x101, 0xde, 0xda, 0x0, 0xfffffffc, 0x0, 0x69faa750}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x27001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, r1, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8003) fcntl$setlease(r2, 0x400, 0x2) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/38, 0x26}}], 0x1, 0x10003, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x212080, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}], [{@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x1, 0x50a, &(0x7f0000000340)="$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") r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4683090700810000000000000403003e00f9ffffffbf030000000000004000000000000000ff00000000000000350d00000104380001", @ANYRES16=r3], 0x78) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300)={[{@commit}]}, 0x7, 0x500, &(0x7f0000000c40)="$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") 36.835964611s ago: executing program 0 (id=40): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000040000000000000000080000000200000ffffff39562a92c0ce3ee24a83a1030ffff0700000000000000030000000700000003"], 0x0, 0x42}, 0x28) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000440)) gettid() syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503002c05000000004e907800000000000000000700000086ddffff00"/58], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000000)='3', 0x1, 0x4fed0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r9, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) 36.47942343s ago: executing program 0 (id=44): sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="f1", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @tail_call, @jmp={0x5, 0x0, 0x8, 0x8, 0x4, 0xfffffffffffffff4, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 36.267720095s ago: executing program 0 (id=46): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet6(0xa, 0x5, 0x0) fchown(r1, 0xee01, 0x0) 36.240420136s ago: executing program 32 (id=46): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet6(0xa, 0x5, 0x0) fchown(r1, 0xee01, 0x0) 12.627216541s ago: executing program 3 (id=341): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4010}}], 0x2, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 12.517403324s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4180) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000002040)) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) readv(r4, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) unshare(0x22020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x4932, 0x9, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r6, &(0x7f0000000300), 0x0}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008044) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r9, r10, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f0000000440)=[&(0x7f0000000240)='IPVS\x00', &(0x7f0000000400)=')\x00'], 0x0, 0x4}}, 0x30) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.522574453s ago: executing program 3 (id=372): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) setregid(r10, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) r13 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r14, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) fsetxattr$system_posix_acl(r3, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="020de673", @ANYRES32=r8, @ANYBLOB="040001000000000008000700", @ANYRES32=0xee00, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r15, @ANYBLOB="10000000000000002000040000000000"], 0x84, 0x2) setregid(0x0, r10) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 9.277653513s ago: executing program 3 (id=388): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="9d", 0x1}], 0x1, 0x5412, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7ccb, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x0, @val=@tracing={r7, 0x3ff}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=r3, @ANYBLOB="32b018e183f6f838a5889e5746b46464a79243895afcf4eaf280f9375f6d077ec9ec3755eb1e33c6a13dc4a08c1e54dc5906e2fb46098a9cf389c24080cdacc946cc7050957ccea0e199a4c61f72e9a9cda99f3ad6b518715ff365f34dd38d5c5a642a42a606077ae864130a13305a1848c3559cc2732ed2d61ff043b9b58efe7975a3d9b55b4115a5f1a922e6276a653c9e618d83d33e581335fa467659af8ab568bd11f2676d8c82a86607373862b02ca273855c9cb2d49bfaadb270a023a81e"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6, 0x4, @perf_config_ext={0x3, 0xdf52}, 0x11030, 0x2, 0xffffff7e, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9899}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000bf6100000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000008873e295a8088f5636e697e060d01e0000b70400000200000100"], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="19f9021455f512ec1a3baf22224885f7c258dc02e0ca78fa88be3a13fcdac8f65279bf38c19994d76c873c4be8bf6080025e792040f536695065d98d4a816838f35b7cb12da2660746ee7a39eaa863e06c97f935c29d9d5933ffc1a1b36fb87a15183eb815b43ee3ea0dfb13f7b034d16a8bc3040324e30c22ad35ba6ac98a9e143ac8ac8b91d647459e1521e42db1343d6ff42fc5df7a8c767dff8f3b34ef339bc81622e9ce15c1fd34dd4dd28e39e96cbf08eeb21ec3e7f2d9f5a79b1b0f672b25187ba77186a28b49c6deb0fc8f66389974dc931243ae28c755e06a87fd0290", @ANYRES64=0x0], 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.925572732s ago: executing program 4 (id=395): gettid() futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) read(r0, &(0x7f0000000040)=""/58, 0x3a) 8.779549186s ago: executing program 3 (id=396): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 8.710767847s ago: executing program 4 (id=397): socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) unshare(0x2a060400) poll(0x0, 0x0, 0x9) 8.619145139s ago: executing program 4 (id=401): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents64(r0, &(0x7f00000088c0)=""/42, 0x2a) getdents(r0, &(0x7f0000000300)=""/175, 0xaf) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x2}, {0x0, 0x1000000000000, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010101, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7, 0x0, 0x4, 0x8, 0x0, 0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 8.571984041s ago: executing program 4 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24048810) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x458c, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x1, 0x0, 0xfffffff5, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x6, 0x2, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r1, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r1, 0x2, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x3, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x4, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x0, 0x8, 0x6, 0x50, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x71, &(0x7f0000000440)=""/113, 0x41000, 0x42, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x3, 0x7, 0xffffffff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000ac0)=[{0x0, 0x3, 0x2, 0x8}, {0x3, 0x3, 0xb}, {0x2, 0x3, 0x7, 0x2}, {0x4, 0x4, 0xa, 0x3}, {0x2, 0x1, 0x8, 0x6}, {0x0, 0x1, 0x1, 0x2}], 0x10, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) 8.443521344s ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) 8.442469504s ago: executing program 33 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) 7.667468253s ago: executing program 4 (id=412): r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{0x0}], 0x1}, 0x48080) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) pipe(0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000040), 0x0, 0x56b, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) eventfd2(0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000100000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00H~* a]/S\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000b704000000000100850000003400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={0x0, 0x1294}, 0x1, 0x0, 0x0, 0x44810}, 0x800) 7.463579988s ago: executing program 1 (id=414): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 6.888628372s ago: executing program 4 (id=419): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = open(&(0x7f0000000080)='./dev\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) 6.671193807s ago: executing program 34 (id=419): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = open(&(0x7f0000000080)='./dev\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) 5.121160165s ago: executing program 1 (id=429): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, &(0x7f00000009c0)=0x1c, 0x80800) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000a00)='wg0\x00', 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="181100004147f95d54820f69c69c3fde740f12968ad18a5c7cb43340d0cc8e2d5033557e9b92110b3a2bdc05d2736e7cd6f635be7cb944748a4931b32b04cb5795c753ed75ff0455", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001800000015f2000000000000ff0f000085100000f8ffffff183a00000100"/104], &(0x7f0000000400)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0x1, 0x9}, 0x10, 0x2e84c, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x188, 0x0, &(0x7f0000000680)="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", 0x0, 0x404, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xc, 0x2b23}, 0x11ecca, 0x101224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x28, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000340)}, 0x24008004) alarm(0x8000000000000001) alarm(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 3.617125741s ago: executing program 1 (id=436): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x0) 3.549795763s ago: executing program 1 (id=437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 2.84538371s ago: executing program 6 (id=405): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb29, 0x1, @perf_bp, 0x880, 0x0, 0x4, 0x2, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x4, 0x7ffc0001}]}) shmctl$IPC_RMID(0x0, 0x0) (fail_nth: 4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) 2.837406991s ago: executing program 2 (id=443): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 2.347556032s ago: executing program 6 (id=445): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000480), &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfffffffffffffef9, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x38, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='[', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x100000}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.343696103s ago: executing program 2 (id=454): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x9, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000003800070166bd7000fedb9f25027c0000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0x1}, {0xd, 0x4}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1722}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xb}}]}}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005340), 0x0, 0x4000001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x154}}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x40, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x4, 0x2, 0x0, 0x7, 0x3}, 0x0, 0x0, r4, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1b000, 0x0, 0x0, 0x1, 0xd9b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffa, r5, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x891c, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "f3c3e58ebcd72021"}, 0x10}}, 0x40040) 2.007870681s ago: executing program 7 (id=420): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = epoll_create1(0x0) r4 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x1}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) 1.917862343s ago: executing program 2 (id=446): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x2, 0xa, 0x41, 0x7}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) eventfd(0x8101) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0b", 0x10}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, 0x0, 0x10063) shutdown(r4, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0xfe}}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.835410915s ago: executing program 7 (id=447): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26ebdf96313d519, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) unshare(0x6020400) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='cgroup\x00', 0xfffffffffffffffc, 0xffffffffffffff9c) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa30080, &(0x7f0000000500)={[{@usrquota}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@nolazytime}, {@minixdf}, {@orlov}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@resuid}], [{@obj_role={'obj_role', 0x3d, '|pu\t&0&&\t'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5ad, &(0x7f0000000b80)="$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") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140), &(0x7f0000000180)={'U-', 0x6}, 0x16, 0x3) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) read$eventfd(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1', 0x1) 1.664140089s ago: executing program 2 (id=450): gettid() futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/58, 0x3a) 1.420792925s ago: executing program 6 (id=455): r0 = socket$inet6(0xa, 0x80001, 0x0) fchdir(r0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x0, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x264c, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r4, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000600), 0x1) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r7, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004043}, 0x1404c090) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) pwritev2(r8, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, 0x2, 0x2e8b38e5, 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f00000000c0)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 1.21945787s ago: executing program 5 (id=456): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4528, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_config_ext={0x5, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) getpid() (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460", 0x32}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r5, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x872, 0x0, &(0x7f0000000b40)="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", 0x0, 0x0, 0x0, 0x8}, 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) (async) open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x50) 1.158720382s ago: executing program 5 (id=457): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 1.090797883s ago: executing program 6 (id=458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) (fail_nth: 1) 1.089791113s ago: executing program 7 (id=459): syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xd, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) 1.082375274s ago: executing program 5 (id=460): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc14002f004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 975.679656ms ago: executing program 5 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 975.139816ms ago: executing program 5 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x60) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c", @ANYRES32=r0], 0x1000f) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x804, 0x0) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, r4, 0x4, 0x8, '\x00', {0x9, 0x6, 0x5, 0x200, 0x8, 0xfb10000, 0x0, 0x80, {0x5, 0x37}, {0x7fff, 0x3}, {0x3ff, 0x4}, 0x3, 0x1, 0xff, 0x7, 0x400, 0x6fa, 0x5, 0x7, 0x3, 0x7de, '\x00', 0xa8a9, 0x1ff, 0x1000, 0x6}}) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x40001000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 798.19426ms ago: executing program 2 (id=463): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'vcan0\x00', 0x400}) (fail_nth: 1) 739.296012ms ago: executing program 6 (id=464): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8994, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbc6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x42032, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_subtree(r3, 0x0, 0x201, 0x0) syz_open_dev$vcsu(&(0x7f0000001000), 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000140), 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) read(r0, &(0x7f0000000400)=""/198, 0xc6) shmget$private(0x0, 0x2000, 0xa22, &(0x7f000056f000/0x2000)=nil) 549.059916ms ago: executing program 6 (id=465): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007c00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xfffff800, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr={{0x18, 0x29, 0x39, {0x8, 0x0, 0x2, 0x8}}}], 0x30}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 548.671016ms ago: executing program 1 (id=466): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 27.390759ms ago: executing program 1 (id=467): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0xf, 0x18}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x28, 0x12, 0xa01, 0x0, 0x0, {0x82}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d40)=""/246, 0xf6}, {0x0}], 0x2}, 0x7}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000080", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xa4, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x3, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000007000000185700000a0000000000000a216c4cecda000000000085000000400000001860000004000000000000007f00000085200000020000009500"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x1ff, 0x478}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000180)=[r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x0, 0x5, 0x1, 0xb}, {0x1, 0x1, 0xc, 0x8}, {0x2, 0x5, 0x10, 0x1}, {0x5, 0x1, 0x7}, {0x2, 0x3, 0x7, 0x5}, {0x1, 0x2, 0xe, 0xc}, {0x2, 0x5, 0x2, 0x1}, {0x3, 0x2, 0xc, 0x6}, {0x0, 0x1, 0xf, 0x1}, {0x3, 0x3, 0x9, 0xb}], 0x10, 0x1ff}, 0x94) r9 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETPID(r9, 0x2, 0xb, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, 0x0) 26.935159ms ago: executing program 5 (id=468): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x1, @perf_config_ext={0x5}, 0x0, 0x934, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000002c0)={0x8, 0x2, {0xffffffffffffffff, @usage=0x8, 0x0, 0x94a6, 0x2, 0x2, 0x4, 0x2, 0x480, @struct={0x3, 0x4}, 0x1000, 0x2, [0x5, 0x6, 0x2, 0xffffffff, 0x59ca, 0x10001]}, {0x5, @usage=0xf, 0x0, 0x8, 0x5, 0x40, 0x8, 0x6a, 0x44a, @struct={0x8}, 0x1, 0x9, [0xff, 0x3, 0xa21, 0x6, 0x47b, 0x2]}, {0x4, @usage=0x6, 0x0, 0xffffffffffffff61, 0x40000, 0x100000000, 0x3, 0x0, 0x6902779929cda147, @usage=0x1, 0x8, 0x8, [0x7, 0x8, 0xbc8, 0x4, 0x3, 0x6]}, {0x2, 0x6, 0x1}}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000011c0)={r6, 0x7, 0xd04a}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0x8, 0x2, {0x0, @struct={0x7, 0x1000}, r4, 0x5, 0x2, 0x2, 0xdd0, 0x9, 0x84, @usage=0x44b, 0x3, 0xaabc, [0x2, 0x18000000000, 0x1, 0x75, 0x5c79, 0xc41a]}, {0x6, @struct={0x3, 0x8}, r6, 0x4, 0x6, 0x6, 0x4, 0x6, 0x20, @usage=0x1, 0x2, 0x5, [0x1, 0x1ff, 0x5, 0x7, 0x4, 0x6ab]}, {0x5, @struct={0x3, 0x7ff}, 0x0, 0x5, 0x0, 0x5a, 0x80, 0x5, 0x42c, @usage=0x5000000000, 0x83, 0xc, [0x9, 0x4, 0x6784, 0x4, 0x7f, 0x8000000000000000]}, {0xfffffffffffffffe, 0x4a5, 0x9}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r6, "ab61f44c892d92682440664e30400703"}) 16.243109ms ago: executing program 7 (id=469): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000280)}) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) setns(0xc9, 0x0) socket(0x2a, 0x2, 0xd) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x308, 0x220, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xff000000, 0xf, 0x7, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, {[0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x0, 0x3, 0x4794, 0x9, 0x7fff, 'macvtap0\x00', 'team0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @private=0xa010100, @broadcast, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 0x1, 0x10, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xcf4b5403469f3cad, 0xff, 0xff]}}, 0x2, 0x63f, 0x80, 0x7ff, 0x8, 0xcb45, 'macsec0\x00', 'team0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="7f633373fcbc", @mac=@remote, @private=0xa010101, @multicast1, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 2 (id=470): unshare(0x24140000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000340)={0x13, 0x4, {0x4, @struct={0x80000002, 0x9}, 0x0, 0x8001, 0x0, 0x3ff, 0x88c7, 0x2, 0x22, @usage=0x8, 0x1, 0xa1, [0x5, 0x7, 0x0, 0x7d, 0x28000000000000, 0x1]}, {0x62680000000, @struct={0x10001, 0x7}, 0x0, 0x9, 0x3, 0x2, 0x400, 0x5, 0x0, @usage=0x3, 0xfffffff7, 0xc2d, [0x2, 0xfffffffffffffe00, 0x5, 0x8, 0x0, 0x1]}, {0xa0a, @usage=0x6, 0x0, 0x4, 0x7, 0x5, 0x8, 0x2, 0x0, @struct={0x7, 0xfffffb3b}, 0x4, 0x7fff, [0x2c6, 0x0, 0x7fffffffffffffff, 0x9, 0x5, 0x9]}, {0x3, 0x3, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000740)={r2, 0x9, 0x4b, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{r3, r4+60000000}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setreuid(0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r5, &(0x7f0000001f80)=""/4098, 0x1002) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @random="156307be2ebb", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @empty}}}}}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x110, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @empty, 0x1, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x6, 0x0, {@empty, {[0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x9, 0x9, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff, 0xff, 0x6, 0x5, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x6, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x181}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) kernel console output (not intermixed with test programs): t permissive=1 [ 42.167069][ T28] audit: type=1400 audit(1787530374.828:264): avc: denied { write } for pid=3681 comm="syz.4.53" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.169359][ T3676] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.251207][ T3676] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5 [ 42.264455][ T3691] mmap: syz.1.55 (3691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.284606][ T28] audit: type=1400 audit(1787530374.948:265): avc: denied { read } for pid=3675 comm="syz.2.52" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.330724][ T28] audit: type=1400 audit(1787530374.958:266): avc: denied { open } for pid=3675 comm="syz.2.52" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.626358][ T69] hsr_slave_0: left promiscuous mode [ 42.635228][ T69] hsr_slave_1: left promiscuous mode [ 42.643588][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.660164][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.678233][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.686001][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.733960][ T69] veth1_macvtap: left promiscuous mode [ 42.755598][ T69] veth0_macvtap: left promiscuous mode [ 42.774550][ T69] veth1_vlan: left promiscuous mode [ 42.789138][ T69] veth0_vlan: left promiscuous mode [ 42.891821][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.908843][ T28] audit: type=1400 audit(1787530375.588:267): avc: denied { write } for pid=3700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.959566][ T28] audit: type=1400 audit(1787530375.618:268): avc: denied { write } for pid=3715 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.986640][ T28] audit: type=1400 audit(1787530375.658:269): avc: denied { write } for pid=3717 comm="syz.4.56" name="dev" dev="proc" ino=4026532505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.056318][ T69] team0 (unregistering): Port device team_slave_1 removed [ 43.139167][ T69] team0 (unregistering): Port device team_slave_0 removed [ 43.183441][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.231378][ T3730] loop1: detected capacity change from 0 to 128 [ 43.260197][ T3730] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.280520][ T3730] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.392041][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.404523][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.417112][ T3661] bridge_slave_0: entered allmulticast mode [ 43.427512][ T3661] bridge_slave_0: entered promiscuous mode [ 43.436930][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.447226][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.458038][ T3661] bridge_slave_1: entered allmulticast mode [ 43.464887][ T3661] bridge_slave_1: entered promiscuous mode [ 43.480326][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.499131][ T3661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.514287][ T3661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.553789][ T3661] team0: Port device team_slave_0 added [ 43.565877][ T3661] team0: Port device team_slave_1 added [ 43.595280][ T3661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.602363][ T3661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.640286][ T3661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.656669][ T3661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.664769][ T3661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.692578][ T3661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.902009][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.926875][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.028543][ T3661] hsr_slave_0: entered promiscuous mode [ 44.041686][ T3661] hsr_slave_1: entered promiscuous mode [ 44.049637][ T3661] debugfs: 'hsr0' already exists in 'hsr' [ 44.055509][ T3661] Cannot create hsr debugfs directory [ 44.101473][ T3730] syz.1.60 (3730) used greatest stack depth: 9408 bytes left [ 44.102129][ T3790] loop2: detected capacity change from 0 to 512 [ 44.153239][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 44.222188][ T3661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.230618][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.260498][ T3661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.274655][ T312] IPVS: starting estimator thread 0... [ 44.275726][ T3661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.286940][ T3800] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 44.296491][ T3661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.310342][ T3661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.321843][ T3661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.330045][ T3661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.343879][ T3661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.368145][ T3801] IPVS: using max 2208 ests per chain, 110400 per kthread [ 44.928997][ T3823] loop2: detected capacity change from 0 to 512 [ 45.337864][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 45.543831][ T3661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.580947][ T3661] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.634416][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.641651][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.671923][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.679137][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.855316][ T3823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.890742][ T3823] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.056299][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 46.070102][ T3849] loop1: detected capacity change from 0 to 512 [ 46.089387][ T3849] ext3: Unknown parameter 'nouser_xattr' [ 46.146238][ T3661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.158948][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.332416][ T3874] loop4: detected capacity change from 0 to 164 [ 46.378548][ T3661] veth0_vlan: entered promiscuous mode [ 46.396848][ T3661] veth1_vlan: entered promiscuous mode [ 46.405255][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 46.418661][ T3874] veth0_virt_wifi: entered promiscuous mode [ 46.425028][ T3874] veth0_virt_wifi: entered allmulticast mode [ 46.434535][ T3661] veth0_macvtap: entered promiscuous mode [ 46.442294][ T3661] veth1_macvtap: entered promiscuous mode [ 46.453379][ T3661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.464827][ T3661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.487786][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.496609][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.506850][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.532960][ T3885] loop5: detected capacity change from 0 to 256 [ 46.539497][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.835280][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.984939][ T3894] loop2: detected capacity change from 0 to 512 [ 47.074117][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 47.074133][ T28] audit: type=1400 audit(1787530379.698:304): avc: denied { setopt } for pid=3893 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.141217][ T28] audit: type=1326 audit(1787530379.708:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.171494][ T28] audit: type=1326 audit(1787530379.708:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.201789][ T28] audit: type=1326 audit(1787530379.708:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.229327][ T28] audit: type=1326 audit(1787530379.708:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.305151][ T28] audit: type=1326 audit(1787530379.718:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.395442][ T28] audit: type=1326 audit(1787530379.778:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256dd9e0d9 code=0x7ffc0000 [ 47.460882][ T28] audit: type=1326 audit(1787530379.778:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f256dd9de42 code=0x7ffc0000 [ 47.522373][ T28] audit: type=1326 audit(1787530379.778:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f256dd9ded7 code=0x7ffc0000 [ 47.637664][ T3903] FAULT_INJECTION: forcing a failure. [ 47.637664][ T3903] name failslab, interval 1, probability 0, space 0, times 0 [ 47.684418][ T28] audit: type=1326 audit(1787530379.788:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.2.81" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f256dd5add1 code=0x7ffc0000 [ 47.721108][ T3903] CPU: 1 UID: 0 PID: 3903 Comm: syz.5.85 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.721225][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.721242][ T3903] Call Trace: [ 47.721251][ T3903] [ 47.721261][ T3903] __dump_stack+0x1d/0x30 [ 47.721286][ T3903] dump_stack_lvl+0x95/0xd0 [ 47.721372][ T3903] dump_stack+0x15/0x1b [ 47.721445][ T3903] should_fail_ex+0x262/0x280 [ 47.721485][ T3903] should_failslab+0x8c/0xb0 [ 47.721524][ T3903] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 47.721558][ T3903] ? __alloc_skb+0x2e0/0x6f0 [ 47.721667][ T3903] ? __alloc_skb+0x2e0/0x6f0 [ 47.721765][ T3903] __alloc_skb+0x2e0/0x6f0 [ 47.721849][ T3903] ? __alloc_skb+0x209/0x6f0 [ 47.721957][ T3903] alloc_skb_with_frags+0x7e/0x3d0 [ 47.721988][ T3903] sock_alloc_send_pskb+0x44d/0x500 [ 47.722088][ T3903] ? timerqueue_linked_add+0x1a9/0x1f0 [ 47.722124][ T3903] __ip_append_data+0x1861/0x23a0 [ 47.722170][ T3903] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 47.722281][ T3903] ? __rcu_read_unlock+0x4e/0x70 [ 47.722320][ T3903] ? ipv4_mtu+0x205/0x230 [ 47.722352][ T3903] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 47.722440][ T3903] ip_make_skb+0x150/0x2d0 [ 47.722480][ T3903] udp_sendmsg+0x1056/0x14e0 [ 47.722527][ T3903] udpv6_sendmsg+0x8ee/0x1700 [ 47.722612][ T3903] ? __rcu_read_unlock+0x4e/0x70 [ 47.722664][ T3903] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 47.722698][ T3903] ? __pfx_inet6_sendmsg+0x10/0x10 [ 47.722802][ T3903] inet6_sendmsg+0xac/0xd0 [ 47.722832][ T3903] sock_write_iter+0x21c/0x2f0 [ 47.722931][ T3903] ? __pfx_sock_write_iter+0x10/0x10 [ 47.722959][ T3903] vfs_write+0x57f/0x9a0 [ 47.723010][ T3903] ksys_write+0xdc/0x1a0 [ 47.723039][ T3903] __x64_sys_write+0x40/0x50 [ 47.723069][ T3903] x64_sys_call+0x154e/0x2550 [ 47.723103][ T3903] do_syscall_64+0x112/0x360 [ 47.723193][ T3903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.723223][ T3903] RIP: 0033:0x7fe96e22e0d9 [ 47.723244][ T3903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.723268][ T3903] RSP: 002b:00007fe96cc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.723328][ T3903] RAX: ffffffffffffffda RBX: 00007fe96e4b5fa0 RCX: 00007fe96e22e0d9 [ 47.723345][ T3903] RDX: 000000000000000b RSI: 0000200000000c40 RDI: 0000000000000003 [ 47.723358][ T3903] RBP: 00007fe96cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 47.723371][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.723383][ T3903] R13: 00007fe96e4b6038 R14: 00007fe96e4b5fa0 R15: 00007ffdca2a0208 [ 47.723408][ T3903] [ 48.094412][ T3916] tmpfs: Bad value for 'mpol' [ 48.187669][ T3920] loop2: detected capacity change from 0 to 1024 [ 48.209098][ T3920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 48.218095][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.218198][ T3859] Bluetooth: hci0: command 0x1003 tx timeout [ 48.372455][ T3933] loop1: detected capacity change from 0 to 512 [ 48.400237][ T3933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.403553][ T3920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.423826][ T3933] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.523115][ T3930] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.625696][ T3944] unsupported nla_type 15750 [ 48.699722][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.738092][ T3951] loop1: detected capacity change from 0 to 128 [ 48.763892][ T3951] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.769498][ T3955] FAULT_INJECTION: forcing a failure. [ 48.769498][ T3955] name failslab, interval 1, probability 0, space 0, times 0 [ 48.800984][ T3955] CPU: 1 UID: 0 PID: 3955 Comm: syz.5.103 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.801021][ T3955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.801111][ T3955] Call Trace: [ 48.801120][ T3955] [ 48.801130][ T3955] __dump_stack+0x1d/0x30 [ 48.801232][ T3955] dump_stack_lvl+0x95/0xd0 [ 48.801254][ T3955] dump_stack+0x15/0x1b [ 48.801276][ T3955] should_fail_ex+0x262/0x280 [ 48.801386][ T3955] ? __se_sys_memfd_create+0x1df/0x3b0 [ 48.801415][ T3955] should_failslab+0x8c/0xb0 [ 48.801472][ T3955] __kmalloc_cache_noprof+0x7b/0x3f0 [ 48.801507][ T3955] ? __se_sys_memfd_create+0x1df/0x3b0 [ 48.801647][ T3955] __se_sys_memfd_create+0x1df/0x3b0 [ 48.801723][ T3955] __x64_sys_memfd_create+0x31/0x40 [ 48.801747][ T3955] x64_sys_call+0x1955/0x2550 [ 48.801777][ T3955] do_syscall_64+0x112/0x360 [ 48.801825][ T3955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.801931][ T3955] RIP: 0033:0x7fe96e22e0d9 [ 48.801950][ T3955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.801996][ T3955] RSP: 002b:00007fe96cc86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 48.802022][ T3955] RAX: ffffffffffffffda RBX: 000000000000054d RCX: 00007fe96e22e0d9 [ 48.802079][ T3955] RDX: 00007fe96cc86ee0 RSI: 0000000000000000 RDI: 00007fe96e2c5204 [ 48.802164][ T3955] RBP: 0000200000000780 R08: 00000000ffffffff R09: 0000000000000000 [ 48.802177][ T3955] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000006c0 [ 48.802190][ T3955] R13: 00007fe96cc86ee0 R14: 00007fe96cc86ea0 R15: 00002000000001c0 [ 48.802210][ T3955] [ 48.807687][ T3951] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.831821][ T3920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.987315][ T3959] loop5: detected capacity change from 0 to 512 [ 49.041085][ T3959] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.051786][ T3959] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 49.117682][ T3963] loop5: detected capacity change from 0 to 128 [ 49.129891][ T3963] EXT4-fs: Ignoring removed bh option [ 49.141490][ T3963] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.194203][ T3963] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.316886][ T3661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.446493][ T3980] loop4: detected capacity change from 0 to 512 [ 49.459947][ T3980] EXT4-fs (loop4): 1 truncate cleaned up [ 49.462780][ T3920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.471224][ T3980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.502904][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.623377][ T3920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.663003][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.689164][ T3996] FAULT_INJECTION: forcing a failure. [ 49.689164][ T3996] name failslab, interval 1, probability 0, space 0, times 0 [ 49.705873][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: syz.1.117 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.705946][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.705963][ T3996] Call Trace: [ 49.705971][ T3996] [ 49.706000][ T3996] __dump_stack+0x1d/0x30 [ 49.706064][ T3996] dump_stack_lvl+0x95/0xd0 [ 49.706156][ T3996] dump_stack+0x15/0x1b [ 49.706183][ T3996] should_fail_ex+0x262/0x280 [ 49.706313][ T3996] should_failslab+0x8c/0xb0 [ 49.706402][ T3996] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 49.706435][ T3996] ? alloc_empty_file+0x70/0x1e0 [ 49.706503][ T3996] ? alloc_empty_file+0x70/0x1e0 [ 49.706563][ T3996] alloc_empty_file+0x70/0x1e0 [ 49.706636][ T3996] path_openat+0x50/0x10d0 [ 49.706668][ T3996] ? kstrtouint+0x76/0xc0 [ 49.706734][ T3996] do_file_open+0x16c/0x290 [ 49.706818][ T3996] do_sys_openat2+0xa0/0x130 [ 49.706862][ T3996] __x64_sys_openat+0xf2/0x120 [ 49.706964][ T3996] x64_sys_call+0x1f72/0x2550 [ 49.706994][ T3996] do_syscall_64+0x112/0x360 [ 49.707030][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.707140][ T3996] RIP: 0033:0x7fec4f8be0d9 [ 49.707164][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.707254][ T3996] RSP: 002b:00007fec4e317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.707275][ T3996] RAX: ffffffffffffffda RBX: 00007fec4fb45fa0 RCX: 00007fec4f8be0d9 [ 49.707290][ T3996] RDX: 0000000000000001 RSI: 0000200000001700 RDI: ffffffffffffff9c [ 49.707376][ T3996] RBP: 00007fec4e317090 R08: 0000000000000000 R09: 0000000000000000 [ 49.707443][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.707457][ T3996] R13: 00007fec4fb46038 R14: 00007fec4fb45fa0 R15: 00007fff84a559a8 [ 49.707489][ T3996] [ 49.906571][ T3997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.948233][ T3997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.965903][ T4001] loop5: detected capacity change from 0 to 512 [ 49.979997][ T3987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37902 sclass=netlink_route_socket pid=3987 comm=syz.3.113 [ 50.005093][ T4001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.037471][ T4001] EXT4-fs: Ignoring removed nobh option [ 50.046933][ T4001] EXT4-fs: Ignoring removed oldalloc option [ 50.059063][ T4001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.077952][ T4001] EXT4-fs: Ignoring removed bh option [ 50.098223][ T4001] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 50.272399][ T4024] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 50.282221][ T4024] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.127'. [ 50.294648][ T4024] netlink: 9 bytes leftover after parsing attributes in process `syz.1.127'. [ 50.325276][ T4029] FAULT_INJECTION: forcing a failure. [ 50.325276][ T4029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.353796][ T4029] CPU: 1 UID: 0 PID: 4029 Comm: syz.5.130 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.353832][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.353846][ T4029] Call Trace: [ 50.353852][ T4029] [ 50.353936][ T4029] __dump_stack+0x1d/0x30 [ 50.353968][ T4029] dump_stack_lvl+0x95/0xd0 [ 50.354012][ T4029] dump_stack+0x15/0x1b [ 50.354036][ T4029] should_fail_ex+0x262/0x280 [ 50.354068][ T4029] should_fail+0xb/0x20 [ 50.354166][ T4029] should_fail_usercopy+0x1a/0x20 [ 50.354211][ T4029] _copy_from_user+0x1c/0xb0 [ 50.354248][ T4029] __sys_bpf+0x1e2/0xc30 [ 50.354275][ T4029] ? get_pid_task+0x92/0xc0 [ 50.354336][ T4029] ? vfs_write+0x7e0/0x9a0 [ 50.354372][ T4029] __x64_sys_bpf+0x69/0x80 [ 50.354457][ T4029] x64_sys_call+0xf26/0x2550 [ 50.354488][ T4029] do_syscall_64+0x112/0x360 [ 50.354522][ T4029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.354544][ T4029] RIP: 0033:0x7fe96e22e0d9 [ 50.354591][ T4029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.354609][ T4029] RSP: 002b:00007fe96cc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.354633][ T4029] RAX: ffffffffffffffda RBX: 00007fe96e4b5fa0 RCX: 00007fe96e22e0d9 [ 50.354647][ T4029] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 50.354661][ T4029] RBP: 00007fe96cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 50.354673][ T4029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.354685][ T4029] R13: 00007fe96e4b6038 R14: 00007fe96e4b5fa0 R15: 00007ffdca2a0208 [ 50.354704][ T4029] [ 50.542594][ T4034] loop4: detected capacity change from 0 to 128 [ 50.565998][ T4037] loop5: detected capacity change from 0 to 1024 [ 50.576198][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.132'. [ 50.578168][ T4034] EXT4-fs: Ignoring removed bh option [ 50.598814][ T4034] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.611240][ T4034] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.649598][ T4042] loop5: detected capacity change from 0 to 128 [ 50.668991][ T4042] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 50.676755][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.688651][ T4042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 50.726143][ T3661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.752200][ T4047] loop3: detected capacity change from 0 to 512 [ 50.772857][ T4047] ext4: Unknown parameter 'noacl' [ 50.789340][ T4052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.843831][ T4052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.881587][ T4058] syz.4.135 uses obsolete (PF_INET,SOCK_PACKET) [ 50.896158][ T4058] FAULT_INJECTION: forcing a failure. [ 50.896158][ T4058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.909946][ T4058] CPU: 1 UID: 0 PID: 4058 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.909973][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.909988][ T4058] Call Trace: [ 50.909997][ T4058] [ 50.910007][ T4058] __dump_stack+0x1d/0x30 [ 50.910039][ T4058] dump_stack_lvl+0x95/0xd0 [ 50.910108][ T4058] dump_stack+0x15/0x1b [ 50.910134][ T4058] should_fail_ex+0x262/0x280 [ 50.910176][ T4058] should_fail+0xb/0x20 [ 50.910231][ T4058] should_fail_usercopy+0x1a/0x20 [ 50.910263][ T4058] _copy_to_user+0x20/0xa0 [ 50.910282][ T4058] simple_read_from_buffer+0xb5/0x130 [ 50.910363][ T4058] proc_fail_nth_read+0x10e/0x150 [ 50.910411][ T4058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.910446][ T4058] vfs_read+0x18e/0x7c0 [ 50.910470][ T4058] ? __rcu_read_unlock+0x4e/0x70 [ 50.910576][ T4058] ? __fget_files+0x184/0x1c0 [ 50.910614][ T4058] ? mutex_lock+0x57/0x90 [ 50.910717][ T4058] ksys_read+0xdc/0x1a0 [ 50.910747][ T4058] __x64_sys_read+0x40/0x50 [ 50.910772][ T4058] x64_sys_call+0x2135/0x2550 [ 50.910803][ T4058] do_syscall_64+0x112/0x360 [ 50.910910][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.910940][ T4058] RIP: 0033:0x7f070232e90e [ 50.910956][ T4058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.910974][ T4058] RSP: 002b:00007f0700da5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.910994][ T4058] RAX: ffffffffffffffda RBX: 00007f0700da66c0 RCX: 00007f070232e90e [ 50.911043][ T4058] RDX: 000000000000000f RSI: 00007f0700da60a0 RDI: 0000000000000009 [ 50.911060][ T4058] RBP: 00007f0700da6090 R08: 0000000000000000 R09: 0000000000000000 [ 50.911154][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.911167][ T4058] R13: 00007f07025f6128 R14: 00007f07025f6090 R15: 00007ffff3ed5328 [ 50.911188][ T4058] [ 51.160562][ T4052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.188053][ T4065] netlink: 36 bytes leftover after parsing attributes in process `syz.5.143'. [ 51.226568][ T4067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 51.248961][ T4052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.326213][ T4079] EXT4-fs: Ignoring removed bh option [ 51.336221][ T4084] xt_hashlimit: size too large, truncated to 1048576 [ 51.358989][ T4079] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.378139][ T4085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.398967][ T4079] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.433701][ T363] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.481158][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.486022][ T3661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.540099][ T4085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.407258][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 52.407277][ T28] audit: type=1326 audit(1787530385.078:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4f8be0d9 code=0x7ffc0000 [ 52.446518][ T28] audit: type=1326 audit(1787530385.078:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4f8be0d9 code=0x7ffc0000 [ 52.448197][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.475403][ T28] audit: type=1326 audit(1787530385.078:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4f8be0d9 code=0x7ffc0000 [ 52.507535][ T28] audit: type=1326 audit(1787530385.078:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fec4f8be0d9 code=0x7ffc0000 [ 52.533835][ T28] audit: type=1326 audit(1787530385.078:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4f8be0d9 code=0x7ffc0000 [ 52.560011][ T28] audit: type=1326 audit(1787530385.148:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec4f87e90e code=0x7ffc0000 [ 52.585737][ T28] audit: type=1326 audit(1787530385.178:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec4f87e90e code=0x7ffc0000 [ 52.611457][ T28] audit: type=1326 audit(1787530385.208:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec4f87e90e code=0x7ffc0000 [ 52.637431][ T28] audit: type=1326 audit(1787530385.238:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec4f87e90e code=0x7ffc0000 [ 52.639089][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670927][ T28] audit: type=1326 audit(1787530385.258:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec4f87e90e code=0x7ffc0000 [ 52.735192][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.159'. [ 52.738999][ T4085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.773925][ T4085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.794201][ T4112] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.159: Failed to acquire dquot type 0 [ 52.805540][ T4112] loop4: lost filesystem error report for type 5 error -5 [ 52.808538][ T4112] EXT4-fs (loop4): 1 truncate cleaned up [ 52.817781][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 52.827904][ C1] EXT4-fs (loop4): initial error at time 1787530385: ext4_acquire_dquot:7069 [ 52.835792][ T4112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.836707][ C1] EXT4-fs (loop4): last error at time 1787530385: ext4_acquire_dquot:7069 [ 52.873557][ T4112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.918595][ T312] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.934119][ T312] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.957887][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.978318][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.163083][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 53.174500][ T4134] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 53.195088][ T4135] raw_sendmsg: syz.3.167 forgot to set AF_INET. Fix it! [ 53.211868][ T4134] capability: warning: `syz.5.168' uses 32-bit capabilities (legacy support in use) [ 53.222863][ T4134] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 53.231773][ T4134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.306498][ T4139] erspan0: entered promiscuous mode [ 53.316779][ T4141] erspan0: entered promiscuous mode [ 53.387615][ T4149] geneve1: entered promiscuous mode [ 53.408511][ T4141] FAULT_INJECTION: forcing a failure. [ 53.408511][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.464777][ T4141] CPU: 1 UID: 0 PID: 4141 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.464816][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.464836][ T4141] Call Trace: [ 53.464846][ T4141] [ 53.464857][ T4141] __dump_stack+0x1d/0x30 [ 53.464892][ T4141] dump_stack_lvl+0x95/0xd0 [ 53.464922][ T4141] dump_stack+0x15/0x1b [ 53.464989][ T4141] should_fail_ex+0x262/0x280 [ 53.465032][ T4141] should_fail+0xb/0x20 [ 53.465120][ T4141] should_fail_usercopy+0x1a/0x20 [ 53.465184][ T4141] _copy_from_user+0x1c/0xb0 [ 53.465209][ T4141] ___sys_sendmsg+0xc1/0x1e0 [ 53.465255][ T4141] __x64_sys_sendmsg+0xd4/0x160 [ 53.465290][ T4141] x64_sys_call+0x22ab/0x2550 [ 53.465386][ T4141] do_syscall_64+0x112/0x360 [ 53.465421][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.465447][ T4141] RIP: 0033:0x7f070236e0d9 [ 53.465466][ T4141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.465515][ T4141] RSP: 002b:00007f0700dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.465565][ T4141] RAX: ffffffffffffffda RBX: 00007f07025f5fa0 RCX: 00007f070236e0d9 [ 53.465584][ T4141] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 000000000000000a [ 53.465601][ T4141] RBP: 00007f0700dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.465616][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.465629][ T4141] R13: 00007f07025f6038 R14: 00007f07025f5fa0 R15: 00007ffff3ed5328 [ 53.465655][ T4141] [ 53.684536][ T4154] set_capacity_and_notify: 5 callbacks suppressed [ 53.684556][ T4154] loop4: detected capacity change from 0 to 1764 [ 53.706659][ T4157] loop1: detected capacity change from 0 to 256 [ 54.009523][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.169'. [ 54.050117][ T4166] xt_hashlimit: size too large, truncated to 1048576 [ 54.337323][ T4172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'. [ 54.535450][ T4183] loop1: detected capacity change from 0 to 1024 [ 54.722739][ T4203] program syz.5.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.723474][ T4198] FAULT_INJECTION: forcing a failure. [ 54.723474][ T4198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.749695][ T4179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 54.789431][ T4198] CPU: 1 UID: 0 PID: 4198 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.789460][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.789493][ T4198] Call Trace: [ 54.789503][ T4198] [ 54.789513][ T4198] __dump_stack+0x1d/0x30 [ 54.789545][ T4198] dump_stack_lvl+0x95/0xd0 [ 54.789574][ T4198] dump_stack+0x15/0x1b [ 54.789600][ T4198] should_fail_ex+0x262/0x280 [ 54.789652][ T4198] should_fail+0xb/0x20 [ 54.789688][ T4198] should_fail_usercopy+0x1a/0x20 [ 54.789731][ T4198] _copy_from_user+0x1c/0xb0 [ 54.789816][ T4198] ___sys_recvmsg+0xaa/0x3a0 [ 54.789842][ T4198] ? _parse_integer+0x27/0x40 [ 54.789956][ T4198] do_recvmmsg+0x1e5/0x560 [ 54.790033][ T4198] ? fput+0x91/0xc0 [ 54.790067][ T4198] __x64_sys_recvmmsg+0xe5/0x170 [ 54.790153][ T4198] x64_sys_call+0x77f/0x2550 [ 54.790181][ T4198] do_syscall_64+0x112/0x360 [ 54.790261][ T4198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.790284][ T4198] RIP: 0033:0x7ff5e7b4e0d9 [ 54.790299][ T4198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.790322][ T4198] RSP: 002b:00007ff5e65a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 54.790414][ T4198] RAX: ffffffffffffffda RBX: 00007ff5e7dd5fa0 RCX: 00007ff5e7b4e0d9 [ 54.790431][ T4198] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000004 [ 54.790449][ T4198] RBP: 00007ff5e65a7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.790466][ T4198] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 54.790484][ T4198] R13: 00007ff5e7dd6038 R14: 00007ff5e7dd5fa0 R15: 00007ffd84d0a7a8 [ 54.790591][ T4198] [ 54.857674][ T4203] loop5: detected capacity change from 0 to 8192 [ 54.980637][ T4207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4207 comm=syz.2.188 [ 54.999110][ T4154] 9p: Bad value for 'rfdno' [ 55.166096][ T4223] netlink: 'syz.1.194': attribute type 14 has an invalid length. [ 55.196110][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 55.210044][ T4228] loop3: detected capacity change from 0 to 256 [ 55.219209][ T4223] bond0: option xmit_hash_policy: invalid value (254) [ 55.227027][ T4228] msdos: Bad value for 'umask' [ 55.388799][ T4246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 55.427977][ T4246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 55.492115][ T4259] syz.4.201 (4259): /proc/4257/oom_adj is deprecated, please use /proc/4257/oom_score_adj instead. [ 55.598539][ T4275] loop3: detected capacity change from 0 to 256 [ 55.607071][ T4275] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 55.621017][ T4275] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 55.654549][ T4275] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 55.680753][ T4281] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 55.738243][ T4277] FAULT_INJECTION: forcing a failure. [ 55.738243][ T4277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.783345][ T4277] CPU: 1 UID: 0 PID: 4277 Comm: syz.5.206 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.783381][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.783399][ T4277] Call Trace: [ 55.783407][ T4277] [ 55.783417][ T4277] __dump_stack+0x1d/0x30 [ 55.783455][ T4277] dump_stack_lvl+0x95/0xd0 [ 55.783485][ T4277] dump_stack+0x15/0x1b [ 55.783528][ T4277] should_fail_ex+0x262/0x280 [ 55.783569][ T4277] should_fail+0xb/0x20 [ 55.783607][ T4277] should_fail_usercopy+0x1a/0x20 [ 55.783681][ T4277] _copy_from_user+0x1c/0xb0 [ 55.783705][ T4277] ___sys_sendmsg+0xc1/0x1e0 [ 55.783754][ T4277] __x64_sys_sendmsg+0xd4/0x160 [ 55.783781][ T4277] x64_sys_call+0x22ab/0x2550 [ 55.783814][ T4277] do_syscall_64+0x112/0x360 [ 55.783860][ T4277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.783965][ T4277] RIP: 0033:0x7fe96e22e0d9 [ 55.783986][ T4277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.784121][ T4277] RSP: 002b:00007fe96cc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.784165][ T4277] RAX: ffffffffffffffda RBX: 00007fe96e4b5fa0 RCX: 00007fe96e22e0d9 [ 55.784183][ T4277] RDX: 0000000000040810 RSI: 00002000000009c0 RDI: 0000000000000004 [ 55.784200][ T4277] RBP: 00007fe96cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 55.784217][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.784234][ T4277] R13: 00007fe96e4b6038 R14: 00007fe96e4b5fa0 R15: 00007ffdca2a0208 [ 55.784279][ T4277] [ 55.905048][ T4302] FAULT_INJECTION: forcing a failure. [ 55.905048][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 55.981245][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.981274][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.981290][ T4302] Call Trace: [ 55.981376][ T4302] [ 55.981386][ T4302] __dump_stack+0x1d/0x30 [ 55.981418][ T4302] dump_stack_lvl+0x95/0xd0 [ 55.981523][ T4302] dump_stack+0x15/0x1b [ 55.981544][ T4302] should_fail_ex+0x262/0x280 [ 55.981624][ T4302] should_failslab+0x8c/0xb0 [ 55.981653][ T4302] __kmalloc_noprof+0xd4/0x4c0 [ 55.981678][ T4302] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 55.981712][ T4302] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 55.981811][ T4302] kernfs_fop_write_iter+0xd4/0x2e0 [ 55.981905][ T4302] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 55.981944][ T4302] vfs_write+0x57f/0x9a0 [ 55.982045][ T4302] ksys_write+0xdc/0x1a0 [ 55.982069][ T4302] __x64_sys_write+0x40/0x50 [ 55.982161][ T4302] x64_sys_call+0x154e/0x2550 [ 55.982194][ T4302] do_syscall_64+0x112/0x360 [ 55.982235][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.982265][ T4302] RIP: 0033:0x7ff5e7b4e0d9 [ 55.982286][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.982321][ T4302] RSP: 002b:00007ff5e65a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.982401][ T4302] RAX: ffffffffffffffda RBX: 00007ff5e7dd5fa0 RCX: 00007ff5e7b4e0d9 [ 55.982415][ T4302] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000003 [ 55.982428][ T4302] RBP: 00007ff5e65a7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.982441][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.982453][ T4302] R13: 00007ff5e7dd6038 R14: 00007ff5e7dd5fa0 R15: 00007ffd84d0a7a8 [ 55.982473][ T4302] [ 56.216713][ T4311] capability: warning: `syz.5.214' uses deprecated v2 capabilities in a way that may be insecure [ 56.424903][ T4335] FAULT_INJECTION: forcing a failure. [ 56.424903][ T4335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.438182][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.438241][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.438258][ T4335] Call Trace: [ 56.438267][ T4335] [ 56.438278][ T4335] __dump_stack+0x1d/0x30 [ 56.438374][ T4335] dump_stack_lvl+0x95/0xd0 [ 56.438407][ T4335] dump_stack+0x15/0x1b [ 56.438459][ T4335] should_fail_ex+0x262/0x280 [ 56.438501][ T4335] should_fail+0xb/0x20 [ 56.438596][ T4335] should_fail_usercopy+0x1a/0x20 [ 56.438647][ T4335] _copy_from_user+0x1c/0xb0 [ 56.438673][ T4335] ___sys_sendmsg+0xc1/0x1e0 [ 56.438715][ T4335] __x64_sys_sendmsg+0xd4/0x160 [ 56.438763][ T4335] x64_sys_call+0x22ab/0x2550 [ 56.438797][ T4335] do_syscall_64+0x112/0x360 [ 56.438843][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.438873][ T4335] RIP: 0033:0x7ff5e7b4e0d9 [ 56.438895][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.438968][ T4335] RSP: 002b:00007ff5e65a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.438994][ T4335] RAX: ffffffffffffffda RBX: 00007ff5e7dd5fa0 RCX: 00007ff5e7b4e0d9 [ 56.439013][ T4335] RDX: 0000000000040810 RSI: 00002000000009c0 RDI: 0000000000000004 [ 56.439030][ T4335] RBP: 00007ff5e65a7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.439072][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.439088][ T4335] R13: 00007ff5e7dd6038 R14: 00007ff5e7dd5fa0 R15: 00007ffd84d0a7a8 [ 56.439114][ T4335] [ 56.469187][ T4330] loop2: detected capacity change from 0 to 512 [ 56.521516][ T4322] loop5: detected capacity change from 0 to 1024 [ 56.716843][ T4350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4350 comm=syz.1.226 [ 56.746810][ T4330] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 56.765069][ T4330] EXT4-fs (loop2): 1 truncate cleaned up [ 56.766536][ T4322] __nla_validate_parse: 1 callbacks suppressed [ 56.766583][ T4322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.218'. [ 56.771278][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.787695][ T4330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.941536][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 57.088805][ T4384] FAULT_INJECTION: forcing a failure. [ 57.088805][ T4384] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.104179][ T4384] CPU: 0 UID: 0 PID: 4384 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.104206][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.104219][ T4384] Call Trace: [ 57.104227][ T4384] [ 57.104235][ T4384] __dump_stack+0x1d/0x30 [ 57.104267][ T4384] dump_stack_lvl+0x95/0xd0 [ 57.104359][ T4384] dump_stack+0x15/0x1b [ 57.104380][ T4384] should_fail_ex+0x262/0x280 [ 57.104464][ T4384] should_fail_alloc_page+0xf2/0x100 [ 57.104556][ T4384] __alloc_frozen_pages_noprof+0x157/0x400 [ 57.104597][ T4384] alloc_pages_mpol+0xaf/0x1d0 [ 57.104659][ T4384] alloc_pages_noprof+0x94/0x140 [ 57.104697][ T4384] __pmd_alloc+0x47/0x430 [ 57.104790][ T4384] handle_mm_fault+0x2b04/0x3ae0 [ 57.104830][ T4384] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 57.104869][ T4384] do_user_addr_fault+0x404/0x1060 [ 57.104972][ T4384] exc_page_fault+0x62/0xa0 [ 57.105000][ T4384] asm_exc_page_fault+0x26/0x30 [ 57.105023][ T4384] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 57.105057][ T4384] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 57.105100][ T4384] RSP: 0018:ffffc9000173fcf0 EFLAGS: 00050216 [ 57.105123][ T4384] RAX: 352020205b3e343c RBX: 0000000000000036 RCX: 0000000000000036 [ 57.105141][ T4384] RDX: 0000000000000000 RSI: ffff888121311800 RDI: 0000200000003ac0 [ 57.105189][ T4384] RBP: 0000000000000000 R08: 0000000000000483 R09: 0000000000000000 [ 57.105206][ T4384] R10: 0001888121311800 R11: 0001888121311835 R12: 0000200000003af6 [ 57.105222][ T4384] R13: 00007ffffffff000 R14: 0000200000003ac0 R15: ffff888121311800 [ 57.105242][ T4384] _copy_to_user+0x7c/0xa0 [ 57.105261][ T4384] syslog_print_all+0x1e6/0x3c0 [ 57.105335][ T4384] do_syslog+0x2fd/0x7f0 [ 57.105373][ T4384] ? ksys_write+0x194/0x1a0 [ 57.105399][ T4384] __x64_sys_syslog+0x41/0x50 [ 57.105427][ T4384] x64_sys_call+0x1d36/0x2550 [ 57.105485][ T4384] do_syscall_64+0x112/0x360 [ 57.105536][ T4384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.105565][ T4384] RIP: 0033:0x7f070236e0d9 [ 57.105584][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.105602][ T4384] RSP: 002b:00007f0700dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 57.105623][ T4384] RAX: ffffffffffffffda RBX: 00007f07025f5fa0 RCX: 00007f070236e0d9 [ 57.105642][ T4384] RDX: 0000000000001000 RSI: 0000200000003ac0 RDI: 0000000000000004 [ 57.105667][ T4384] RBP: 00007f0700dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.105682][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.105694][ T4384] R13: 00007f07025f6038 R14: 00007f07025f5fa0 R15: 00007ffff3ed5328 [ 57.105713][ T4384] [ 57.413957][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 57.414012][ T28] audit: type=1400 audit(1787530390.088:699): avc: denied { mount } for pid=4379 comm="syz.3.236" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.612545][ T28] audit: type=1400 audit(1787530390.288:700): avc: denied { mount } for pid=4392 comm="syz.3.241" name="/" dev="hugetlbfs" ino=7893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.630215][ T4398] hugetlbfs: Bad value for 'nr_inodes' [ 57.660098][ T28] audit: type=1400 audit(1787530390.288:701): avc: denied { remount } for pid=4392 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.775557][ T28] audit: type=1400 audit(1787530390.448:702): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.942563][ T4415] loop5: detected capacity change from 0 to 512 [ 57.970642][ T4415] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 58.074492][ T4419] loop3: detected capacity change from 0 to 1024 [ 58.091184][ T4419] EXT4-fs: Ignoring removed nobh option [ 58.110548][ T4419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.117423][ T4419] ext3: Unknown parameter 'audit' [ 58.202437][ T4419] netlink: 'syz.3.251': attribute type 19 has an invalid length. [ 58.211417][ T4419] netlink: 55 bytes leftover after parsing attributes in process `syz.3.251'. [ 58.380801][ T4422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4422 comm=syz.4.252 [ 58.630763][ T4419] EXT4-fs: dax option not supported [ 58.837118][ T28] audit: type=1400 audit(1787530391.508:703): avc: denied { read write } for pid=4436 comm="syz.1.258" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.887621][ T28] audit: type=1400 audit(1787530391.508:704): avc: denied { open } for pid=4436 comm="syz.1.258" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.981984][ T28] audit: type=1400 audit(1787530391.658:705): avc: denied { create } for pid=4443 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.025025][ T28] audit: type=1400 audit(1787530391.668:706): avc: denied { setopt } for pid=4443 comm="syz.1.261" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.070939][ T28] audit: type=1400 audit(1787530391.718:707): avc: denied { ioctl } for pid=4443 comm="syz.1.261" path="socket:[8702]" dev="sockfs" ino=8702 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.114904][ T4446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 59.135206][ T4446] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 59.153657][ T4448] set_capacity_and_notify: 1 callbacks suppressed [ 59.153684][ T4448] loop5: detected capacity change from 0 to 512 [ 59.247452][ T4448] EXT4-fs (loop5): orphan cleanup on readonly fs [ 59.255571][ T4448] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 59.270378][ T4448] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.288185][ T4448] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.262: attempt to clear invalid blocks 2 len 1 [ 59.301361][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 59.301472][ C1] EXT4-fs (loop5): initial error at time 1787530391: ext4_mb_generate_buddy:1317 [ 59.301606][ C1] EXT4-fs (loop5): last error at time 1787530391: ext4_mb_generate_buddy:1317 [ 59.329360][ T4448] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.330548][ T4448] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.262: invalid indirect mapped block 1819239214 (level 0) [ 59.355051][ T4448] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.356166][ T4448] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.262: invalid indirect mapped block 1819239214 (level 1) [ 59.379945][ T4448] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.382452][ T4448] EXT4-fs (loop5): 1 truncate cleaned up [ 59.425558][ T4448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.445016][ T28] audit: type=1400 audit(1787530392.118:708): avc: denied { remount } for pid=4447 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.468911][ T4448] EXT4-fs error (device loop5): __ext4_remount:6872: comm syz.5.262: Abort forced by user [ 59.483523][ T4455] Illegal XDP return value 32768 on prog (id 35) dev syz_tun, expect packet loss! [ 59.488688][ T4448] EXT4-fs (loop5): Remounting filesystem read-only [ 59.499368][ T4448] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.514645][ T4457] vcan1: entered allmulticast mode [ 59.616134][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 59.757175][ T4472] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.404805][ T3661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.785615][ T4481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4481 comm=syz.2.273 [ 60.866324][ T4485] vlan0: entered promiscuous mode [ 61.061270][ T4490] loop5: detected capacity change from 0 to 1024 [ 61.235509][ T4503] FAULT_INJECTION: forcing a failure. [ 61.235509][ T4503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.248610][ T4503] CPU: 1 UID: 0 PID: 4503 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.248656][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.248673][ T4503] Call Trace: [ 61.248683][ T4503] [ 61.248695][ T4503] __dump_stack+0x1d/0x30 [ 61.248773][ T4503] dump_stack_lvl+0x95/0xd0 [ 61.248800][ T4503] dump_stack+0x15/0x1b [ 61.248827][ T4503] should_fail_ex+0x262/0x280 [ 61.248875][ T4503] should_fail+0xb/0x20 [ 61.248909][ T4503] should_fail_usercopy+0x1a/0x20 [ 61.248963][ T4503] _copy_to_user+0x20/0xa0 [ 61.248982][ T4503] simple_read_from_buffer+0xb5/0x130 [ 61.249013][ T4503] proc_fail_nth_read+0x10e/0x150 [ 61.249056][ T4503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.249121][ T4503] vfs_read+0x18e/0x7c0 [ 61.249150][ T4503] ? __rcu_read_unlock+0x4e/0x70 [ 61.249295][ T4503] ? __fget_files+0x184/0x1c0 [ 61.249327][ T4503] ? mutex_lock+0x57/0x90 [ 61.249363][ T4503] ksys_read+0xdc/0x1a0 [ 61.249390][ T4503] __x64_sys_read+0x40/0x50 [ 61.249493][ T4503] x64_sys_call+0x2135/0x2550 [ 61.249526][ T4503] do_syscall_64+0x112/0x360 [ 61.249572][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.249603][ T4503] RIP: 0033:0x7ff5e7b0e90e [ 61.249624][ T4503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.249733][ T4503] RSP: 002b:00007ff5e6585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.249759][ T4503] RAX: ffffffffffffffda RBX: 00007ff5e65866c0 RCX: 00007ff5e7b0e90e [ 61.249804][ T4503] RDX: 000000000000000f RSI: 00007ff5e65860a0 RDI: 0000000000000004 [ 61.249821][ T4503] RBP: 00007ff5e6586090 R08: 0000000000000000 R09: 0000000000000000 [ 61.249839][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.249856][ T4503] R13: 00007ff5e7dd6128 R14: 00007ff5e7dd6090 R15: 00007ffd84d0a7a8 [ 61.249876][ T4503] [ 61.461853][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.274'. [ 61.490317][ T4512] cgroup: Invalid name [ 61.589198][ T4521] loop1: detected capacity change from 0 to 1024 [ 61.597746][ T4521] EXT4-fs: Ignoring removed oldalloc option [ 61.632618][ T4521] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.644694][ T4521] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 3: comm syz.1.285: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.644824][ T4521] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.646640][ T4521] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.285: Failed to acquire dquot type 0 [ 61.646791][ T4521] loop1: lost filesystem error report for type 5 error -117 [ 61.665910][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 61.665981][ C0] EXT4-fs (loop1): initial error at time 1787530394: ext4_map_blocks:832: inode 3: block 3 [ 61.666223][ C0] EXT4-fs (loop1): last error at time 1787530394: ext4_map_blocks:832: inode 3: block 3 [ 61.704021][ T4521] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 3: comm syz.1.285: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.704122][ T4521] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.705117][ T4521] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.285: Failed to acquire dquot type 0 [ 61.705227][ T4521] loop1: lost filesystem error report for type 5 error -117 [ 61.718805][ T4521] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.285: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.718974][ T4521] loop1: lost filesystem error report for type 5 error -117 [ 61.722129][ T4521] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 3: comm syz.1.285: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.722507][ T4521] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.735150][ T4521] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.285: Failed to acquire dquot type 0 [ 61.735230][ T4521] loop1: lost filesystem error report for type 5 error -117 [ 61.743869][ T4521] EXT4-fs (loop1): 1 orphan inode deleted [ 61.757156][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.938075][ T4541] loop4: detected capacity change from 0 to 512 [ 61.946206][ T4541] ext4: Bad value for 'data' [ 61.975899][ T4545] FAULT_INJECTION: forcing a failure. [ 61.975899][ T4545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.989047][ T4545] CPU: 1 UID: 0 PID: 4545 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.989079][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.989094][ T4545] Call Trace: [ 61.989103][ T4545] [ 61.989112][ T4545] __dump_stack+0x1d/0x30 [ 61.989142][ T4545] dump_stack_lvl+0x95/0xd0 [ 61.989170][ T4545] dump_stack+0x15/0x1b [ 61.989254][ T4545] should_fail_ex+0x262/0x280 [ 61.989292][ T4545] should_fail+0xb/0x20 [ 61.989328][ T4545] should_fail_usercopy+0x1a/0x20 [ 61.989480][ T4545] _copy_from_user+0x1c/0xb0 [ 61.989500][ T4545] ___sys_sendmsg+0xc1/0x1e0 [ 61.989557][ T4545] __x64_sys_sendmsg+0xd4/0x160 [ 61.989586][ T4545] x64_sys_call+0x22ab/0x2550 [ 61.989641][ T4545] do_syscall_64+0x112/0x360 [ 61.989675][ T4545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.989763][ T4545] RIP: 0033:0x7f256dd9e0d9 [ 61.989785][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.989873][ T4545] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.989894][ T4545] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 61.989911][ T4545] RDX: 0000000000040810 RSI: 00002000000009c0 RDI: 0000000000000004 [ 61.989967][ T4545] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.989989][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.990001][ T4545] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 61.990020][ T4545] [ 62.176686][ T4548] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 3: comm syz.1.285: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.191084][ T4548] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.285: Failed to acquire dquot type 0 [ 62.330284][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.419184][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 62.419199][ T28] audit: type=1400 audit(1787530395.098:730): avc: denied { write } for pid=4569 comm="syz.1.304" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.449284][ T28] audit: type=1400 audit(1787530395.118:731): avc: denied { append } for pid=4569 comm="syz.1.304" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.616264][ T4576] netlink: 'syz.5.305': attribute type 1 has an invalid length. [ 62.627572][ T4578] loop3: detected capacity change from 0 to 1024 [ 62.638885][ T4576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.655826][ T28] audit: type=1400 audit(1787530395.328:732): avc: denied { mount } for pid=4575 comm="syz.5.305" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.660854][ T4578] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.685269][ T4578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.695825][ T4578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.713037][ T28] audit: type=1400 audit(1787530395.388:733): avc: denied { write } for pid=4577 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.741020][ T4583] bond1: (slave veth0_to_bond): making interface the new active one [ 62.750718][ T4583] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 62.781566][ T4584] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.306'. [ 62.794764][ T28] audit: type=1400 audit(1787530395.468:734): avc: denied { unmount } for pid=3661 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.845038][ T28] audit: type=1400 audit(1787530395.518:735): avc: denied { name_bind } for pid=4587 comm="syz.4.308" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.873536][ T4584] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.306: iget: bad extra_isize 255 (inode size 1024) [ 62.887616][ T28] audit: type=1400 audit(1787530395.548:736): avc: denied { write } for pid=4577 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.920096][ T4590] loop5: detected capacity change from 0 to 512 [ 62.925124][ T28] audit: type=1400 audit(1787530395.598:737): avc: denied { read } for pid=4577 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.932731][ T4590] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.996494][ T28] audit: type=1400 audit(1787530395.658:738): avc: denied { ioctl } for pid=4577 comm="syz.3.306" path="/75/file0/blkio.bfq.time_recursive" dev="loop3" ino=18 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.068635][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.312'. [ 63.079366][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.312'. [ 63.122917][ T28] audit: type=1400 audit(1787530395.798:739): avc: denied { create } for pid=4596 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.261491][ T4613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.316'. [ 63.273366][ T37] IPVS: starting estimator thread 0... [ 63.286478][ T4616] loop5: detected capacity change from 0 to 128 [ 63.295072][ T4616] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.307329][ T4616] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.399195][ T4614] IPVS: using max 2208 ests per chain, 110400 per kthread [ 63.470545][ T4631] IPVS: set_ctl: invalid protocol: 227 224.0.0.2:20000 [ 63.680662][ T4634] loop4: detected capacity change from 0 to 32768 [ 63.748314][ T4634] loop4: p1 p3 < > [ 63.759614][ T4621] FAULT_INJECTION: forcing a failure. [ 63.759614][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 63.772357][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.4.318 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.772388][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.772403][ T4621] Call Trace: [ 63.772412][ T4621] [ 63.772423][ T4621] __dump_stack+0x1d/0x30 [ 63.772471][ T4621] dump_stack_lvl+0x95/0xd0 [ 63.772496][ T4621] dump_stack+0x15/0x1b [ 63.772517][ T4621] should_fail_ex+0x262/0x280 [ 63.772592][ T4621] should_failslab+0x8c/0xb0 [ 63.772655][ T4621] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 63.772684][ T4621] ? do_getname+0x2e/0x1c0 [ 63.772720][ T4621] ? do_getname+0x2e/0x1c0 [ 63.772754][ T4621] ? vfs_write+0x850/0x9a0 [ 63.772858][ T4621] do_getname+0x2e/0x1c0 [ 63.772890][ T4621] getname_flags+0x1d/0x30 [ 63.772933][ T4621] do_sys_openat2+0x6c/0x130 [ 63.773015][ T4621] __x64_sys_openat+0xf2/0x120 [ 63.773052][ T4621] x64_sys_call+0x1f72/0x2550 [ 63.773122][ T4621] do_syscall_64+0x112/0x360 [ 63.773159][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.773183][ T4621] RIP: 0033:0x7f070232e90e [ 63.773243][ T4621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.773263][ T4621] RSP: 002b:00007f0700dc6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.773285][ T4621] RAX: ffffffffffffffda RBX: 00007f0700dc76c0 RCX: 00007f070232e90e [ 63.773301][ T4621] RDX: 0000000000000002 RSI: 00007f0700dc6f90 RDI: ffffffffffffff9c [ 63.773315][ T4621] RBP: 00007f0700dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.773329][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.773399][ T4621] R13: 00007f07025f6038 R14: 00007f07025f5fa0 R15: 00007ffff3ed5328 [ 63.773425][ T4621] [ 64.014625][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.033384][ T4645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'. [ 64.057802][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'. [ 64.066786][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 64.088115][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.095338][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 64.130361][ T4651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.327'. [ 64.139279][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 64.146954][ T4650] FAULT_INJECTION: forcing a failure. [ 64.146954][ T4650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.167505][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 64.171875][ T4650] CPU: 0 UID: 0 PID: 4650 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.171921][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.171933][ T4650] Call Trace: [ 64.171940][ T4650] [ 64.171948][ T4650] __dump_stack+0x1d/0x30 [ 64.172036][ T4650] dump_stack_lvl+0x95/0xd0 [ 64.172137][ T4650] dump_stack+0x15/0x1b [ 64.172208][ T4650] should_fail_ex+0x262/0x280 [ 64.172333][ T4650] should_fail+0xb/0x20 [ 64.172464][ T4650] should_fail_usercopy+0x1a/0x20 [ 64.172622][ T4650] _copy_from_user+0x1c/0xb0 [ 64.172764][ T4650] ___sys_sendmsg+0xc1/0x1e0 [ 64.172897][ T4650] __x64_sys_sendmsg+0xd4/0x160 [ 64.172981][ T4650] x64_sys_call+0x22ab/0x2550 [ 64.173100][ T4650] do_syscall_64+0x112/0x360 [ 64.173198][ T4650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.173308][ T4650] RIP: 0033:0x7f070236e0d9 [ 64.173359][ T4650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.173421][ T4650] RSP: 002b:00007f0700dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.173512][ T4650] RAX: ffffffffffffffda RBX: 00007f07025f5fa0 RCX: 00007f070236e0d9 [ 64.173615][ T4650] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 64.173655][ T4650] RBP: 00007f0700dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.173698][ T4650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.173724][ T4650] R13: 00007f07025f6038 R14: 00007f07025f5fa0 R15: 00007ffff3ed5328 [ 64.173744][ T4650] [ 64.375346][ T4655] loop1: detected capacity change from 0 to 512 [ 64.392183][ T4657] loop4: detected capacity change from 0 to 2048 [ 64.433980][ T4657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.452453][ T4655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.473690][ T4655] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.488832][ T4668] FAULT_INJECTION: forcing a failure. [ 64.488832][ T4668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.502162][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.502189][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.502201][ T4668] Call Trace: [ 64.502209][ T4668] [ 64.502220][ T4668] __dump_stack+0x1d/0x30 [ 64.502247][ T4668] dump_stack_lvl+0x95/0xd0 [ 64.502297][ T4668] dump_stack+0x15/0x1b [ 64.502408][ T4668] should_fail_ex+0x262/0x280 [ 64.502449][ T4668] should_fail+0xb/0x20 [ 64.502534][ T4668] should_fail_usercopy+0x1a/0x20 [ 64.502568][ T4668] _copy_from_user+0x1c/0xb0 [ 64.502622][ T4668] ___sys_sendmsg+0xc1/0x1e0 [ 64.502669][ T4668] __x64_sys_sendmsg+0xd4/0x160 [ 64.502705][ T4668] x64_sys_call+0x22ab/0x2550 [ 64.502737][ T4668] do_syscall_64+0x112/0x360 [ 64.502857][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.502887][ T4668] RIP: 0033:0x7ff5e7b4e0d9 [ 64.502903][ T4668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.502966][ T4668] RSP: 002b:00007ff5e65a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.502992][ T4668] RAX: ffffffffffffffda RBX: 00007ff5e7dd5fa0 RCX: 00007ff5e7b4e0d9 [ 64.503011][ T4668] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 64.503027][ T4668] RBP: 00007ff5e65a7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.503051][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.503067][ T4668] R13: 00007ff5e7dd6038 R14: 00007ff5e7dd5fa0 R15: 00007ffd84d0a7a8 [ 64.503092][ T4668] [ 64.593993][ T3661] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.686762][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.696815][ T4674] sctp: [Deprecated]: syz.3.335 (pid 4674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.696815][ T4674] Use struct sctp_sack_info instead [ 64.732252][ T4675] netlink: 'syz.2.336': attribute type 13 has an invalid length. [ 64.762330][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.816273][ T4677] loop4: detected capacity change from 0 to 512 [ 64.829731][ T4683] FAULT_INJECTION: forcing a failure. [ 64.829731][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.860080][ T4677] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.883904][ T4677] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.894874][ T4683] CPU: 0 UID: 0 PID: 4683 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.895003][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.895054][ T4683] Call Trace: [ 64.895074][ T4683] [ 64.895095][ T4683] __dump_stack+0x1d/0x30 [ 64.895178][ T4683] dump_stack_lvl+0x95/0xd0 [ 64.895255][ T4683] dump_stack+0x15/0x1b [ 64.895398][ T4683] should_fail_ex+0x262/0x280 [ 64.895533][ T4683] should_fail+0xb/0x20 [ 64.895634][ T4683] should_fail_usercopy+0x1a/0x20 [ 64.895790][ T4683] _copy_from_user+0x1c/0xb0 [ 64.895849][ T4683] ___sys_sendmsg+0xc1/0x1e0 [ 64.896007][ T4683] __x64_sys_sendmsg+0xd4/0x160 [ 64.896117][ T4683] x64_sys_call+0x22ab/0x2550 [ 64.896179][ T4683] do_syscall_64+0x112/0x360 [ 64.896311][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.896382][ T4683] RIP: 0033:0x7ff5e7b4e0d9 [ 64.896439][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.896508][ T4683] RSP: 002b:00007ff5e65a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.896611][ T4683] RAX: ffffffffffffffda RBX: 00007ff5e7dd5fa0 RCX: 00007ff5e7b4e0d9 [ 64.896667][ T4683] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 64.896777][ T4683] RBP: 00007ff5e65a7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.896825][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.896914][ T4683] R13: 00007ff5e7dd6038 R14: 00007ff5e7dd5fa0 R15: 00007ffd84d0a7a8 [ 64.897033][ T4683] [ 65.065363][ T4677] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 65.087617][ T4677] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #14: comm syz.4.334: invalid orphan symlink nlink 1 [ 65.110412][ T4677] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 65.113891][ T4677] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.334: couldn't read orphan inode 14 (err -117) [ 65.123262][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.123309][ C1] EXT4-fs (loop4): last error at time 1787530397: ext4_orphan_get:1403: inode 14 [ 65.164742][ T4677] loop4: lost filesystem error report for type 5 error -117 [ 65.166413][ T4677] EXT4-fs (loop4): 1 truncate cleaned up [ 65.185110][ T4702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4702 comm=syz.3.343 [ 65.199545][ T4677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.225971][ T4708] FAULT_INJECTION: forcing a failure. [ 65.225971][ T4708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.242912][ T4708] CPU: 0 UID: 0 PID: 4708 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.242949][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.242966][ T4708] Call Trace: [ 65.243031][ T4708] [ 65.243040][ T4708] __dump_stack+0x1d/0x30 [ 65.243070][ T4708] dump_stack_lvl+0x95/0xd0 [ 65.243096][ T4708] dump_stack+0x15/0x1b [ 65.243120][ T4708] should_fail_ex+0x262/0x280 [ 65.243213][ T4708] should_fail+0xb/0x20 [ 65.243299][ T4708] should_fail_usercopy+0x1a/0x20 [ 65.243337][ T4708] _copy_to_user+0x20/0xa0 [ 65.243361][ T4708] simple_read_from_buffer+0xb5/0x130 [ 65.243459][ T4708] proc_fail_nth_read+0x10e/0x150 [ 65.243518][ T4708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.243558][ T4708] vfs_read+0x18e/0x7c0 [ 65.243666][ T4708] ? __rcu_read_unlock+0x4e/0x70 [ 65.243704][ T4708] ? __fget_files+0x184/0x1c0 [ 65.243790][ T4708] ? mutex_lock+0x57/0x90 [ 65.243826][ T4708] ksys_read+0xdc/0x1a0 [ 65.243901][ T4708] __x64_sys_read+0x40/0x50 [ 65.243930][ T4708] x64_sys_call+0x2135/0x2550 [ 65.243964][ T4708] do_syscall_64+0x112/0x360 [ 65.244014][ T4708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.244086][ T4708] RIP: 0033:0x7fec4f87e90e [ 65.244105][ T4708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.244128][ T4708] RSP: 002b:00007fec4e316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.244153][ T4708] RAX: ffffffffffffffda RBX: 00007fec4e3176c0 RCX: 00007fec4f87e90e [ 65.244226][ T4708] RDX: 000000000000000f RSI: 00007fec4e3170a0 RDI: 0000000000000004 [ 65.244242][ T4708] RBP: 00007fec4e317090 R08: 0000000000000000 R09: 0000000000000000 [ 65.244257][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.244272][ T4708] R13: 00007fec4fb46038 R14: 00007fec4fb45fa0 R15: 00007fff84a559a8 [ 65.244296][ T4708] [ 65.254867][ T4709] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000 [ 65.299343][ T4711] loop1: detected capacity change from 0 to 512 [ 65.478315][ T4711] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.346: Directory hole found for htree index block 0 [ 65.501264][ T4711] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 65.501380][ T4711] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 65.510486][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 65.510507][ C0] EXT4-fs (loop1): initial error at time 1787530398: dx_probe:791: inode 2 [ 65.510551][ C0] EXT4-fs (loop1): last error at time 1787530398: dx_probe:791: inode 2 [ 65.543121][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.554033][ T4711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.624681][ T4717] netlink: 'syz.4.347': attribute type 5 has an invalid length. [ 65.719778][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.820385][ T4730] loop4: detected capacity change from 0 to 2048 [ 65.849380][ T4732] FAULT_INJECTION: forcing a failure. [ 65.849380][ T4732] name failslab, interval 1, probability 0, space 0, times 0 [ 65.862163][ T4732] CPU: 1 UID: 0 PID: 4732 Comm: syz.2.354 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.862188][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.862199][ T4732] Call Trace: [ 65.862206][ T4732] [ 65.862213][ T4732] __dump_stack+0x1d/0x30 [ 65.862235][ T4732] dump_stack_lvl+0x95/0xd0 [ 65.862331][ T4732] dump_stack+0x15/0x1b [ 65.862349][ T4732] should_fail_ex+0x262/0x280 [ 65.862378][ T4732] should_failslab+0x8c/0xb0 [ 65.862401][ T4732] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 65.862498][ T4732] ? __send_signal_locked+0x14d/0x750 [ 65.862573][ T4732] ? __send_signal_locked+0x14d/0x750 [ 65.862601][ T4732] __send_signal_locked+0x14d/0x750 [ 65.862664][ T4732] ? avc_has_perm_noaudit+0xa3/0x120 [ 65.862696][ T4732] send_signal_locked+0x3b0/0x430 [ 65.862745][ T4732] do_send_sig_info+0x9f/0xf0 [ 65.862774][ T4732] send_sigio_to_task+0x281/0x2e0 [ 65.862799][ T4732] send_sigio+0x9a/0x170 [ 65.862820][ T4732] kill_fasync+0xfd/0x170 [ 65.862841][ T4732] fsnotify_insert_event+0x21c/0x240 [ 65.862888][ T4732] inotify_handle_inode_event+0x2f0/0x3c0 [ 65.862988][ T4732] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 65.863008][ T4732] inotify_ignored_and_remove_idr+0x29/0x60 [ 65.863096][ T4732] inotify_freeing_mark+0x1d/0x30 [ 65.863115][ T4732] fsnotify_destroy_mark+0x123/0x140 [ 65.863149][ T4732] fsnotify_destroy_marks+0x17d/0x2f0 [ 65.863180][ T4732] __fsnotify_inode_delete+0x1c/0x30 [ 65.863208][ T4732] dentry_unlink_inode+0x1fc/0x260 [ 65.863231][ T4732] d_delete+0x164/0x180 [ 65.863252][ T4732] vfs_rmdir+0x1ae/0x450 [ 65.863349][ T4732] filename_rmdir+0x1a6/0x360 [ 65.863376][ T4732] __se_sys_rmdir+0x2b/0xe0 [ 65.863400][ T4732] __x64_sys_rmdir+0x1f/0x30 [ 65.863494][ T4732] x64_sys_call+0x2114/0x2550 [ 65.863517][ T4732] do_syscall_64+0x112/0x360 [ 65.863550][ T4732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.863577][ T4732] RIP: 0033:0x7f256dd9e0d9 [ 65.863644][ T4732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.863661][ T4732] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 65.863679][ T4732] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 65.863692][ T4732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 65.863770][ T4732] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.863781][ T4732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.863793][ T4732] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 65.863811][ T4732] [ 66.127913][ T4728] loop1: detected capacity change from 0 to 1024 [ 66.150198][ T4730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.240382][ T4738] qrtr: Invalid version 0 [ 66.282531][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.330226][ T4742] FAULT_INJECTION: forcing a failure. [ 66.330226][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.365622][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.2.358 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.365658][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.365749][ T4742] Call Trace: [ 66.365757][ T4742] [ 66.365767][ T4742] __dump_stack+0x1d/0x30 [ 66.365800][ T4742] dump_stack_lvl+0x95/0xd0 [ 66.365829][ T4742] dump_stack+0x15/0x1b [ 66.365856][ T4742] should_fail_ex+0x262/0x280 [ 66.365959][ T4742] should_fail+0xb/0x20 [ 66.365997][ T4742] should_fail_usercopy+0x1a/0x20 [ 66.366098][ T4742] _copy_from_user+0x1c/0xb0 [ 66.366124][ T4742] do_semtimedop+0x152/0x220 [ 66.366230][ T4742] __x64_sys_semop+0x41/0x50 [ 66.366270][ T4742] x64_sys_call+0x1ca0/0x2550 [ 66.366297][ T4742] do_syscall_64+0x112/0x360 [ 66.366414][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.366437][ T4742] RIP: 0033:0x7f256dd9e0d9 [ 66.366457][ T4742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.366477][ T4742] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 66.366497][ T4742] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 66.366511][ T4742] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 66.366644][ T4742] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.366662][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.366678][ T4742] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 66.366705][ T4742] [ 66.636551][ T4757] FAULT_INJECTION: forcing a failure. [ 66.636551][ T4757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.672259][ T4757] CPU: 0 UID: 0 PID: 4757 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.672287][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.672300][ T4757] Call Trace: [ 66.672306][ T4757] [ 66.672314][ T4757] __dump_stack+0x1d/0x30 [ 66.672343][ T4757] dump_stack_lvl+0x95/0xd0 [ 66.672381][ T4757] dump_stack+0x15/0x1b [ 66.672481][ T4757] should_fail_ex+0x262/0x280 [ 66.672523][ T4757] should_fail+0xb/0x20 [ 66.672558][ T4757] should_fail_usercopy+0x1a/0x20 [ 66.672671][ T4757] _copy_from_user+0x1c/0xb0 [ 66.672693][ T4757] __sys_bpf+0x1e2/0xc30 [ 66.672722][ T4757] ? get_pid_task+0x92/0xc0 [ 66.672751][ T4757] ? vfs_write+0x7e0/0x9a0 [ 66.672859][ T4757] __x64_sys_bpf+0x69/0x80 [ 66.672925][ T4757] x64_sys_call+0xf26/0x2550 [ 66.673007][ T4757] do_syscall_64+0x112/0x360 [ 66.673048][ T4757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.673077][ T4757] RIP: 0033:0x7f256dd9e0d9 [ 66.673096][ T4757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.673148][ T4757] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.673172][ T4757] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 66.673190][ T4757] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 66.673207][ T4757] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.673223][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.673239][ T4757] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 66.673327][ T4757] [ 67.088403][ T4778] loop2: detected capacity change from 0 to 1024 [ 67.324604][ T4786] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 67.341175][ T4786] bond2 (unregistering): Released all slaves [ 67.450814][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 67.450831][ T28] audit: type=1400 audit(1787530400.128:767): avc: denied { setopt } for pid=4796 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.510807][ T28] audit: type=1400 audit(1787530400.188:768): avc: denied { read } for pid=4795 comm="syz.3.372" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.549558][ T28] audit: type=1400 audit(1787530400.188:769): avc: denied { open } for pid=4795 comm="syz.3.372" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.645990][ T4817] loop2: detected capacity change from 0 to 1024 [ 67.672819][ T4817] EXT4-fs: inline encryption not supported [ 67.689120][ T4817] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.703338][ T4817] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.383: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.727613][ T4817] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.727813][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 67.743521][ C0] EXT4-fs (loop2): initial error at time 1787530400: ext4_map_blocks:832: inode 3: block 1 [ 67.753648][ C0] EXT4-fs (loop2): last error at time 1787530400: ext4_map_blocks:832: inode 3: block 1 [ 67.785093][ T4817] EXT4-fs (loop2): Remounting filesystem read-only [ 67.792671][ T4817] Quota error (device loop2): write_blk: dquota write failed [ 67.800485][ T4817] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 67.810705][ T4817] EXT4-fs (loop2): 1 orphan inode deleted [ 67.817369][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.165656][ T4835] __nla_validate_parse: 3 callbacks suppressed [ 68.165677][ T4835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'. [ 68.239000][ T4838] netlink: 2 bytes leftover after parsing attributes in process `syz.5.386'. [ 68.264918][ T4838] loop5: detected capacity change from 0 to 512 [ 68.272440][ T4838] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.282262][ T4838] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 68.292400][ T28] audit: type=1400 audit(1787530400.968:770): avc: denied { mounton } for pid=4837 comm="syz.5.386" path="/70/proc_mnt" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 68.391823][ T4845] loop3: detected capacity change from 0 to 1024 [ 68.418843][ T4845] EXT4-fs: Ignoring removed bh option [ 68.427977][ T4845] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.449445][ T4845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.484431][ T28] audit: type=1400 audit(1787530401.158:771): avc: denied { write } for pid=4844 comm="syz.3.388" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.506468][ T4849] syzkaller1: entered promiscuous mode [ 68.512387][ T4849] syzkaller1: entered allmulticast mode [ 68.519100][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.529247][ T4845] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.543717][ T28] audit: type=1400 audit(1787530401.198:772): avc: denied { write } for pid=4844 comm="syz.3.388" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.612237][ T28] audit: type=1400 audit(1787530401.208:773): avc: denied { append } for pid=4844 comm="syz.3.388" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.725589][ T4858] netlink: 'syz.5.393': attribute type 19 has an invalid length. [ 68.778159][ T28] audit: type=1400 audit(1787530401.408:774): avc: denied { write } for pid=4857 comm="syz.5.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.812234][ T4858] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.824619][ T4858] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 68.836860][ T4858] FAT-fs (loop5): FAT read failed (blocknr 32) [ 68.850808][ T3296] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /85/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 68.873591][ T3296] EXT4-fs (loop3): Remounting filesystem read-only [ 69.167043][ T4863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.182598][ T3840] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.210101][ T4888] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.210101][ T4888] The task syz.4.402 (4888) triggered the difference, watch for misbehavior. [ 69.252107][ T4888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.268504][ T3840] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.278024][ T4887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=4887 comm=syz.1.403 [ 69.300667][ T4888] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.321596][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.386844][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.394310][ T4887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.420896][ T3840] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.494227][ T4911] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=4911 comm=syz.1.408 [ 69.510737][ T3840] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.591536][ T4915] set_capacity_and_notify: 2 callbacks suppressed [ 69.591552][ T4915] loop5: detected capacity change from 0 to 512 [ 69.604563][ T4911] loop1: detected capacity change from 0 to 512 [ 69.615394][ T4915] Invalid ELF header magic: != ELF [ 69.625744][ T3840] bridge_slave_1: left allmulticast mode [ 69.633529][ T3840] bridge_slave_1: left promiscuous mode [ 69.639604][ T4911] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.642191][ T3840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.653305][ T4911] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.670754][ T4911] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 69.678933][ T3840] bridge_slave_0: left allmulticast mode [ 69.684652][ T3840] bridge_slave_0: left promiscuous mode [ 69.690361][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.697596][ T4911] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #14: comm syz.1.408: invalid orphan symlink nlink 1 [ 69.741903][ T4911] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 69.750826][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 69.769648][ C1] EXT4-fs (loop1): last error at time 1787530402: ext4_orphan_get:1403: inode 14 [ 69.780362][ T4911] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.408: couldn't read orphan inode 14 (err -117) [ 69.793450][ T4911] loop1: lost filesystem error report for type 5 error -117 [ 69.794720][ T4911] EXT4-fs (loop1): 1 truncate cleaned up [ 69.870260][ T4911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.891865][ T3840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.904590][ T3840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.916371][ T3840] bond0 (unregistering): Released all slaves [ 69.926665][ T3840] bond1 (unregistering): Released all slaves [ 69.964806][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 69.978368][ T4922] loop2: detected capacity change from 0 to 512 [ 69.987919][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.010113][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.012587][ T4922] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.031835][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.051728][ T4922] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.057978][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.071656][ T4922] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 70.092463][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.106768][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.120793][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.136307][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.151515][ T4911] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4911 comm=syz.1.408 [ 70.151902][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.175028][ T4922] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #14: comm syz.2.411: invalid orphan symlink nlink 1 [ 70.192272][ T3840] hsr_slave_0: left promiscuous mode [ 70.218389][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.231414][ T3840] hsr_slave_1: left promiscuous mode [ 70.240215][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.249169][ T4922] loop2: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 70.250719][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.259985][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.260010][ C0] EXT4-fs (loop2): last error at time 1787530402: ext4_orphan_get:1403: inode 14 [ 70.283626][ T4922] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.411: couldn't read orphan inode 14 (err -117) [ 70.297506][ T4922] loop2: lost filesystem error report for type 5 error -117 [ 70.301232][ T4922] EXT4-fs (loop2): 1 truncate cleaned up [ 70.360965][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.368498][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.388624][ T3840] veth1_macvtap: left promiscuous mode [ 70.392038][ T4922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.409367][ T3840] veth0_macvtap: left promiscuous mode [ 70.420344][ T3840] veth1_vlan: left promiscuous mode [ 70.425741][ T3840] veth0_vlan: left promiscuous mode [ 70.458503][ T4922] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4922 comm=syz.2.411 [ 70.490177][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.549061][ T3840] team0 (unregistering): Port device team_slave_1 removed [ 70.560207][ T3840] team0 (unregistering): Port device team_slave_0 removed [ 70.615177][ T4943] ip6tnl0: Caught tx_queue_len zero misconfig [ 70.701080][ T4955] FAULT_INJECTION: forcing a failure. [ 70.701080][ T4955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.750144][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.778757][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.778814][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.778826][ T4955] Call Trace: [ 70.778832][ T4955] [ 70.778904][ T4955] __dump_stack+0x1d/0x30 [ 70.778929][ T4955] dump_stack_lvl+0x95/0xd0 [ 70.778953][ T4955] dump_stack+0x15/0x1b [ 70.778979][ T4955] should_fail_ex+0x262/0x280 [ 70.779061][ T4955] should_fail+0xb/0x20 [ 70.779098][ T4955] should_fail_usercopy+0x1a/0x20 [ 70.779152][ T4955] _copy_from_user+0x1c/0xb0 [ 70.779186][ T4955] ___sys_sendmsg+0xc1/0x1e0 [ 70.779248][ T4955] __sys_sendmmsg+0x185/0x320 [ 70.779286][ T4955] __x64_sys_sendmmsg+0x57/0x70 [ 70.779316][ T4955] x64_sys_call+0x1fb4/0x2550 [ 70.779342][ T4955] do_syscall_64+0x112/0x360 [ 70.779418][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.779444][ T4955] RIP: 0033:0x7f256dd9e0d9 [ 70.779464][ T4955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.779488][ T4955] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.779514][ T4955] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 70.779529][ T4955] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 70.779567][ T4955] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.779659][ T4955] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.779672][ T4955] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 70.779691][ T4955] [ 70.940018][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.957295][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.964574][ T4893] bridge_slave_0: entered allmulticast mode [ 70.991634][ T4893] bridge_slave_0: entered promiscuous mode [ 71.002847][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.015055][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.024080][ T4893] bridge_slave_1: entered allmulticast mode [ 71.033128][ T4893] bridge_slave_1: entered promiscuous mode [ 71.069136][ T4893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.083640][ T4893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.113048][ T4893] team0: Port device team_slave_0 added [ 71.122274][ T4893] team0: Port device team_slave_1 added [ 71.146226][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.157927][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.207587][ T4979] loop2: detected capacity change from 0 to 128 [ 71.224601][ T4893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.236524][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.244670][ T4979] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.260647][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.267923][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.279129][ T4979] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.296529][ T4893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.323289][ T3436] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.349656][ T4893] hsr_slave_0: entered promiscuous mode [ 71.355950][ T4893] hsr_slave_1: entered promiscuous mode [ 71.381380][ T3436] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.470900][ T4994] loop5: detected capacity change from 0 to 512 [ 71.480110][ T3436] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.506569][ T4994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.554203][ T3436] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.566138][ T4994] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.608480][ T4994] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.424: bg 0: block 248: padding at end of block bitmap is not set [ 71.626300][ T4893] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.638679][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.646598][ T4893] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.658455][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.673679][ T4893] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.685467][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.693384][ T4893] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.710844][ T4994] loop5: lost filesystem error report for type 5 error -117 [ 71.711180][ T4994] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.424: Failed to acquire dquot type 1 [ 71.718580][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 71.718596][ C0] EXT4-fs (loop5): last error at time 1787530404: ext4_validate_block_bitmap:445 [ 71.758620][ T4994] loop5: lost filesystem error report for type 5 error -28 [ 71.766742][ T4994] EXT4-fs (loop5): 1 truncate cleaned up [ 71.782288][ T4994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.986412][ T5012] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.424: deleted inode referenced: 12 [ 72.140475][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.160040][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.200826][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.252718][ T3661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 72.326322][ T3436] bridge_slave_1: left allmulticast mode [ 72.332408][ T3436] bridge_slave_1: left promiscuous mode [ 72.338163][ T3436] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.349634][ T3436] bridge_slave_0: left allmulticast mode [ 72.356446][ T3436] bridge_slave_0: left promiscuous mode [ 72.362358][ T3436] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.525309][ T3436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.541927][ T3436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.564377][ T3436] bond0 (unregistering): Released all slaves [ 72.640231][ T3436] hsr_slave_0: left promiscuous mode [ 72.662366][ T3436] hsr_slave_1: left promiscuous mode [ 72.675243][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.700333][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.711573][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.720977][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.747511][ T3436] veth1_macvtap: left promiscuous mode [ 72.756207][ T3436] veth0_macvtap: left promiscuous mode [ 72.762069][ T3436] veth1_vlan: left promiscuous mode [ 72.767465][ T3436] veth0_vlan: left promiscuous mode [ 72.797773][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 72.797791][ T28] audit: type=1400 audit(1787530405.468:909): avc: denied { write } for pid=5039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.874340][ T28] audit: type=1400 audit(1787530405.548:910): avc: denied { write } for pid=5055 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.925937][ T5057] tmpfs: Bad value for 'mpol' [ 72.935939][ T28] audit: type=1400 audit(1787530405.598:911): avc: denied { mounton } for pid=5049 comm="syz.5.431" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.990035][ T3436] team0 (unregistering): Port device team_slave_1 removed [ 73.002326][ T3436] team0 (unregistering): Port device team_slave_0 removed [ 73.059034][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 73.074112][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.108408][ T4893] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.121332][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.128498][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.149118][ T4976] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.160225][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.170293][ T4976] bridge_slave_0: entered allmulticast mode [ 73.177572][ T4976] bridge_slave_0: entered promiscuous mode [ 73.200051][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.207180][ T3840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.236618][ T4976] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.247287][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.261048][ T4976] bridge_slave_1: entered allmulticast mode [ 73.272917][ T4976] bridge_slave_1: entered promiscuous mode [ 73.310078][ T4976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.412530][ T4976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.473014][ T4976] team0: Port device team_slave_0 added [ 73.501527][ T4976] team0: Port device team_slave_1 added [ 73.526374][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.537613][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.584524][ T4976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.597934][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.605299][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.632316][ T4976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.672375][ T4976] hsr_slave_0: entered promiscuous mode [ 73.679042][ T4976] hsr_slave_1: entered promiscuous mode [ 73.685199][ T4976] debugfs: 'hsr0' already exists in 'hsr' [ 73.698322][ T5082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 73.710723][ T4976] Cannot create hsr debugfs directory [ 73.726610][ T28] audit: type=1400 audit(1787530406.398:912): avc: denied { write } for pid=5070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.767646][ T5082] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 73.780800][ T28] audit: type=1400 audit(1787530406.458:913): avc: denied { write } for pid=5091 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.814023][ T4893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.842474][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 73.962495][ T4976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.985598][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.997028][ T4976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.022040][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.035119][ T4976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.045708][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.070473][ T4976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.096261][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.126757][ T28] audit: type=1400 audit(1787530406.798:914): avc: denied { write } for pid=5109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.204533][ T28] audit: type=1400 audit(1787530406.878:915): avc: denied { getopt } for pid=5130 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.237581][ T28] audit: type=1400 audit(1787530406.898:916): avc: denied { write } for pid=5137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.272760][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 74.286608][ T4976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.297413][ T4893] veth0_vlan: entered promiscuous mode [ 74.314148][ T4976] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.341843][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.349106][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.374602][ T4893] veth1_vlan: entered promiscuous mode [ 74.389243][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.396460][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.440488][ T4893] veth0_macvtap: entered promiscuous mode [ 74.478755][ T4893] veth1_macvtap: entered promiscuous mode [ 74.510918][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.532263][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.630418][ T28] audit: type=1400 audit(1787530407.288:917): avc: denied { write } for pid=5144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.670884][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713594][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716100][ T28] audit: type=1400 audit(1787530407.338:918): avc: denied { create } for pid=5161 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.754266][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 74.763348][ T3436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.774487][ T3436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.815464][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 74.886895][ T4976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.933585][ T5178] FAULT_INJECTION: forcing a failure. [ 74.933585][ T5178] name failslab, interval 1, probability 0, space 0, times 0 [ 74.951756][ T5178] CPU: 0 UID: 0 PID: 5178 Comm: syz.6.405 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.951809][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.951826][ T5178] Call Trace: [ 74.951834][ T5178] [ 74.951843][ T5178] __dump_stack+0x1d/0x30 [ 74.951876][ T5178] dump_stack_lvl+0x95/0xd0 [ 74.951900][ T5178] dump_stack+0x15/0x1b [ 74.951965][ T5178] should_fail_ex+0x262/0x280 [ 74.952015][ T5178] should_failslab+0x8c/0xb0 [ 74.952047][ T5178] __kmalloc_node_track_caller_noprof+0xd6/0x4e0 [ 74.952093][ T5178] ? sidtab_sid2str_get+0xa0/0x130 [ 74.952141][ T5178] ? sidtab_sid2str_get+0xa0/0x130 [ 74.952238][ T5178] kmemdup_noprof+0x2b/0x70 [ 74.952279][ T5178] sidtab_sid2str_get+0xa0/0x130 [ 74.952318][ T5178] security_sid_to_context_core+0x179/0x2d0 [ 74.952424][ T5178] security_sid_to_context+0x27/0x40 [ 74.952460][ T5178] selinux_lsmprop_to_secctx+0x67/0xf0 [ 74.952500][ T5178] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 74.952543][ T5178] audit_log_subj_ctx+0xa4/0x3e0 [ 74.952571][ T5178] audit_log_task_context+0x48/0x70 [ 74.952600][ T5178] audit_log_task+0xf3/0x240 [ 74.952642][ T5178] audit_seccomp+0x6a/0x110 [ 74.952746][ T5178] __seccomp_filter+0x909/0x1360 [ 74.952783][ T5178] ? __fget_files+0x184/0x1c0 [ 74.952828][ T5178] __seccomp_permit_syscall+0x7d/0x150 [ 74.952871][ T5178] do_syscall_64+0xca/0x360 [ 74.952919][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.952949][ T5178] RIP: 0033:0x7f557bffe0d9 [ 74.952971][ T5178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.953042][ T5178] RSP: 002b:00007f557aa57028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 74.953064][ T5178] RAX: ffffffffffffffda RBX: 00007f557c285fa0 RCX: 00007f557bffe0d9 [ 74.953083][ T5178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.953099][ T5178] RBP: 00007f557aa57090 R08: 0000000000000000 R09: 0000000000000000 [ 74.953115][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.953127][ T5178] R13: 00007f557c286038 R14: 00007f557c285fa0 R15: 00007ffdd9248818 [ 74.953159][ T5178] [ 75.341762][ T5211] loop6: detected capacity change from 0 to 128 [ 75.346778][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 75.367384][ T4976] veth0_vlan: entered promiscuous mode [ 75.381051][ T4976] veth1_vlan: entered promiscuous mode [ 75.404974][ T4976] veth0_macvtap: entered promiscuous mode [ 75.412865][ T4976] veth1_macvtap: entered promiscuous mode [ 75.424442][ T4976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.436559][ T4976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.452552][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 75.461440][ T5211] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.473889][ T5211] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.486820][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.495994][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.515689][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.536131][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.858078][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 76.264808][ T5262] netlink: 'syz.5.453': attribute type 21 has an invalid length. [ 76.280949][ T4893] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.292361][ T5262] netlink: 'syz.5.453': attribute type 6 has an invalid length. [ 76.317234][ T5262] netlink: 132 bytes leftover after parsing attributes in process `syz.5.453'. [ 76.344443][ T5240] loop7: detected capacity change from 0 to 1024 [ 76.520953][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.7.447'. [ 76.615090][ T5280] FAULT_INJECTION: forcing a failure. [ 76.615090][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 76.662032][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.6.458 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.662067][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.662083][ T5280] Call Trace: [ 76.662092][ T5280] [ 76.662102][ T5280] __dump_stack+0x1d/0x30 [ 76.662134][ T5280] dump_stack_lvl+0x95/0xd0 [ 76.662162][ T5280] dump_stack+0x15/0x1b [ 76.662239][ T5280] should_fail_ex+0x262/0x280 [ 76.662282][ T5280] should_failslab+0x8c/0xb0 [ 76.662316][ T5280] __kvmalloc_node_noprof+0x15b/0x5a0 [ 76.662355][ T5280] ? file_tty_write+0x1ac/0x6a0 [ 76.662458][ T5280] ? file_tty_write+0x1ac/0x6a0 [ 76.662631][ T5280] ? mutex_trylock+0x81/0xc0 [ 76.662667][ T5280] file_tty_write+0x1ac/0x6a0 [ 76.662764][ T5280] ? __pfx_tty_write+0x10/0x10 [ 76.662799][ T5280] tty_write+0x25/0x30 [ 76.662889][ T5280] vfs_write+0x57f/0x9a0 [ 76.662923][ T5280] ksys_write+0xdc/0x1a0 [ 76.662982][ T5280] __x64_sys_write+0x40/0x50 [ 76.663081][ T5280] x64_sys_call+0x154e/0x2550 [ 76.663115][ T5280] do_syscall_64+0x112/0x360 [ 76.663231][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.663254][ T5280] RIP: 0033:0x7f557bffe0d9 [ 76.663271][ T5280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.663295][ T5280] RSP: 002b:00007f557aa57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.663322][ T5280] RAX: ffffffffffffffda RBX: 00007f557c285fa0 RCX: 00007f557bffe0d9 [ 76.663419][ T5280] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 76.663437][ T5280] RBP: 00007f557aa57090 R08: 0000000000000000 R09: 0000000000000000 [ 76.663454][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.663467][ T5280] R13: 00007f557c286038 R14: 00007f557c285fa0 R15: 00007ffdd9248818 [ 76.663486][ T5280] [ 77.142625][ T5298] loop6: detected capacity change from 0 to 8192 [ 77.280376][ T5292] syzkaller0: entered promiscuous mode [ 77.289520][ T5292] syzkaller0: entered allmulticast mode [ 77.310964][ T5292] FAULT_INJECTION: forcing a failure. [ 77.310964][ T5292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.333292][ T5292] CPU: 0 UID: 0 PID: 5292 Comm: syz.2.463 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.333378][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.333391][ T5292] Call Trace: [ 77.333400][ T5292] [ 77.333425][ T5292] __dump_stack+0x1d/0x30 [ 77.333458][ T5292] dump_stack_lvl+0x95/0xd0 [ 77.333486][ T5292] dump_stack+0x15/0x1b [ 77.333548][ T5292] should_fail_ex+0x262/0x280 [ 77.333591][ T5292] should_fail+0xb/0x20 [ 77.333626][ T5292] should_fail_usercopy+0x1a/0x20 [ 77.333722][ T5292] _copy_from_user+0x1c/0xb0 [ 77.333745][ T5292] __tun_chr_ioctl+0x168/0x1550 [ 77.333765][ T5292] ? selinux_file_ioctl+0x33c/0x3c0 [ 77.333815][ T5292] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 77.333857][ T5292] tun_chr_ioctl+0x27/0x40 [ 77.334027][ T5292] __se_sys_ioctl+0xce/0x140 [ 77.334058][ T5292] __x64_sys_ioctl+0x43/0x50 [ 77.334090][ T5292] x64_sys_call+0x239d/0x2550 [ 77.334124][ T5292] do_syscall_64+0x112/0x360 [ 77.334164][ T5292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.334256][ T5292] RIP: 0033:0x7f256dd9e0d9 [ 77.334275][ T5292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.334296][ T5292] RSP: 002b:00007f256c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.334374][ T5292] RAX: ffffffffffffffda RBX: 00007f256e025fa0 RCX: 00007f256dd9e0d9 [ 77.334388][ T5292] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 0000000000000006 [ 77.334401][ T5292] RBP: 00007f256c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.334413][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.334426][ T5292] R13: 00007f256e026038 R14: 00007f256e025fa0 R15: 00007ffe7c01eb08 [ 77.334449][ T5292] [ 77.682646][ T312] ================================================================== [ 77.691091][ T312] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 77.700638][ T312] [ 77.703005][ T312] write to 0xffff888120a6c1db of 2 bytes by task 5299 on cpu 1: [ 77.710673][ T312] copy_folio_from_iter_atomic+0x728/0x10a0 [ 77.716627][ T312] generic_perform_write+0x2c4/0x490 [ 77.721966][ T312] __generic_file_write_iter+0x9e/0x120 [ 77.727550][ T312] generic_file_write_iter+0x77/0x1f0 [ 77.732949][ T312] iter_file_splice_write+0x6a0/0xa60 [ 77.738371][ T312] direct_splice_actor+0x158/0x280 [ 77.743533][ T312] splice_direct_to_actor+0x2f9/0x680 [ 77.748946][ T312] do_splice_direct+0x119/0x1a0 [ 77.753839][ T312] do_sendfile+0x37d/0x640 [ 77.758296][ T312] __x64_sys_sendfile64+0x105/0x150 [ 77.763529][ T312] x64_sys_call+0x1015/0x2550 [ 77.768242][ T312] do_syscall_64+0x112/0x360 [ 77.772904][ T312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.778838][ T312] [ 77.781186][ T312] read to 0xffff888120a6c000 of 512 bytes by task 312 on cpu 0: [ 77.788829][ T312] copy_folio_from_iter_atomic+0x728/0x10a0 [ 77.794769][ T312] generic_perform_write+0x2c4/0x490 [ 77.800092][ T312] shmem_file_write_iter+0xc5/0xf0 [ 77.805243][ T312] lo_rw_aio+0x6ab/0x760 [ 77.809510][ T312] loop_process_work+0x569/0xad0 [ 77.814477][ T312] loop_workfn+0x31/0x40 [ 77.818742][ T312] process_scheduled_works+0x56a/0xa50 [ 77.824234][ T312] worker_thread+0x569/0x750 [ 77.828860][ T312] kthread+0x223/0x270 [ 77.832947][ T312] ret_from_fork+0x146/0x330 [ 77.837565][ T312] ret_from_fork_asm+0x1a/0x30 [ 77.842359][ T312] [ 77.844699][ T312] Reported by Kernel Concurrency Sanitizer on: [ 77.850863][ T312] CPU: 0 UID: 0 PID: 312 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.860260][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.870339][ T312] Workqueue: loop6 loop_workfn [ 77.875138][ T312] ================================================================== [ 77.904906][ T5314] netlink: 76 bytes leftover after parsing attributes in process `syz.1.467'. [ 77.915333][ T5314] syzkaller0: entered promiscuous mode [ 77.921099][ T5314] syzkaller0: entered allmulticast mode [ 83.706714][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 83.706732][ T28] audit: type=1400 audit(1787530416.378:962): avc: denied { write } for pid=5327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.744554][ T28] audit: type=1400 audit(1787530416.418:963): avc: denied { write } for pid=5338 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.315348][ T28] audit: type=1400 audit(1787530418.988:964): avc: denied { write } for pid=5341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.349393][ T28] audit: type=1400 audit(1787530419.028:965): avc: denied { write } for pid=5352 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.445991][ T28] audit: type=1400 audit(1787530419.118:966): avc: denied { write } for pid=5355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.480952][ T28] audit: type=1400 audit(1787530419.158:967): avc: denied { write } for pid=5366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.577502][ T28] audit: type=1400 audit(1787530419.248:968): avc: denied { write } for pid=5369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.617277][ T28] audit: type=1400 audit(1787530419.288:969): avc: denied { write } for pid=5380 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.935670][ T28] audit: type=1400 audit(1787530419.608:970): avc: denied { write } for pid=5383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.970845][ T28] audit: type=1400 audit(1787530419.648:971): avc: denied { write } for pid=5394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1