last executing test programs: 1m2.709589425s ago: executing program 4 (id=249): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f0000000300)=ANY=[], 0xfffffdd0) pipe2(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x81}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) fcntl$setstatus(r1, 0x4, 0x6800) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x4) 1m2.54493968s ago: executing program 4 (id=255): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vcan0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 1m2.433200123s ago: executing program 4 (id=257): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x10, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0xb86}, 0x102eac, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000200)={{0x5, 0x1, 0x8001, 0x8b5, 0x5}, [{0xd96a, 0x1c5, 0x8, 0x6}, {0x1, 0xa, 0x2, 0x6}, {0x3, 0xc, 0x1, 0x3f}, {0x0, 0x10001, 0x8, 0x6}, {0x399f, 0x3, 0x9, 0x7}]}) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250b000000088d9529450005000900000008000400fd80d601"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x48) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x7464c052, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.87848668s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000380)={0x8000000000000000, 0x48, '\x00', 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ptrace$setregs(0xd, r5, 0x930, &(0x7f0000000800)) 1m0.94749875s ago: executing program 4 (id=274): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) write$nci(r1, &(0x7f0000000240)=ANY=[], 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x80, 0x7}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xff}, [@RTA_UID={0x5}]}, 0x24}}, 0x20000050) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1m0.485547675s ago: executing program 4 (id=277): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x287}, 0xa216, 0x7, 0x11004, 0x7, 0x9484, 0x2001, 0x406, 0x0, 0x0, 0x0, 0x4}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f00000008c0)={[], [{@smackfsdef}, {@fsmagic}, {@dont_measure}, {@uid_lt}]}, 0x1, 0x438, &(0x7f0000000340)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00001bb000/0x4000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x28000880}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c890) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x2c060080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) pipe(0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000004d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x10d) syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0xf59c, 0x2, 0x50003, 0x4, 0x0, r4}, 0x0, 0x0, 0x0) 1m0.479328255s ago: executing program 32 (id=277): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x287}, 0xa216, 0x7, 0x11004, 0x7, 0x9484, 0x2001, 0x406, 0x0, 0x0, 0x0, 0x4}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f00000008c0)={[], [{@smackfsdef}, {@fsmagic}, {@dont_measure}, {@uid_lt}]}, 0x1, 0x438, &(0x7f0000000340)="$eJzs201oHFUcAPD/7Cat6YeNpYr9UKNVDH4kTVprD14UBQ8Kgh7qMSZpid020kSwJWgUqUepeBePgnfBk15EPQle9S6FIrm0epCV2Z1pdje7aZJuMtH9/WDa92be8t5/Z/67b+ZlA+hZQ+k/ScSeiPgtIvbVq80Nhur/3VxamPxraWEyiWr19T+TWrsbSwuTedP8dbvzSl9E6eMkDrfpd+7S5XMTlcr0xaw+On/+ndG5S5efnjk/cXb67PSF8VOnThwfe/bk+DNdiTON68ah92ePHHz5zauvTp6++tZPXyd5/C1xdMnQagcfq1a73F2x9jaUk74CB8K6lOtpGv21/N8X5Vrts4Go5cxLHxU9PmDzVKvV6n2dDy9Wgf+xJIoeAVCM/Is+vf/Nty2aemwL15+v3wClcd/MtvqRvihlbfpb7m+7aSgiTi/+/UW6xeY8hwAAaPJdOv95qt38rxSNz4XuztZQBiPinojYHxEnI+JARNwbkbb95p+IuH+d/bcukqyc/5SubSiwNUrnf89la1vN87989heD5ay2txZ/f3JmpjJ9LHtPhqN/Z1ofW6WP71/89dNOxxrnf+mW9p/PBbNxXOvb2fyaqYn5iTuJudH1DyMO9bWLP4l8GSeJiIMRcWiDfcw88dWRTsduH/8qurDOVP0y4vH6+V+Mlvhzyerrk6N3RWX62Gh+Vaz08y9XXuvU/x3F3wXp+d/V9vq/Ff9g0rheO7f+Pq78/knHe5qNXv87kjea9r03MT9/cSxiR/JKfdCN+8db2o0vt0/jHz7aPv/3x/I7cTgi0ov4gYh4MCIeysb+cEQ8EhFHV4n/xxcefXvj8W+uNP6pdZ3/5cKOaN3TvlA+98O3TZ0Orif+9PyfqJWGsz1r+fxby7g2djUDAADAf08pIvZEUhq5VS6VRkbqf8N/IHaVKrNz80+emX33wlT9NwKD0V/Kn3Tta3geOpbd1uf18Zb68ey58eflgVp9ZHK2MlV08NDjdnfI/9Qf5aJHB2w6v9eC3iX/oXfJf+hd8h96V5v8HyhiHMDWa/f9/0EB4wC2Xkv+W/aDHuL+H3qX/IfeJf+hJ80NxO1/JK+gsKIQpW0xjE0qxPYYRoGFoj+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuPfAAAA//9Eg+ia") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00001bb000/0x4000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x28000880}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c890) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x2c060080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) pipe(0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000004d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x10d) syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0xf59c, 0x2, 0x50003, 0x4, 0x0, r4}, 0x0, 0x0, 0x0) 4.623812164s ago: executing program 5 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 3.840746868s ago: executing program 3 (id=750): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x10000e, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0xfc0, &(0x7f0000003d00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@srh={0x2e, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}], {0x4e22, 0xe22, 0xf82, 0x0, @opaque="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"}}}}}}, 0x0) 3.609994316s ago: executing program 5 (id=755): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) close(r0) 3.423280092s ago: executing program 3 (id=758): syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x202) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xff, 0x576, &(0x7f0000001140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14d142, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x17, 0x52608, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x9, 0x4, 0x3ff, 0x2000009, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000880)='y\xa9n\x1a:e\x00\x00\x00O\xbbj\x9f\a\xa3c\x85\'\x9d[@\x9a\xd7O\x9al~\xadTs\xab\b\'\xdc5\xd4\xd8N>\x13\xff\x0f\xff\xc1l\x16\x0e\xac0\x10\xf4(\'\x82\xfd,\xda_\xd30\x1d3;H\x97SS\xe2\xac\x8a)\xdc\xe2\x8d\xf5\x04\x00\x00\x00\n\xe7~\x05\x8e\xae\x94\xeeuOAa\xcd\xdbV^\x87 \xde\xd6\xf0\xe5\x81\x82\x16Q\xc9\xf3#e\x9a4\xa26\xa9\x1b\xda\x863u\x8b8d\xde\f\xd4Vk<\x9c\x17\x00\x00\x00\x00\x00\x00\x00\f\xa8 \xd1T\xee\xdd\x15\xab\xc1&\xf5Fw\x8f8\x89\xa1\xee\xe7\xefW\xbb\x0e\x91\xe6I\x92\xc4w]\xb1\xf2\xbc\xc7\xba\x13M\r~\xac:\xea\x8e\xce\x94\xde\x9e\x941u& r\xdf\xf4\xd27\xc4?\x99\x12\xbf\xfa\xc9\xfb4\x9e\xb3\x95\xd1\xfb\x92\x9b\x01\v\xa3\xd3ZE\xdb<\xba\xc1\xfee\x93\x00\x18\x1a\x97\xa2\x91\xde\x1bf\xd9\xd9\xfa\xc8\xdd\x88\x11\x86\xc3\xb1\n5\x99\b\xaf\xdcD2j\x9f\x86\xdd\x92\x16\xe1%\xc0\xee\xe7\xf7\xfb\xf2v!\x93\xf8\x98\x86\xe3\xef\xde7\xc9\xe7\xaa\x16\xdc\xdbd\xdf\xd9\x8b\xfc\xcd\xac\xce\x1b\x9b\xf0\xbfU\x19\xe0/A\xc7\xf2\x04g\xf8\xe3{\xb9\xc5\xbe\x99t\xd0~\x82FT\xb6\x91S\x9bv\x91\xfb\x9fW\xe6\xa38\x02\xa5\x1c\xad\xe8\xed\xd8Z{\x92\x8b\xfe=\x00'/354, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xbffffffc, 0x8, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000a8f10000000000000101000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70600005fffffff8500000005000000bf09000000000000260901000000000095000000000000009c68000000000000bf9800000000000056080000060000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x28) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.230663778s ago: executing program 1 (id=759): perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x0, 0x0, 0x8, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 3.077692073s ago: executing program 1 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x11000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x64, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="46b91c00a3c253c0c93d080000000103010470b8cf218941e8c30100000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44001ac285ac600bc436161f92c6154e4ac825", @ANYRES16=r0, @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 3.013299195s ago: executing program 0 (id=762): perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x0, 0x0, 0x8, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 2.896031999s ago: executing program 0 (id=763): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = socket(0x8, 0x3, 0x3a) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0xf9699e760eed360b, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES64], 0x1, 0x2b5, &(0x7f0000000c00)="$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") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x401, @empty, 0x1}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x180, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x3200cbe, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRESHEX, @ANYRESHEX=r5, @ANYRES8, @ANYRESOCT=r5, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listxattr(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x1}, &(0x7f0000000040)=0x8) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/166) 2.778436962s ago: executing program 5 (id=764): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") (async) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') 2.51904178s ago: executing program 5 (id=765): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10d0b8, 0x0, 0x0, 0x7, 0x6, 0x8005, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x901101) r4 = dup3(r0, r3, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000013c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0), r5, 0x0, 0x2, 0x4}}, 0x20) r6 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r8, 0x2000}, {r8, 0x420}], 0x2, 0x0, 0x0, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$TCSETSW2(r9, 0x5437, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x25405, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x10448) 2.469220492s ago: executing program 1 (id=767): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x8, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000001000400000000000c000000000000000000000000000002020000000000"], &(0x7f0000000200)=""/224, 0x3a, 0xe0, 0x1}, 0x28) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010227bd7000fcdbdf25080001000000ebff070003"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) unshare(0x22020400) ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0) 2.357398615s ago: executing program 1 (id=768): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$netlink(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x7, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x400, 0x100000000000, 0x0, 0x858, 0x7, 0x0, 0xa, 0x2, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3, 0x0, 0x0, 0x10}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) syz_emit_ethernet(0xc9, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8240081003500884800006479db29837773e2d87b45c6f326f3b36fc62c8241dd45eee5ffb49a3ba28cca0b8143655010214dbd8a15d957a517e549112a03cac6ef4c553f2d2d7793b3ade88960cf432e82c847273c28fa88664a5f5427b6c9fa5a994aeafd197f6b2a464c2f4b74f3b1da6b58fdbda7ffffe63d1a50c328bcb87d528e8e084a0cbbbc950d41c5a5e0f84fda8142bbe3db41f7c085b3b757d2327e81cdfd6574ba74326f474fc249b7862991c1d39e195104ee20bf7b933d9fdb976fb0ec86079f3a94dc88773a0ab7703239e48a068f99458c3a6496e14234f965599f"], &(0x7f0000001280)={0x0, 0x2, [0xe9, 0x8a1, 0x826, 0xe81]}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x10, 0x9}, {0xf, 0xe}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x3, 0x2) fchdir(0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000004000000000000020", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000398aaedfb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r4, 0x82, 0x200000000000000, 0x1) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.906899479s ago: executing program 0 (id=770): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x8, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000100), 0x0, 0x7e0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8402, 0x0) r3 = socket(0x1a, 0x1, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x6}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x88cc}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f00000000c0)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@resuid}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x470, &(0x7f0000000500)="$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") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89900) move_mount(r4, 0x0, r0, 0x0, 0x46) 1.905770129s ago: executing program 3 (id=771): syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) listen(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000980)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="28d1524a9b905782914c9aac4583470cc0d4733acb0b5e1275bc3a5ed8b7c766fc6012cb2562f8a6fb0c3d7bcdb06e64ad98dd5ab8066b6883bad511ea7b8672e295a9553be5aa1976f37b5bea1e1c6b8a34338782f78b7b3a92e0b62a811150ad22818cb67dcd91a979ee3ae5d18b1b50a31e049b27e83d068d886456e5a1e56c3768e52ed06e13b5daf7a136811f76f3679b4ae0525ec671fe6fa41961bfdf626925fcd520d5b36169b645559570fc5e5f905225826437ec", @ANYRES16], 0x1, 0x2eb, &(0x7f0000000ac0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x84) creat(&(0x7f0000000000)='./bus\x00', 0x93) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000440)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0xdb, 0x8, {0xf337, 0x1}, {0x74, 0x2}, @const={0x4, {0x0, 0x33fe, 0x0, 0x7}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={0x0, 0x28}}, 0x4010) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) 1.704720926s ago: executing program 3 (id=772): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x450280, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000001640)='attr/keycreate\x00') read(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) ioctl$BLKCRYPTOPREPAREKEY(r4, 0xc040128b, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=""/64, 0x40}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000200)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6ff6db36ce966e756d746169"], 0x6, 0x2d1, &(0x7f0000000a40)="$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") 1.56541081s ago: executing program 5 (id=773): perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x0, 0x0, 0x8, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x41, &(0x7f0000000800)={[{@delalloc}, {@barrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nobh}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") 869.431053ms ago: executing program 1 (id=775): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x11}]}}, 0x0, 0x26, 0x0, 0x9, 0x1000, 0x600}, 0x28) 817.597684ms ago: executing program 2 (id=776): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@errors_continue}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x6d, 0x3fffffffc00, 0x5, 0x7f, 0x20}) 737.901306ms ago: executing program 1 (id=777): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204c73, &(0x7f0000000940)={[{@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@data_err_abort}, {@nouid32}, {@data_journal}, {@barrier}]}, 0x0, 0x299, &(0x7f00000004c0)="$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") r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x22, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x27, &(0x7f0000000c00)=""/39, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x0, 0x9, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c80)=[0x1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x1, 0x9}, {0x1, 0x1, 0x6, 0x2}, {0x1, 0x5, 0xf, 0x4}, {0x1, 0x2, 0x3, 0xa}, {0x0, 0x5, 0xc, 0x3}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x3}, 0x94) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f0000000800)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="d68fd9f49ebbd8d6822439da1db049a41c45761bd3917d765334d2", 0x1b}, {&(0x7f0000000e40)="0410b6d8b3bed350326c19f531e92f89ba83126976c555a9e10edc659a201270d51431e8ebeece80e33fd246449386bd65344afb0b108819c84270661ee166df881837b36698fb8a678d7b8a955fc6b92af36cafa417e6b0be69", 0x5a}], 0x2, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x65, [@broadcast, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x2d, 0x2, [{0x5, 0x6, "78f47586"}, {0x1, 0x6, "cede5464"}, {0x1, 0x12, "6ff537d7b060c226ff5b015188fcc47b"}, {0x2, 0x9, "13ed386b602545"}]}, @ra={0x94, 0x4}]}}}], 0x80}}], 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x11, [{0xb, 0x3, 0x11}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x9, 0x1000}, 0x28) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = add_key$keyring(&(0x7f0000001ac0), &(0x7f0000001b00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000001980)='pkcs7_test\x00', &(0x7f00000019c0)={'syz', 0x3}, &(0x7f0000001a00)="2bf459c092d15077caf28f01b1fb31e691fe5ce318dc7f42c6e63249f819c4989de492f1cc971aac5ac745e003c1680af00cfbc915e380e5b8ff1bb10f8e062c7528d4709f3c2097a8611813fcd55d57ad4e79e694fb8188ff1e4b1b1461726276b1c78502154bc6294e2bf53f55fd58aba5e4c73367946de8d1e52d8e168104d2c3fb75e8b8ced3a5ff8e26b10854f0f0d780058c1c5d41a141d23fd57fa39d62a78c3d6540dc8c0daa2df2e111d429", 0xb0, r6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd07", 0xd0}], 0x2) readv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/27, 0x1b}], 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 737.107886ms ago: executing program 3 (id=778): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="1a3000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 589.583031ms ago: executing program 3 (id=779): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001140)) 558.684902ms ago: executing program 0 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x2000000) 484.800665ms ago: executing program 0 (id=781): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000007c0)={{r2}, "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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000200"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x5, 0x28, 0x0, &(0x7f0000000180)="3ccf258814136ca9b9f9554f7932af56d8a98a678acec51c1afedf9fe38eb3121e19edc3e3ccf0be", 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x478, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x803, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x5, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x8, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x80, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x27, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x7f, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x4, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0x7, 0x200007, 0x10001, 0x5, 0x2, 0x6, 0xf, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x807, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x3, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x84bc, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x4}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x24008814}, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x7, 0x6}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x1f}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x101}, {0xffffffffffffffff, 0x3, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x0) 343.829039ms ago: executing program 2 (id=782): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x80}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @private0, 0x80000000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48840, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) signalfd4(r1, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x30) 275.231481ms ago: executing program 5 (id=783): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10d0b8, 0x0, 0x0, 0x7, 0x6, 0x8005, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x901101) r4 = dup3(r0, r3, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000013c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0), r5, 0x0, 0x2, 0x4}}, 0x20) r6 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r8, 0x2000}, {r8, 0x420}], 0x2, 0x0, 0x0, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$TCSETSW2(r9, 0x5437, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x25405, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x10448) 243.763262ms ago: executing program 2 (id=784): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x11) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x30048841, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$rds(0x15, 0x5, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="75876fa7", @ANYRES16, @ANYBLOB="0d0326bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0xfffffffffffffffa, 0x1, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1c, 0x2, 0x0, 0x9, 0x151, 0x1}, {0x81, 0x0, 0x4, 0x499d, 0x2, 0x8}, 0x7, 0xffffffc0, 0x477}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800356a00000000000000000a808000ff0300060000000014000100ca"], 0x30}}, 0x0) 130.472105ms ago: executing program 2 (id=785): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) 52.522738ms ago: executing program 2 (id=786): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000081000000020000000000000000000400ea5be1cc1364ce4271b9e0b22bdf38e17d64c1d86ad8affb540066e4e6c95bbf396b146091ecbf4c99203a786b9c3aba38cf2fe7df829579b78b411ecbe3acffbbbd0b8c19b25be21bacd2340640bb0405dfae83a0f96979b70b0f0de14e2052340b03e49f4035de4eb99c9bead81adca6e656352217d2869d84501b56b2998d77aa90e189579006b313ee0d58f8746109ebd74f1a9e1273c1874586b35d46544313eed1b04be2b205e63a712b495e16175f2468eb5837a610bc41097335", @ANYRES32=r3, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0200000005000000010000000c00"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x3, 0x8, 0x4, @mcast2, @remote, 0x7, 0x8000, 0x5, 0x7}}) fsopen(&(0x7f0000000280)='configfs\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000002700)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x25b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x143}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x101, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0xc591, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) socket(0x1, 0x1, 0x417c) readahead(r6, 0x5, 0xfc4) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) mkdir(0x0, 0x180) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 612.04µs ago: executing program 0 (id=787): perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x0, 0x0, 0x8, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_UIE_ON(r3, 0x7003) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 0s ago: executing program 2 (id=788): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) kernel console output (not intermixed with test programs): op0): Errors on filesystem, clearing orphan list. [ 75.963130][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.003630][ T28] audit: type=1400 audit(1781800499.990:509): avc: denied { write } for pid=4817 comm="syz.1.406" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.031471][ T4830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.051207][ T28] audit: type=1400 audit(1781800499.990:510): avc: denied { setattr } for pid=4817 comm="syz.1.406" path="/95/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.194540][ T4850] loop2: detected capacity change from 0 to 512 [ 76.202873][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 76.226996][ T4851] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 76.257773][ T28] audit: type=1400 audit(1781800500.240:511): avc: denied { setopt } for pid=4848 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.259113][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.291339][ T4847] loop5: detected capacity change from 0 to 8192 [ 76.338061][ T4856] loop1: detected capacity change from 0 to 512 [ 76.363513][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 76.387870][ T4856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.400731][ T4856] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.430969][ T4856] xt_limit: Overflow, try lower: 7/0 [ 76.597528][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.095858][ T4878] nfs: Deprecated parameter 'nointr' [ 77.107208][ T4878] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.424: inode #1792: comm syz.3.424: iget: illegal inode # [ 77.132836][ T4877] nfs: Deprecated parameter 'nointr' [ 77.133328][ T4878] loop3: lost filesystem error report for type 5 error -117 [ 77.146698][ T4878] EXT4-fs (loop3): Remounting filesystem read-only [ 77.154130][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 77.154152][ C1] EXT4-fs (loop3): initial error at time 1781800501: ext4_get_journal_inode:5896 [ 77.154180][ C1] EXT4-fs (loop3): last error at time 1781800501: ext4_get_journal_inode:5896 [ 77.217703][ T4878] EXT4-fs (loop3): no journal found [ 77.223842][ T4878] EXT4-fs (loop3): can't get journal size [ 77.233697][ T4878] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 77.243833][ T4878] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 77.251842][ T4878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.268070][ T4878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.358221][ T4885] FAULT_INJECTION: forcing a failure. [ 77.358221][ T4885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.382833][ T4885] CPU: 0 UID: 0 PID: 4885 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.382859][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.382870][ T4885] Call Trace: [ 77.382877][ T4885] [ 77.382884][ T4885] __dump_stack+0x1d/0x30 [ 77.382907][ T4885] dump_stack_lvl+0x95/0xd0 [ 77.383001][ T4885] dump_stack+0x15/0x1b [ 77.383019][ T4885] should_fail_ex+0x25e/0x270 [ 77.383037][ T4885] should_fail+0xb/0x20 [ 77.383092][ T4885] should_fail_usercopy+0x1a/0x20 [ 77.383114][ T4885] _copy_to_user+0x20/0xa0 [ 77.383142][ T4885] simple_read_from_buffer+0xb5/0x130 [ 77.383243][ T4885] proc_fail_nth_read+0x10e/0x150 [ 77.383267][ T4885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.383343][ T4885] vfs_read+0x18e/0x7c0 [ 77.383371][ T4885] ? __rcu_read_unlock+0x4e/0x70 [ 77.383392][ T4885] ? __fget_files+0x184/0x1c0 [ 77.383409][ T4885] ? mutex_lock+0x57/0x90 [ 77.383429][ T4885] ksys_read+0xdc/0x1a0 [ 77.383486][ T4885] __x64_sys_read+0x40/0x50 [ 77.383571][ T4885] x64_sys_call+0x2886/0x3020 [ 77.383592][ T4885] do_syscall_64+0x136/0x3c0 [ 77.383624][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.383690][ T4885] RIP: 0033:0x7f88e6f6d68e [ 77.383704][ T4885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.383794][ T4885] RSP: 002b:00007f88e5a06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.383811][ T4885] RAX: ffffffffffffffda RBX: 00007f88e5a076c0 RCX: 00007f88e6f6d68e [ 77.383823][ T4885] RDX: 000000000000000f RSI: 00007f88e5a070a0 RDI: 0000000000000004 [ 77.383834][ T4885] RBP: 00007f88e5a07090 R08: 0000000000000000 R09: 0000000000000000 [ 77.383869][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.383882][ T4885] R13: 00007f88e7226038 R14: 00007f88e7225fa0 R15: 00007ffd1ca3f888 [ 77.383923][ T4885] [ 77.610455][ T4877] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.423: inode #1792: comm syz.1.423: iget: illegal inode # [ 77.627914][ T4874] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 77.643174][ T4877] loop1: lost filesystem error report for type 5 error -117 [ 77.647134][ T4877] EXT4-fs (loop1): Remounting filesystem read-only [ 77.655291][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 77.655342][ C0] EXT4-fs (loop1): initial error at time 1781800501: ext4_get_journal_inode:5896 [ 77.655430][ C0] EXT4-fs (loop1): last error at time 1781800501: ext4_get_journal_inode:5896 [ 77.661501][ T4874] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 77.695749][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.700848][ T4877] EXT4-fs (loop1): no journal found [ 77.737184][ T4877] EXT4-fs (loop1): can't get journal size [ 77.757906][ T4877] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 77.770526][ T4877] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 77.789124][ T4877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.822047][ T4877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.986081][ T4901] EXT4-fs: Ignoring removed orlov option [ 77.993888][ T28] audit: type=1400 audit(1781800501.970:512): avc: denied { associate } for pid=4897 comm="syz.0.433" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.046824][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.048176][ T28] audit: type=1400 audit(1781800502.020:513): avc: denied { create } for pid=4896 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 78.076254][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.098950][ T28] audit: type=1400 audit(1781800502.060:514): avc: denied { sys_admin } for pid=4896 comm="syz.1.431" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 78.120046][ T28] audit: type=1400 audit(1781800502.080:515): avc: denied { setopt } for pid=4896 comm="syz.1.431" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.140528][ T28] audit: type=1400 audit(1781800502.110:516): avc: denied { write } for pid=4900 comm="syz.3.432" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.268241][ T4918] netlink: 'syz.5.438': attribute type 1 has an invalid length. [ 78.277911][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.301723][ T28] audit: type=1400 audit(1781800502.280:517): avc: denied { shutdown } for pid=4917 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.331087][ T4918] vlan2: entered allmulticast mode [ 78.342931][ T4918] vlan1: entered allmulticast mode [ 78.348526][ T4918] veth0_vlan: entered allmulticast mode [ 78.384286][ T4922] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 78.429733][ T28] audit: type=1400 audit(1781800502.410:518): avc: denied { execute } for pid=4921 comm="syz.3.440" dev="tmpfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.463714][ T4911] set_capacity_and_notify: 5 callbacks suppressed [ 78.463743][ T4911] loop2: detected capacity change from 0 to 8192 [ 78.489058][ T28] audit: type=1400 audit(1781800502.450:519): avc: denied { execute_no_trans } for pid=4921 comm="syz.3.440" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.672937][ T4926] loop5: detected capacity change from 0 to 4096 [ 78.687289][ T4926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.730856][ T4926] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 78.752243][ T4926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.780770][ T28] audit: type=1400 audit(1781800502.760:520): avc: denied { write } for pid=4923 comm="syz.5.441" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.999282][ T4934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 79.014760][ T4934] FAULT_INJECTION: forcing a failure. [ 79.014760][ T4934] name failslab, interval 1, probability 0, space 0, times 0 [ 79.027452][ T4934] CPU: 0 UID: 0 PID: 4934 Comm: syz.0.444 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.027476][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.027564][ T4934] Call Trace: [ 79.027639][ T4934] [ 79.027648][ T4934] __dump_stack+0x1d/0x30 [ 79.027670][ T4934] dump_stack_lvl+0x95/0xd0 [ 79.027688][ T4934] dump_stack+0x15/0x1b [ 79.027704][ T4934] should_fail_ex+0x25e/0x270 [ 79.027808][ T4934] should_failslab+0x8c/0xb0 [ 79.027834][ T4934] kmem_cache_alloc_noprof+0x66/0x3f0 [ 79.027907][ T4934] ? skb_clone+0x151/0x1f0 [ 79.027937][ T4934] skb_clone+0x151/0x1f0 [ 79.027960][ T4934] dev_queue_xmit_nit+0x13e/0x510 [ 79.027993][ T4934] dev_hard_start_xmit+0xba/0x380 [ 79.028016][ T4934] __dev_queue_xmit+0xb97/0x1e60 [ 79.028042][ T4934] ? __dev_queue_xmit+0x151/0x1e60 [ 79.028065][ T4934] ? should_fail_ex+0xd9/0x270 [ 79.028123][ T4934] ? __copy_skb_header+0x22f/0x2b0 [ 79.028144][ T4934] ? __skb_clone+0x2a4/0x2c0 [ 79.028166][ T4934] __netlink_deliver_tap+0x3c8/0x510 [ 79.028249][ T4934] netlink_sendskb+0x126/0x150 [ 79.028342][ T4934] netlink_unicast+0x285/0x680 [ 79.028367][ T4934] netlink_ack+0x4fe/0x530 [ 79.028385][ T4934] netlink_rcv_skb+0x18d/0x220 [ 79.028441][ T4934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 79.028465][ T4934] genl_rcv+0x28/0x40 [ 79.028483][ T4934] netlink_unicast+0x5a7/0x680 [ 79.028545][ T4934] netlink_sendmsg+0x5be/0x6f0 [ 79.028606][ T4934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.028622][ T4934] __sys_sendto+0x411/0x470 [ 79.028647][ T4934] __x64_sys_sendto+0x76/0x90 [ 79.028685][ T4934] x64_sys_call+0x2d35/0x3020 [ 79.028706][ T4934] do_syscall_64+0x136/0x3c0 [ 79.028731][ T4934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.028749][ T4934] RIP: 0033:0x7f88e6f6d68e [ 79.028764][ T4934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.028786][ T4934] RSP: 002b:00007f88e5a05e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.028847][ T4934] RAX: ffffffffffffffda RBX: 00007f88e5a076c0 RCX: 00007f88e6f6d68e [ 79.028859][ T4934] RDX: 0000000000000020 RSI: 00007f88e5a06000 RDI: 0000000000000004 [ 79.028869][ T4934] RBP: 0000000000000000 R08: 00007f88e5a05f04 R09: 000000000000000c [ 79.028879][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 79.028888][ T4934] R13: 00007f88e5a05f58 R14: 00007f88e5a06000 R15: 0000000000000000 [ 79.028902][ T4934] [ 79.361474][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 79.396961][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.0.446'. [ 79.550488][ T4951] loop0: detected capacity change from 0 to 256 [ 79.567995][ T4951] msdos: Bad value for 'time_offset' [ 79.596389][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.656177][ T4942] loop3: detected capacity change from 0 to 512 [ 79.696173][ T4953] loop1: detected capacity change from 0 to 512 [ 79.710834][ T4942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.786702][ T4942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.787873][ T4953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.801907][ T4942] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.872221][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.911855][ T4953] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.967522][ T4969] FAULT_INJECTION: forcing a failure. [ 79.967522][ T4969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.995677][ T4953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.011048][ T4967] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 80.020035][ T4969] CPU: 1 UID: 0 PID: 4969 Comm: syz.2.458 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.020133][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.020146][ T4969] Call Trace: [ 80.020152][ T4969] [ 80.020160][ T4969] __dump_stack+0x1d/0x30 [ 80.020184][ T4969] dump_stack_lvl+0x95/0xd0 [ 80.020213][ T4969] dump_stack+0x15/0x1b [ 80.020230][ T4969] should_fail_ex+0x25e/0x270 [ 80.020248][ T4969] should_fail+0xb/0x20 [ 80.020265][ T4969] should_fail_usercopy+0x1a/0x20 [ 80.020342][ T4969] _copy_from_user+0x1c/0xb0 [ 80.020367][ T4969] ___sys_sendmsg+0xc1/0x1e0 [ 80.020506][ T4969] __x64_sys_sendmsg+0xd4/0x160 [ 80.020531][ T4969] x64_sys_call+0x194c/0x3020 [ 80.020550][ T4969] do_syscall_64+0x136/0x3c0 [ 80.020624][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.020641][ T4969] RIP: 0033:0x7fbfa6f7ce59 [ 80.020657][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.020733][ T4969] RSP: 002b:00007fbfa59cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.020752][ T4969] RAX: ffffffffffffffda RBX: 00007fbfa71f5fa0 RCX: 00007fbfa6f7ce59 [ 80.020764][ T4969] RDX: 0000000000040000 RSI: 0000200000000840 RDI: 0000000000000003 [ 80.020776][ T4969] RBP: 00007fbfa59cf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.020789][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.020802][ T4969] R13: 00007fbfa71f6038 R14: 00007fbfa71f5fa0 R15: 00007fffca926118 [ 80.020822][ T4969] [ 80.273081][ T4980] FAULT_INJECTION: forcing a failure. [ 80.273081][ T4980] name failslab, interval 1, probability 0, space 0, times 0 [ 80.307135][ T4980] CPU: 1 UID: 0 PID: 4980 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.307159][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.307190][ T4980] Call Trace: [ 80.307197][ T4980] [ 80.307204][ T4980] __dump_stack+0x1d/0x30 [ 80.307228][ T4980] dump_stack_lvl+0x95/0xd0 [ 80.307303][ T4980] dump_stack+0x15/0x1b [ 80.307319][ T4980] should_fail_ex+0x25e/0x270 [ 80.307340][ T4980] should_failslab+0x8c/0xb0 [ 80.307402][ T4980] __kmalloc_noprof+0xb8/0x4d0 [ 80.307433][ T4980] ? security_sb_alloc+0x48/0x100 [ 80.307518][ T4980] ? sget_fc+0x480/0xea0 [ 80.307543][ T4980] security_sb_alloc+0x48/0x100 [ 80.307593][ T4980] sget_fc+0x53e/0xea0 [ 80.307662][ T4980] ? __pfx_kernfs_test_super+0x10/0x10 [ 80.307683][ T4980] ? __pfx_kernfs_set_super+0x10/0x10 [ 80.307705][ T4980] ? kernfs_get_tree+0x56/0x4a0 [ 80.307782][ T4980] ? __kmalloc_cache_noprof+0x2f9/0x400 [ 80.307799][ T4980] kernfs_get_tree+0xdf/0x4a0 [ 80.307818][ T4980] ? security_capable+0x7b/0x90 [ 80.307916][ T4980] vfs_get_tree+0x57/0x1d0 [ 80.307977][ T4980] vfs_cmd_create+0x8a/0x140 [ 80.308001][ T4980] vfs_fsconfig_locked+0x16b/0x210 [ 80.308025][ T4980] __se_sys_fsconfig+0x671/0x7e0 [ 80.308112][ T4980] __x64_sys_fsconfig+0x67/0x80 [ 80.308131][ T4980] x64_sys_call+0xd6e/0x3020 [ 80.308154][ T4980] do_syscall_64+0x136/0x3c0 [ 80.308235][ T4980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.308265][ T4980] RIP: 0033:0x7fbfa6f7ce59 [ 80.308282][ T4980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.308299][ T4980] RSP: 002b:00007fbfa59cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 80.308320][ T4980] RAX: ffffffffffffffda RBX: 00007fbfa71f5fa0 RCX: 00007fbfa6f7ce59 [ 80.308335][ T4980] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 80.308348][ T4980] RBP: 00007fbfa59cf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.308407][ T4980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.308420][ T4980] R13: 00007fbfa71f6038 R14: 00007fbfa71f5fa0 R15: 00007fffca926118 [ 80.308438][ T4980] [ 80.538047][ T4964] loop5: detected capacity change from 0 to 8192 [ 80.564521][ T4953] loop1: detected capacity change from 0 to 256 [ 80.607716][ T4953] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.608870][ T4984] loop3: detected capacity change from 0 to 256 [ 80.638328][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 80.653021][ T4984] msdos: Bad value for 'time_offset' [ 80.762715][ T4994] SELinux: ebitmap: truncated map [ 80.768648][ T4994] SELinux: invalid class [ 80.774447][ T4994] SELinux: failed to load policy [ 80.825342][ T5002] loop2: detected capacity change from 0 to 1024 [ 81.852195][ T5002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.866246][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 81.866260][ T28] audit: type=1400 audit(1781800505.850:530): avc: denied { write } for pid=5001 comm="syz.2.472" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.874392][ T5010] SELinux: ebitmap: truncated map [ 81.965171][ T5010] SELinux: invalid class [ 81.985839][ T5010] SELinux: failed to load policy [ 82.185471][ T28] audit: type=1400 audit(1781800506.160:531): avc: denied { write } for pid=5001 comm="syz.2.472" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.235514][ T5024] loop5: detected capacity change from 0 to 128 [ 82.265719][ T5024] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.413396][ T28] audit: type=1400 audit(1781800506.160:532): avc: denied { write } for pid=5001 comm="syz.2.472" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.446048][ T5024] ext4 filesystem being mounted at /26/fi supports timestamps until 2038-01-19 (0x7fffffff) [ 82.530491][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.602053][ T5032] msdos: Bad value for 'time_offset' [ 82.678221][ T4390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.783425][ T5040] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 82.808906][ T5030] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.479: corrupted xattr block 95: invalid header [ 82.826271][ T5030] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.828049][ T5030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.479: bg 0: block 7: invalid block bitmap [ 82.837492][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 82.837537][ C0] EXT4-fs (loop1): initial error at time 1781800506: ext4_expand_extra_isize_ea:2810: inode 11 [ 82.837675][ C0] EXT4-fs (loop1): last error at time 1781800506: ext4_expand_extra_isize_ea:2810: inode 11 [ 82.893119][ T5030] loop1: lost filesystem error report for type 5 error -117 [ 82.894459][ T5030] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 82.987665][ T5030] loop1: lost filesystem error report for type 5 error -117 [ 82.988583][ T5030] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.479: corrupted xattr block 95: invalid header [ 83.028740][ T5030] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.031011][ T5030] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 83.062390][ T5030] EXT4-fs (loop1): 1 orphan inode deleted [ 83.070801][ T5030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.089053][ T5047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.101725][ T5047] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 83.298434][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.406923][ T5052] FAULT_INJECTION: forcing a failure. [ 83.406923][ T5052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.422034][ T5052] CPU: 0 UID: 0 PID: 5052 Comm: syz.5.487 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.422142][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.422155][ T5052] Call Trace: [ 83.422224][ T5052] [ 83.422230][ T5052] __dump_stack+0x1d/0x30 [ 83.422250][ T5052] dump_stack_lvl+0x95/0xd0 [ 83.422271][ T5052] dump_stack+0x15/0x1b [ 83.422289][ T5052] should_fail_ex+0x25e/0x270 [ 83.422386][ T5052] should_fail+0xb/0x20 [ 83.422401][ T5052] should_fail_usercopy+0x1a/0x20 [ 83.422418][ T5052] _copy_from_user+0x1c/0xb0 [ 83.422470][ T5052] do_sock_getsockopt+0x122/0x570 [ 83.422592][ T5052] ? vfs_write+0x848/0x990 [ 83.422624][ T5052] __x64_sys_getsockopt+0x11d/0x1a0 [ 83.422721][ T5052] x64_sys_call+0x2dcf/0x3020 [ 83.422743][ T5052] do_syscall_64+0x136/0x3c0 [ 83.422770][ T5052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.422840][ T5052] RIP: 0033:0x7f677d13ce59 [ 83.422857][ T5052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.422875][ T5052] RSP: 002b:00007f677bb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.422896][ T5052] RAX: ffffffffffffffda RBX: 00007f677d3b5fa0 RCX: 00007f677d13ce59 [ 83.422910][ T5052] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000004 [ 83.422953][ T5052] RBP: 00007f677bb8f090 R08: 0000200000000180 R09: 0000000000000000 [ 83.422966][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.422979][ T5052] R13: 00007f677d3b6038 R14: 00007f677d3b5fa0 R15: 00007ffc1bd9f628 [ 83.423000][ T5052] [ 83.629344][ T28] audit: type=1400 audit(1781800507.610:533): avc: denied { mounton } for pid=5055 comm="syz.3.488" path="/101/file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.630863][ T5056] nfs: Deprecated parameter 'nointr' [ 83.748600][ T5064] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.492'. [ 83.762373][ T5062] set_capacity_and_notify: 7 callbacks suppressed [ 83.762390][ T5062] loop5: detected capacity change from 0 to 1024 [ 83.765235][ T5064] netlink: zone id is out of range [ 83.777622][ T5065] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.790049][ T5065] SELinux: failed to load policy [ 83.795105][ T5064] netlink: zone id is out of range [ 83.804690][ T5064] netlink: zone id is out of range [ 83.809901][ T5064] netlink: zone id is out of range [ 83.817952][ T5062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.825963][ T5064] netlink: set zone limit has 8 unknown bytes [ 83.836831][ T28] audit: type=1400 audit(1781800507.820:534): avc: denied { write } for pid=5061 comm="syz.5.491" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.069943][ T5056] loop3: detected capacity change from 0 to 512 [ 84.162143][ T28] audit: type=1400 audit(1781800508.100:535): avc: denied { write } for pid=5061 comm="syz.5.491" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.257893][ T5056] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.488: inode #1792: comm syz.3.488: iget: illegal inode # [ 84.389429][ T28] audit: type=1400 audit(1781800508.100:536): avc: denied { write } for pid=5061 comm="syz.5.491" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.424217][ T5056] loop3: lost filesystem error report for type 5 error -117 [ 84.428360][ T5076] netlink: 14 bytes leftover after parsing attributes in process `syz.2.495'. [ 84.435740][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 84.435761][ C1] EXT4-fs (loop3): initial error at time 1781800508: ext4_get_journal_inode:5896 [ 84.435788][ C1] EXT4-fs (loop3): last error at time 1781800508: ext4_get_journal_inode:5896 [ 84.483031][ T5056] EXT4-fs (loop3): Remounting filesystem read-only [ 84.503067][ T5056] EXT4-fs (loop3): no journal found [ 84.510449][ T5056] EXT4-fs (loop3): can't get journal size [ 84.525359][ T5056] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 84.551058][ T5060] loop1: detected capacity change from 0 to 8192 [ 84.560634][ T5056] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 84.626279][ T5056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.676162][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.749846][ T5084] netlink: 'syz.5.498': attribute type 10 has an invalid length. [ 84.764287][ T28] audit: type=1400 audit(1781800508.740:537): avc: denied { read } for pid=5085 comm="syz.1.499" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.764258][ T5056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.825890][ T5084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.863687][ T28] audit: type=1400 audit(1781800508.770:538): avc: denied { ioctl } for pid=5085 comm="syz.1.499" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.904744][ T28] audit: type=1400 audit(1781800508.790:539): avc: denied { connect } for pid=5085 comm="syz.1.499" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.970956][ T5084] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 84.994061][ T5094] x_tables: duplicate underflow at hook 3 [ 85.004380][ T5084] team0: Failed to send options change via netlink (err -105) [ 85.012550][ T5084] team0: Port device netdevsim2 added [ 85.042701][ T5082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.497'. [ 85.233119][ T5117] SET target dimension over the limit! [ 85.274139][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 85.422143][ T5134] loop3: detected capacity change from 0 to 4096 [ 85.448000][ T5134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.460357][ T5134] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 85.475440][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.595028][ T5149] netlink: 388 bytes leftover after parsing attributes in process `syz.5.508'. [ 85.690133][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.700106][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.930163][ T5153] loop0: detected capacity change from 0 to 1024 [ 85.957642][ T5153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.977783][ T5160] loop1: detected capacity change from 0 to 128 [ 86.097758][ T5162] nfs: Deprecated parameter 'nointr' [ 86.579878][ T5162] loop2: detected capacity change from 0 to 512 [ 86.584189][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.599165][ T5162] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.512: inode #1792: comm syz.2.512: iget: illegal inode # [ 86.617872][ T5162] loop2: lost filesystem error report for type 5 error -117 [ 86.620685][ T5162] EXT4-fs (loop2): Remounting filesystem read-only [ 86.628025][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 86.628051][ C1] EXT4-fs (loop2): initial error at time 1781800510: ext4_get_journal_inode:5896 [ 86.628074][ C1] EXT4-fs (loop2): last error at time 1781800510: ext4_get_journal_inode:5896 [ 86.650980][ T5170] loop5: detected capacity change from 0 to 1024 [ 86.697090][ T5162] EXT4-fs (loop2): no journal found [ 86.708318][ T5162] EXT4-fs (loop2): can't get journal size [ 86.715222][ T5170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.736431][ T5170] netlink: 'syz.5.514': attribute type 1 has an invalid length. [ 86.749846][ T5162] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 86.759615][ T5162] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 86.767809][ T5162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.781298][ T5162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.832947][ T5179] loop1: detected capacity change from 0 to 2048 [ 86.849606][ T5179] EXT4-fs: quotafile must be on filesystem root [ 87.018936][ T5180] loop3: detected capacity change from 0 to 8192 [ 87.052650][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 87.052671][ T28] audit: type=1326 audit(1781800510.880:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1bd2d68e code=0x7ffc0000 [ 87.052704][ T28] audit: type=1326 audit(1781800510.880:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1bd6caeb code=0x7ffc0000 [ 87.052817][ T28] audit: type=1326 audit(1781800510.880:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc1bd2d68e code=0x7ffc0000 [ 87.052868][ T28] audit: type=1326 audit(1781800510.880:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1bd6ce59 code=0x7ffc0000 [ 87.052931][ T28] audit: type=1326 audit(1781800510.880:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1bd6ce59 code=0x7ffc0000 [ 87.052951][ T28] audit: type=1326 audit(1781800510.880:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fdc1bd6ce59 code=0x7ffc0000 [ 87.053062][ T28] audit: type=1326 audit(1781800510.880:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1bd6ce59 code=0x7ffc0000 [ 87.053172][ T28] audit: type=1326 audit(1781800510.880:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1bd6ce59 code=0x7ffc0000 [ 87.053213][ T28] audit: type=1326 audit(1781800510.880:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.1.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1bd2d68e code=0x7ffc0000 [ 87.060490][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.287621][ T28] audit: type=1326 audit(1781800511.260:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbfa6f39b51 code=0x7ffc0000 [ 87.385831][ T5182] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 87.522727][ T5186] EXT4-fs: Ignoring removed bh option [ 87.672310][ T5186] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 87.681202][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.695483][ T5186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.701687][ T5185] dns_resolver: Unsupported server list version (0) [ 87.754736][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.756760][ T5182] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.515: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.756802][ T5182] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.757003][ T5182] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.515: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.757039][ T5182] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.757114][ T5182] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.515: Failed to acquire dquot type 0 [ 87.757178][ T5182] loop1: lost filesystem error report for type 5 error -117 [ 87.757306][ T5182] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 87.757347][ T5182] loop1: lost filesystem error report for type 5 error -117 [ 87.757570][ T5182] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.515: mark_inode_dirty error [ 87.757588][ T5182] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.757696][ T5182] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 87.757795][ T5182] EXT4-fs (loop1): 1 orphan inode deleted [ 87.758394][ T5182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.843177][ T39] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.846154][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 0 [ 87.878600][ T5196] msdos: Unknown parameter '00000000000000000000000' [ 87.902055][ T5196] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 87.984807][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 88.655993][ T5214] IPv6: Can't replace route, no match found [ 88.666805][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.681293][ T3296] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.717660][ T3296] loop1: lost filesystem error report for type 5 error -117 [ 88.717869][ T3296] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 88.737790][ T3296] loop1: lost filesystem error report for type 5 error -117 [ 88.738019][ T3296] EXT4-fs error (device loop1): ext4_quota_off:7316: inode #3: comm syz-executor: mark_inode_dirty error [ 88.763560][ T3296] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.776617][ T5214] x_tables: duplicate underflow at hook 3 [ 88.923820][ T5225] set_capacity_and_notify: 6 callbacks suppressed [ 88.923882][ T5225] loop5: detected capacity change from 0 to 512 [ 88.940781][ T5223] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 89.358510][ T5225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 89.381280][ T5225] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.426684][ T5225] Cannot find add_set index 0 as target [ 89.539490][ T5232] FAULT_INJECTION: forcing a failure. [ 89.539490][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 89.555638][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.564832][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.564901][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.564913][ T5232] Call Trace: [ 89.564921][ T5232] [ 89.564929][ T5232] __dump_stack+0x1d/0x30 [ 89.564953][ T5232] dump_stack_lvl+0x95/0xd0 [ 89.565021][ T5232] dump_stack+0x15/0x1b [ 89.565039][ T5232] should_fail_ex+0x25e/0x270 [ 89.565061][ T5232] ? proc_pid_cmdline_read+0x2f4/0x710 [ 89.565084][ T5232] should_failslab+0x8c/0xb0 [ 89.565133][ T5232] __kmalloc_cache_noprof+0x5f/0x400 [ 89.565197][ T5232] proc_pid_cmdline_read+0x2f4/0x710 [ 89.565220][ T5232] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 89.565295][ T5232] vfs_readv+0x417/0x6d0 [ 89.565321][ T5232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.565431][ T5232] __x64_sys_preadv+0xfd/0x1c0 [ 89.565478][ T5232] x64_sys_call+0x2915/0x3020 [ 89.565557][ T5232] do_syscall_64+0x136/0x3c0 [ 89.565589][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.565611][ T5232] RIP: 0033:0x7fbfa6f7ce59 [ 89.565672][ T5232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.565708][ T5232] RSP: 002b:00007fbfa59cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 89.565725][ T5232] RAX: ffffffffffffffda RBX: 00007fbfa71f5fa0 RCX: 00007fbfa6f7ce59 [ 89.565738][ T5232] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000009 [ 89.565750][ T5232] RBP: 00007fbfa59cf090 R08: 00000000fffffff9 R09: 0000000000000000 [ 89.565769][ T5232] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 89.565826][ T5232] R13: 00007fbfa71f6038 R14: 00007fbfa71f5fa0 R15: 00007fffca926118 [ 89.565846][ T5232] [ 89.857667][ T5235] netlink: 'syz.3.532': attribute type 298 has an invalid length. [ 89.893415][ T5240] netlink: 84 bytes leftover after parsing attributes in process `syz.1.533'. [ 89.902513][ T5240] netlink: 84 bytes leftover after parsing attributes in process `syz.1.533'. [ 89.930104][ T5242] loop5: detected capacity change from 0 to 1024 [ 89.948502][ T5242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.054725][ T5248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.536'. [ 90.985127][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.102766][ T5264] loop3: detected capacity change from 0 to 8192 [ 91.330708][ T5273] loop1: detected capacity change from 0 to 256 [ 92.597690][ T5281] loop5: detected capacity change from 0 to 1024 [ 92.639425][ T5281] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 92.660424][ T5297] loop0: detected capacity change from 0 to 1024 [ 92.730404][ T5297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.742720][ T5281] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 92.754162][ T5297] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 92.763977][ T5281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.823687][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.912793][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 92.912831][ T28] audit: type=1400 audit(1781800516.890:801): avc: denied { ioctl } for pid=5269 comm="syz.5.541" path="socket:[11126]" dev="sockfs" ino=11126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.989825][ T5306] loop0: detected capacity change from 0 to 256 [ 93.014790][ T5306] msdos: Bad value for 'time_offset' [ 93.174471][ T5307] loop3: detected capacity change from 0 to 256 [ 93.201744][ T5308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.622498][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.697181][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.722386][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.748793][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.795167][ T5311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.802417][ T5311] IPv6: NLM_F_CREATE should be set when creating new route [ 93.871548][ T28] audit: type=1326 audit(1781800517.850:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 93.914623][ T5316] loop1: detected capacity change from 0 to 512 [ 93.931405][ T28] audit: type=1326 audit(1781800517.850:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 93.957120][ T5316] EXT4-fs: Mount option(s) incompatible with ext2 [ 93.970298][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.977982][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.979362][ T28] audit: type=1326 audit(1781800517.850:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 94.013544][ T5318] loop3: detected capacity change from 0 to 512 [ 94.014470][ T28] audit: type=1326 audit(1781800517.850:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 94.085595][ T5325] loop5: detected capacity change from 0 to 512 [ 94.116418][ T28] audit: type=1326 audit(1781800517.880:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 94.133533][ T5325] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.559: bad orphan inode 15 [ 94.142081][ T28] audit: type=1400 audit(1781800517.880:807): avc: denied { create } for pid=5314 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.166136][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.172301][ T28] audit: type=1400 audit(1781800517.890:808): avc: denied { write } for pid=5314 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.199427][ T28] audit: type=1326 audit(1781800517.900:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7752ce59 code=0x7ffc0000 [ 94.207912][ T5325] loop5: lost filesystem error report for type 5 error -117 [ 94.224835][ T28] audit: type=1326 audit(1781800517.900:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.3.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba7752cbc2 code=0x7ffc0000 [ 94.258139][ T5318] EXT4-fs: Ignoring removed nobh option [ 94.263799][ T5318] EXT4-fs: Ignoring removed oldalloc option [ 94.273834][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.282382][ T5318] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.286517][ T5330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.291648][ T5318] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.556: invalid indirect mapped block 256 (level 1) [ 94.297591][ T5330] IPv6: NLM_F_CREATE should be set when creating new route [ 94.297604][ T5330] IPv6: NLM_F_CREATE should be set when creating new route [ 94.297612][ T5330] IPv6: NLM_F_CREATE should be set when creating new route [ 94.352207][ T5325] ext4_test_bit(bit=14, block=18) = 1 [ 94.357701][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 94.357750][ C1] EXT4-fs (loop5): initial error at time 1781800518: ext4_orphan_get:1425 [ 94.357802][ C1] EXT4-fs (loop5): last error at time 1781800518: ext4_orphan_get:1425 [ 94.362831][ T5318] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 94.364418][ T5325] is_bad_inode(inode)=0 [ 94.393275][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 94.396297][ T5325] NEXT_ORPHAN(inode)=1023 [ 94.401727][ C0] EXT4-fs (loop3): initial error at time 1781800518: ext4_free_branches:1023: inode 13 [ 94.401756][ C0] EXT4-fs (loop3): last error at time 1781800518: ext4_free_branches:1023: inode 13 [ 94.402093][ T5318] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.556: invalid indirect mapped block 2683928664 (level 1) [ 94.406147][ T5325] max_ino=32 [ 94.406164][ T5325] i_nlink=0 [ 94.406544][ T5325] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.559: corrupted xattr block 19: invalid header [ 94.430219][ T5318] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 94.439465][ T5325] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.469979][ T5325] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 94.470057][ T5318] EXT4-fs (loop3): 1 truncate cleaned up [ 94.495988][ T5325] ext4 filesystem being mounted at /43/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 94.519461][ T5318] netlink: 'syz.3.556': attribute type 32 has an invalid length. [ 94.529057][ T2217] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.538037][ T2217] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.539613][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 94.554267][ T2217] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.574497][ T2217] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.598534][ T5318] bond3: option coupled_control: invalid value (255) [ 94.635377][ T5318] bond3 (unregistering): Released all slaves [ 94.694732][ T5336] loop2: detected capacity change from 0 to 1024 [ 94.802645][ T5336] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 95.075538][ T5343] loop1: detected capacity change from 0 to 512 [ 95.150728][ T5346] loop0: detected capacity change from 0 to 512 [ 95.168141][ T5348] loop1: detected capacity change from 0 to 512 [ 95.188148][ T5346] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.215100][ T5348] EXT4-fs (loop1): inodes count not valid: 1024 vs 32 [ 95.217626][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 95.232040][ T5346] xt_limit: Overflow, try lower: 7/0 [ 97.117969][ T5383] loop1: detected capacity change from 0 to 1024 [ 97.140862][ T5383] EXT4-fs (loop1): inodes count not valid: 7 vs 32 [ 97.192834][ T5364] loop0: detected capacity change from 0 to 8192 [ 97.253154][ T5390] loop2: detected capacity change from 0 to 256 [ 97.264285][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 97.270352][ T5390] msdos: Bad value for 'time_offset' [ 97.290748][ T5392] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 97.346457][ T5396] loop5: detected capacity change from 0 to 512 [ 97.363945][ T5392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.404078][ T5396] EXT4-fs mount: 11 callbacks suppressed [ 97.404091][ T5396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.437801][ T5396] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.499670][ T5406] FAULT_INJECTION: forcing a failure. [ 97.499670][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 97.513633][ T5406] CPU: 1 UID: 0 PID: 5406 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.513755][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.513792][ T5406] Call Trace: [ 97.513800][ T5406] [ 97.513809][ T5406] __dump_stack+0x1d/0x30 [ 97.513832][ T5406] dump_stack_lvl+0x95/0xd0 [ 97.513899][ T5406] dump_stack+0x15/0x1b [ 97.513918][ T5406] should_fail_ex+0x25e/0x270 [ 97.513939][ T5406] should_failslab+0x8c/0xb0 [ 97.514039][ T5406] kmem_cache_alloc_noprof+0x66/0x3f0 [ 97.514066][ T5406] ? alloc_empty_file+0x70/0x1e0 [ 97.514087][ T5406] alloc_empty_file+0x70/0x1e0 [ 97.514106][ T5406] alloc_file_pseudo+0x92/0x120 [ 97.514200][ T5406] __shmem_file_setup+0x226/0x260 [ 97.514218][ T5406] shmem_file_setup+0x3b/0x50 [ 97.514235][ T5406] memfd_alloc_file+0x4e/0x300 [ 97.514326][ T5406] __se_sys_memfd_create+0x2e1/0x3b0 [ 97.514351][ T5406] __x64_sys_memfd_create+0x31/0x40 [ 97.514430][ T5406] x64_sys_call+0x1f22/0x3020 [ 97.514453][ T5406] do_syscall_64+0x136/0x3c0 [ 97.514484][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.514552][ T5406] RIP: 0033:0x7f88e6face59 [ 97.514569][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.514654][ T5406] RSP: 002b:00007f88e5a06e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 97.514675][ T5406] RAX: ffffffffffffffda RBX: 00000000000005e5 RCX: 00007f88e6face59 [ 97.514731][ T5406] RDX: 00007f88e5a06ee0 RSI: 0000000000000000 RDI: 00007f88e704304f [ 97.514825][ T5406] RBP: 0000200000000ac0 R08: 00000000ffffffff R09: 0000000000000000 [ 97.514840][ T5406] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 97.514854][ T5406] R13: 00007f88e5a06ee0 R14: 00007f88e5a06ea0 R15: 0000200000000000 [ 97.514877][ T5406] [ 97.560060][ T5396] Cannot find add_set index 0 as target [ 97.577339][ T5412] FAULT_INJECTION: forcing a failure. [ 97.577339][ T5412] name failslab, interval 1, probability 0, space 0, times 0 [ 97.577513][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.577542][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.577554][ T5412] Call Trace: [ 97.577561][ T5412] [ 97.577568][ T5412] __dump_stack+0x1d/0x30 [ 97.577592][ T5412] dump_stack_lvl+0x95/0xd0 [ 97.577611][ T5412] dump_stack+0x15/0x1b [ 97.577630][ T5412] should_fail_ex+0x25e/0x270 [ 97.577713][ T5412] should_failslab+0x8c/0xb0 [ 97.577741][ T5412] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 97.577825][ T5412] ? __alloc_skb+0x2db/0x6f0 [ 97.577905][ T5412] __alloc_skb+0x2db/0x6f0 [ 97.577966][ T5412] tipc_msg_build+0xc1/0x950 [ 97.577988][ T5412] ? tipc_node_get_mtu+0x63/0x3f0 [ 97.578009][ T5412] __tipc_sendmsg+0x1438/0x1c00 [ 97.578068][ T5412] ? __pfx_woken_wake_function+0x10/0x10 [ 97.578090][ T5412] ? tick_program_event+0x79/0xc0 [ 97.578136][ T5412] ? _raw_spin_unlock+0x9/0x30 [ 97.578154][ T5412] ? __hrtimer_rearm_deferred+0x571/0x650 [ 97.578246][ T5412] __tipc_sendstream+0xa72/0xb70 [ 97.578268][ T5412] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 97.578306][ T5412] ? __pfx_tipc_send_packet+0x10/0x10 [ 97.578326][ T5412] ? lock_sock_nested+0x84/0x110 [ 97.578346][ T5412] tipc_send_packet+0x65/0x80 [ 97.578365][ T5412] ? __pfx_tipc_send_packet+0x10/0x10 [ 97.578396][ T5412] ____sys_sendmsg+0x532/0x580 [ 97.578499][ T5412] ___sys_sendmsg+0x195/0x1e0 [ 97.578535][ T5412] __x64_sys_sendmsg+0xd4/0x160 [ 97.578588][ T5412] x64_sys_call+0x194c/0x3020 [ 97.578616][ T5412] do_syscall_64+0x136/0x3c0 [ 97.578711][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.578732][ T5412] RIP: 0033:0x7f88e6face59 [ 97.578747][ T5412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.578831][ T5412] RSP: 002b:00007f88e5a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.578851][ T5412] RAX: ffffffffffffffda RBX: 00007f88e7225fa0 RCX: 00007f88e6face59 [ 97.578865][ T5412] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 97.578926][ T5412] RBP: 00007f88e5a07090 R08: 0000000000000000 R09: 0000000000000000 [ 97.578939][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.578952][ T5412] R13: 00007f88e7226038 R14: 00007f88e7225fa0 R15: 00007ffd1ca3f888 [ 97.578970][ T5412] [ 98.019648][ T5409] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.585: inode #1792: comm syz.1.585: iget: illegal inode # [ 98.053090][ T5409] loop1: lost filesystem error report for type 5 error -117 [ 98.053985][ T5409] EXT4-fs (loop1): Remounting filesystem read-only [ 98.069125][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 98.069154][ C0] EXT4-fs (loop1): initial error at time 1781800522: ext4_get_journal_inode:5896 [ 98.069651][ C0] EXT4-fs (loop1): last error at time 1781800522: ext4_get_journal_inode:5896 [ 98.096710][ T5409] EXT4-fs (loop1): no journal found [ 98.102455][ T5409] EXT4-fs (loop1): can't get journal size [ 98.113882][ T5409] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 98.126104][ T5409] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 98.141074][ T5409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.166784][ T5409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.275268][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 98.275290][ T28] audit: type=1400 audit(1781800522.260:991): avc: denied { write } for pid=5432 comm="syz.1.589" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.312315][ T28] audit: type=1400 audit(1781800522.260:992): avc: denied { open } for pid=5432 comm="syz.1.589" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.649655][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.676456][ T5440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.800358][ T28] audit: type=1400 audit(1781800522.650:993): avc: denied { read } for pid=5447 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.826545][ T28] audit: type=1400 audit(1781800522.670:994): avc: denied { write } for pid=5439 comm="syz.1.593" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.465834][ T28] audit: type=1400 audit(1781800523.360:995): avc: denied { write } for pid=5439 comm="syz.1.593" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.537955][ T28] audit: type=1400 audit(1781800523.360:996): avc: denied { write } for pid=5439 comm="syz.1.593" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.571463][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.584484][ T5463] netlink: 'syz.5.597': attribute type 10 has an invalid length. [ 99.817190][ T5442] set_capacity_and_notify: 2 callbacks suppressed [ 99.817216][ T5442] loop3: detected capacity change from 0 to 8192 [ 100.240000][ T28] audit: type=1400 audit(1781800524.220:997): avc: denied { read write } for pid=5481 comm="syz.2.603" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.385665][ T28] audit: type=1400 audit(1781800524.250:998): avc: denied { open } for pid=5481 comm="syz.2.603" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.423474][ T5489] FAULT_INJECTION: forcing a failure. [ 100.423474][ T5489] name failslab, interval 1, probability 0, space 0, times 0 [ 100.440055][ T5489] CPU: 1 UID: 0 PID: 5489 Comm: syz.3.604 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.440137][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.440225][ T5489] Call Trace: [ 100.440232][ T5489] [ 100.440240][ T5489] __dump_stack+0x1d/0x30 [ 100.440260][ T5489] dump_stack_lvl+0x95/0xd0 [ 100.440277][ T5489] dump_stack+0x15/0x1b [ 100.440296][ T5489] should_fail_ex+0x25e/0x270 [ 100.440315][ T5489] should_failslab+0x8c/0xb0 [ 100.440342][ T5489] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 100.440380][ T5489] ? __alloc_skb+0x2db/0x6f0 [ 100.440401][ T5489] __alloc_skb+0x2db/0x6f0 [ 100.440485][ T5489] ? __alloc_skb+0x205/0x6f0 [ 100.440570][ T5489] rtmsg_ifinfo_build_skb+0x5b/0x1b0 [ 100.440596][ T5489] rtmsg_ifinfo+0x6d/0x110 [ 100.440620][ T5489] __dev_notify_flags+0x76/0x390 [ 100.440641][ T5489] netif_change_flags+0xa5/0xc0 [ 100.440665][ T5489] do_setlink+0x8fc/0x2860 [ 100.440686][ T5489] ? cred_has_capability+0x224/0x2a0 [ 100.440712][ T5489] ? _raw_spin_lock+0x52/0xa0 [ 100.440733][ T5489] ? __mutex_lock+0xa9d/0xf40 [ 100.440812][ T5489] ? __mutex_lock_slowpath+0xa/0x10 [ 100.440837][ T5489] rtnl_newlink+0xf51/0x1400 [ 100.440932][ T5489] ? xa_load+0xb1/0xe0 [ 100.440950][ T5489] ? __siphash_unaligned+0x185/0x2d0 [ 100.441032][ T5489] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 100.441051][ T5489] ? __rcu_read_unlock+0x4e/0x70 [ 100.441075][ T5489] ? avc_has_perm_noaudit+0xa3/0x120 [ 100.441123][ T5489] ? cred_has_capability+0x224/0x2a0 [ 100.441149][ T5489] ? selinux_capable+0x31/0x40 [ 100.441166][ T5489] ? security_capable+0x7b/0x90 [ 100.441188][ T5489] ? ns_capable+0x80/0xb0 [ 100.441273][ T5489] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.441289][ T5489] rtnetlink_rcv_msg+0x64b/0x720 [ 100.441309][ T5489] netlink_rcv_skb+0x11e/0x220 [ 100.441327][ T5489] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.441350][ T5489] rtnetlink_rcv+0x1c/0x30 [ 100.441433][ T5489] netlink_unicast+0x5a7/0x680 [ 100.441463][ T5489] netlink_sendmsg+0x5be/0x6f0 [ 100.441483][ T5489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.441527][ T5489] ____sys_sendmsg+0x532/0x580 [ 100.441553][ T5489] ___sys_sendmsg+0x195/0x1e0 [ 100.441667][ T5489] __x64_sys_sendmsg+0xd4/0x160 [ 100.441721][ T5489] x64_sys_call+0x194c/0x3020 [ 100.441740][ T5489] do_syscall_64+0x136/0x3c0 [ 100.441800][ T5489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.441854][ T5489] RIP: 0033:0x7fba7752ce59 [ 100.441871][ T5489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.441932][ T5489] RSP: 002b:00007fba75f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.441952][ T5489] RAX: ffffffffffffffda RBX: 00007fba777a6090 RCX: 00007fba7752ce59 [ 100.441999][ T5489] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 100.442011][ T5489] RBP: 00007fba75f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 100.442022][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.442033][ T5489] R13: 00007fba777a6128 R14: 00007fba777a6090 R15: 00007ffe89361d18 [ 100.442049][ T5489] [ 100.756202][ T5489] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.770858][ T5489] bond3: (slave lo): Enslaving as an active interface with an up link [ 100.781194][ T5489] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.781650][ T5493] xt_connbytes: Forcing CT accounting to be enabled [ 100.843884][ T5490] loop1: detected capacity change from 0 to 128 [ 100.859037][ T28] audit: type=1400 audit(1781800524.840:999): avc: denied { getopt } for pid=5491 comm="syz.5.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.950286][ T5497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.957807][ T5497] IPv6: NLM_F_CREATE should be set when creating new route [ 100.965287][ T5497] IPv6: NLM_F_CREATE should be set when creating new route [ 100.972797][ T5497] IPv6: NLM_F_CREATE should be set when creating new route [ 101.153160][ T5506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.160513][ T5506] IPv6: NLM_F_CREATE should be set when creating new route [ 101.167798][ T5506] IPv6: NLM_F_CREATE should be set when creating new route [ 101.175238][ T5506] IPv6: NLM_F_CREATE should be set when creating new route [ 101.198961][ T28] audit: type=1400 audit(1781800525.120:1000): avc: denied { create } for pid=5503 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.603464][ T5514] netlink: 128 bytes leftover after parsing attributes in process `syz.5.613'. [ 101.624423][ T5514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.867561][ T5528] loop1: detected capacity change from 0 to 256 [ 102.198725][ T11] usb usb6-port1: attempt power cycle [ 102.276834][ T5535] netlink: 'syz.5.616': attribute type 10 has an invalid length. [ 102.459672][ T5521] loop2: detected capacity change from 0 to 8192 [ 102.682071][ T5568] loop1: detected capacity change from 0 to 128 [ 103.289900][ T5579] netlink: 48 bytes leftover after parsing attributes in process `syz.5.625'. [ 103.326020][ T5579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.333274][ T5579] IPv6: NLM_F_CREATE should be set when creating new route [ 103.340516][ T5579] IPv6: NLM_F_CREATE should be set when creating new route [ 103.526282][ T5584] FAULT_INJECTION: forcing a failure. [ 103.526282][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 103.542405][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.1.627 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.542433][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.542444][ T5584] Call Trace: [ 103.542450][ T5584] [ 103.542457][ T5584] __dump_stack+0x1d/0x30 [ 103.542478][ T5584] dump_stack_lvl+0x95/0xd0 [ 103.542566][ T5584] dump_stack+0x15/0x1b [ 103.542581][ T5584] should_fail_ex+0x25e/0x270 [ 103.542603][ T5584] should_failslab+0x8c/0xb0 [ 103.542713][ T5584] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 103.542738][ T5584] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 103.542774][ T5584] kmemdup_nul+0x36/0xc0 [ 103.542799][ T5584] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 103.542822][ T5584] vfs_parse_monolithic_sep+0x16a/0x270 [ 103.542890][ T5584] generic_parse_monolithic+0x24/0x30 [ 103.542908][ T5584] parse_monolithic_mount_data+0x46/0x60 [ 103.542930][ T5584] do_new_mount+0x24e/0x8d0 [ 103.543001][ T5584] ? security_capable+0x7b/0x90 [ 103.543029][ T5584] path_mount+0x4ad/0xb90 [ 103.543058][ T5584] __se_sys_mount+0x28c/0x2e0 [ 103.543149][ T5584] ? fput+0x8f/0xc0 [ 103.543193][ T5584] __x64_sys_mount+0x67/0x80 [ 103.543228][ T5584] x64_sys_call+0x2d61/0x3020 [ 103.543251][ T5584] do_syscall_64+0x136/0x3c0 [ 103.543281][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.543306][ T5584] RIP: 0033:0x7fdc1bd6ce59 [ 103.543323][ T5584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.543358][ T5584] RSP: 002b:00007fdc1a7c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.543379][ T5584] RAX: ffffffffffffffda RBX: 00007fdc1bfe5fa0 RCX: 00007fdc1bd6ce59 [ 103.543395][ T5584] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 103.543457][ T5584] RBP: 00007fdc1a7c7090 R08: 0000200000000180 R09: 0000000000000000 [ 103.543471][ T5584] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 103.543545][ T5584] R13: 00007fdc1bfe6038 R14: 00007fdc1bfe5fa0 R15: 00007ffddd18e778 [ 103.543566][ T5584] [ 103.776944][ T5585] loop5: detected capacity change from 0 to 256 [ 104.266891][ T5593] loop1: detected capacity change from 0 to 1024 [ 104.307281][ T5595] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 104.328127][ T5595] netlink: 52 bytes leftover after parsing attributes in process `syz.2.630'. [ 104.337351][ T11] usb usb6-port1: unable to enumerate USB device [ 104.356382][ T5593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.357369][ T5595] veth3: entered promiscuous mode [ 104.379371][ T5595] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 104.380492][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 104.380505][ T28] audit: type=1400 audit(1781800528.360:1007): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.408860][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'. [ 104.428698][ T5593] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 104.439295][ T5595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.503257][ T5603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.554743][ T28] audit: type=1400 audit(1781800528.540:1008): avc: denied { append } for pid=5608 comm="syz.2.634" name="pfkey" dev="proc" ino=4026532708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.701805][ T5612] loop5: detected capacity change from 0 to 1024 [ 104.708719][ T5607] loop3: detected capacity change from 0 to 8192 [ 104.713238][ T5609] syzkaller0: entered promiscuous mode [ 104.720876][ T5609] syzkaller0: entered allmulticast mode [ 104.744178][ T5612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.759961][ T5612] netlink: 'syz.5.635': attribute type 1 has an invalid length. [ 104.776122][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.816751][ T28] audit: type=1400 audit(1781800528.800:1009): avc: denied { setopt } for pid=5617 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.949383][ T5620] loop2: detected capacity change from 0 to 512 [ 104.963386][ T5620] EXT4-fs: Ignoring removed nobh option [ 104.972702][ T5620] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.981788][ T5623] loop5: detected capacity change from 0 to 4096 [ 104.993201][ T5620] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 105.015601][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.024974][ T5623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.062717][ T5622] syz.5.638 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 105.076851][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz.5.638 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.076966][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.076978][ T5622] Call Trace: [ 105.076985][ T5622] [ 105.076994][ T5622] __dump_stack+0x1d/0x30 [ 105.077080][ T5622] dump_stack_lvl+0x95/0xd0 [ 105.077098][ T5622] dump_stack+0x15/0x1b [ 105.077118][ T5622] dump_header+0x80/0x240 [ 105.077195][ T5622] oom_kill_process+0x295/0x350 [ 105.077222][ T5622] out_of_memory+0x981/0xbc0 [ 105.077253][ T5622] try_charge_memcg+0x621/0xa00 [ 105.077308][ T5622] __memcg_kmem_charge_page+0x199/0x3a0 [ 105.077334][ T5622] __alloc_frozen_pages_noprof+0x18a/0x350 [ 105.077362][ T5622] alloc_pages_mpol+0xa9/0x1d0 [ 105.077390][ T5622] alloc_pages_noprof+0x8f/0x140 [ 105.077415][ T5622] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 105.077444][ T5622] __kvmalloc_node_noprof+0x3d4/0x640 [ 105.077531][ T5622] ? futex_hash_allocate+0x192/0x920 [ 105.077631][ T5622] ? futex_hash_allocate+0x192/0x920 [ 105.077650][ T5622] futex_hash_allocate+0x192/0x920 [ 105.077668][ T5622] ? cap_task_prctl+0x13f/0x6b0 [ 105.077691][ T5622] futex_hash_prctl+0xd8/0xf0 [ 105.077711][ T5622] __se_sys_prctl+0x4f4/0x13c0 [ 105.077780][ T5622] __x64_sys_prctl+0x67/0x80 [ 105.077800][ T5622] x64_sys_call+0x2533/0x3020 [ 105.077894][ T5622] do_syscall_64+0x136/0x3c0 [ 105.077920][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.077942][ T5622] RIP: 0033:0x7f677d13ce59 [ 105.077960][ T5622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.078051][ T5622] RSP: 002b:00007f677bb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 105.078075][ T5622] RAX: ffffffffffffffda RBX: 00007f677d3b5fa0 RCX: 00007f677d13ce59 [ 105.078128][ T5622] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 105.078142][ T5622] RBP: 00007f677d1d2e6f R08: 0000000000000000 R09: 0000000000000000 [ 105.078194][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.078209][ T5622] R13: 00007f677d3b6038 R14: 00007f677d3b5fa0 R15: 00007ffc1bd9f628 [ 105.078278][ T5622] [ 105.078311][ T5622] memory: usage 304600kB, limit 307200kB, failcnt 262 [ 105.078637][ T5620] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.092374][ T5622] memory+swap: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 105.117755][ T5623] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 105.220395][ T5620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.325212][ T5622] kmem: usage 198488kB, limit 9007199254740988kB, failcnt 0 [ 105.341225][ T5620] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 105.369365][ T5622] Memory cgroup stats for /syz5: [ 105.369742][ T5622] cache 32768 [ 105.385569][ T5620] loop2: lost filesystem error report for type 5 error -117 [ 105.388174][ T5620] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 105.395774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 105.395823][ C1] EXT4-fs (loop2): last error at time 1781800529: ext4_read_block_bitmap_nowait:483 [ 105.405773][ T5622] rss 4096 [ 105.428383][ T5622] shmem 16384 [ 105.431674][ T5622] mapped_file 0 [ 105.435237][ T5622] dirty 0 [ 105.438220][ T5622] writeback 0 [ 105.441537][ T5622] workingset_refault_anon 3044 [ 105.446615][ T5622] workingset_refault_file 2 [ 105.451205][ T5622] swap 2256896 [ 105.453091][ T5623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.454712][ T5622] swapcached 19259392 [ 105.454720][ T5622] pgpgin 35251 [ 105.454747][ T5622] pgpgout 35242 [ 105.454754][ T5622] pgfault 37268 [ 105.481800][ T5622] pgmajfault 171 [ 105.485368][ T5622] inactive_anon 0 [ 105.488986][ T5622] active_anon 12288 [ 105.492893][ T5622] inactive_file 0 [ 105.496538][ T5622] active_file 8192 [ 105.500249][ T5622] unevictable 0 [ 105.503758][ T5622] hierarchical_memory_limit 314572800 [ 105.509185][ T5622] hierarchical_memsw_limit 9223372036854771712 [ 105.515359][ T5622] total_cache 32768 [ 105.519186][ T5622] total_rss 4096 [ 105.520650][ T5620] loop2: lost filesystem error report for type 5 error -117 [ 105.522930][ T5622] total_shmem 16384 [ 105.522939][ T5622] total_mapped_file 0 [ 105.522948][ T5622] total_dirty 0 [ 105.522955][ T5622] total_writeback 0 [ 105.523010][ T5622] total_workingset_refault_anon 3044 [ 105.523027][ T5622] total_workingset_refault_file 2 [ 105.523037][ T5622] total_swap 2256896 [ 105.523045][ T5622] total_swapcached 19259392 [ 105.523054][ T5622] total_pgpgin 35251 [ 105.523061][ T5622] total_pgpgout 35242 [ 105.523068][ T5622] total_pgfault 37268 [ 105.523076][ T5622] total_pgmajfault 171 [ 105.523096][ T5622] total_inactive_anon 0 [ 105.523103][ T5622] total_active_anon 12288 [ 105.523112][ T5622] total_inactive_file 0 [ 105.523121][ T5622] total_active_file 8192 [ 105.523129][ T5622] total_unevictable 0 [ 105.523138][ T5622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.638,pid=5621,uid=0 [ 105.523255][ T5622] Memory cgroup out of memory: Killed process 5621 (syz.5.638) total-vm:96216kB, anon-rss:1232kB, file-rss:21840kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 105.648245][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.659471][ T5620] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 105.695930][ T5620] loop2: lost filesystem error report for type 5 error -117 [ 105.699811][ T5620] Quota error (device loop2): write_blk: dquota write failed [ 105.731131][ T5620] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 105.753974][ T5620] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.637: Failed to acquire dquot type 1 [ 105.767338][ T5630] loop1: detected capacity change from 0 to 512 [ 105.801029][ T5620] loop2: lost filesystem error report for type 5 error -28 [ 105.803136][ T5620] EXT4-fs (loop2): 1 orphan inode deleted [ 105.816873][ T39] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 105.857537][ T39] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 1 [ 105.869526][ T39] loop2: lost filesystem error report for type 5 error -117 [ 105.872365][ T5630] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.641: inode #1792: comm syz.1.641: iget: illegal inode # [ 105.889710][ T5620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.894487][ T5630] loop1: lost filesystem error report for type 5 error -117 [ 105.921078][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.939711][ T5630] EXT4-fs (loop1): Remounting filesystem read-only [ 105.946645][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.946672][ C1] EXT4-fs (loop1): initial error at time 1781800529: ext4_get_journal_inode:5896 [ 105.946892][ C1] EXT4-fs (loop1): last error at time 1781800529: ext4_get_journal_inode:5896 [ 105.979137][ T5630] EXT4-fs (loop1): no journal found [ 105.986599][ T5630] EXT4-fs (loop1): can't get journal size [ 106.001545][ T5630] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 106.014783][ T5630] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 106.055434][ T5639] loop5: detected capacity change from 0 to 256 [ 106.101710][ T5630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.121387][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.353700][ T23] usb usb6-port1: attempt power cycle [ 106.397506][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 106.398628][ T5645] tipc: Trying to set illegal importance in message [ 106.420875][ T5645] tipc: Started in network mode [ 106.426219][ T5645] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 106.435397][ T5645] tipc: Enabling of bearer rejected, failed to enable media [ 106.490773][ T5652] loop3: detected capacity change from 0 to 1024 [ 106.517008][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.532716][ T5652] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 106.758533][ T5664] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 106.813590][ T5664] SELinux: failed to load policy [ 107.238279][ T5662] loop5: detected capacity change from 0 to 8192 [ 107.558831][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.765919][ T28] audit: type=1400 audit(1781800531.740:1010): avc: denied { setopt } for pid=5679 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.885492][ T28] audit: type=1400 audit(1781800531.870:1011): avc: denied { write } for pid=5679 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.000241][ T28] audit: type=1400 audit(1781800531.980:1012): avc: denied { name_bind } for pid=5681 comm="syz.2.656" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 108.173332][ T23] usb usb6-port1: unable to enumerate USB device [ 108.281141][ T5691] loop5: detected capacity change from 0 to 128 [ 108.319148][ T5691] netlink: 'syz.5.659': attribute type 1 has an invalid length. [ 108.346750][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.659'. [ 108.362869][ T28] audit: type=1400 audit(1781800532.350:1013): avc: denied { mounton } for pid=5690 comm="syz.5.659" path="/65/file0/bus" dev="loop5" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 108.574298][ T5698] loop1: detected capacity change from 0 to 256 [ 108.791606][ T5700] loop3: detected capacity change from 0 to 1024 [ 108.867440][ T5700] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 108.903983][ T5700] EXT4-fs (loop3): mount failed [ 108.965476][ T5696] loop2: detected capacity change from 0 to 4096 [ 108.965863][ T5700] FAULT_INJECTION: forcing a failure. [ 108.965863][ T5700] name failslab, interval 1, probability 0, space 0, times 0 [ 108.985395][ T5696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.996988][ T5700] CPU: 0 UID: 0 PID: 5700 Comm: syz.3.661 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.997066][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.997157][ T5700] Call Trace: [ 108.997162][ T5700] [ 108.997168][ T5700] __dump_stack+0x1d/0x30 [ 108.997188][ T5700] dump_stack_lvl+0x95/0xd0 [ 108.997205][ T5700] dump_stack+0x15/0x1b [ 108.997221][ T5700] should_fail_ex+0x25e/0x270 [ 108.997243][ T5700] should_failslab+0x8c/0xb0 [ 108.997333][ T5700] __kmalloc_noprof+0xb8/0x4d0 [ 108.997359][ T5700] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 108.997377][ T5700] kernfs_fop_write_iter+0xd4/0x2e0 [ 108.997424][ T5700] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 108.997444][ T5700] vfs_write+0x57d/0x990 [ 108.997499][ T5700] ksys_write+0xdc/0x1a0 [ 108.997523][ T5700] __x64_sys_write+0x40/0x50 [ 108.997545][ T5700] x64_sys_call+0x27e1/0x3020 [ 108.997563][ T5700] do_syscall_64+0x136/0x3c0 [ 108.997664][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.997683][ T5700] RIP: 0033:0x7fba7752ce59 [ 108.997699][ T5700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.997716][ T5700] RSP: 002b:00007fba75f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.997756][ T5700] RAX: ffffffffffffffda RBX: 00007fba777a5fa0 RCX: 00007fba7752ce59 [ 108.997768][ T5700] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000007 [ 108.997779][ T5700] RBP: 00007fba75f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.997790][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.997802][ T5700] R13: 00007fba777a6038 R14: 00007fba777a5fa0 R15: 00007ffe89361d18 [ 108.997872][ T5700] [ 109.046214][ T5709] netlink: 'syz.5.664': attribute type 10 has an invalid length. [ 109.110012][ T5706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.266497][ T5706] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 109.280385][ T5696] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 109.320271][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.393506][ T5696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.487092][ T5723] FAULT_INJECTION: forcing a failure. [ 109.487092][ T5723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.558128][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: syz.1.669 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.558152][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.558162][ T5723] Call Trace: [ 109.558169][ T5723] [ 109.558175][ T5723] __dump_stack+0x1d/0x30 [ 109.558267][ T5723] dump_stack_lvl+0x95/0xd0 [ 109.558284][ T5723] dump_stack+0x15/0x1b [ 109.558301][ T5723] should_fail_ex+0x25e/0x270 [ 109.558364][ T5723] should_fail+0xb/0x20 [ 109.558437][ T5723] should_fail_usercopy+0x1a/0x20 [ 109.558457][ T5723] _copy_from_user+0x1c/0xb0 [ 109.558479][ T5723] kstrtouint_from_user+0x69/0xf0 [ 109.558498][ T5723] ? 0xffffffff81000000 [ 109.558523][ T5723] ? avc_policy_seqno+0x15/0x30 [ 109.558549][ T5723] proc_fail_nth_write+0x50/0x160 [ 109.558575][ T5723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.558602][ T5723] vfs_write+0x252/0x990 [ 109.558627][ T5723] ksys_write+0xdc/0x1a0 [ 109.558651][ T5723] __x64_sys_write+0x40/0x50 [ 109.558673][ T5723] x64_sys_call+0x27e1/0x3020 [ 109.558752][ T5723] do_syscall_64+0x136/0x3c0 [ 109.558779][ T5723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.558824][ T5723] RIP: 0033:0x7fdc1bd2d68e [ 109.558838][ T5723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.558875][ T5723] RSP: 002b:00007fdc1a7c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.558893][ T5723] RAX: ffffffffffffffda RBX: 00007fdc1a7c76c0 RCX: 00007fdc1bd2d68e [ 109.558947][ T5723] RDX: 0000000000000001 RSI: 00007fdc1a7c70a0 RDI: 0000000000000005 [ 109.558957][ T5723] RBP: 00007fdc1a7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.558968][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.558978][ T5723] R13: 00007fdc1bfe6038 R14: 00007fdc1bfe5fa0 R15: 00007ffddd18e778 [ 109.558993][ T5723] [ 109.562138][ T28] audit: type=1400 audit(1781800533.530:1014): avc: denied { write } for pid=5693 comm="syz.2.660" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.689524][ T5732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.710382][ T28] audit: type=1400 audit(1781800533.540:1015): avc: denied { read write } for pid=5693 comm="syz.2.660" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.771064][ T5736] FAULT_INJECTION: forcing a failure. [ 109.771064][ T5736] name failslab, interval 1, probability 0, space 0, times 0 [ 109.777179][ T28] audit: type=1400 audit(1781800533.540:1016): avc: denied { open } for pid=5693 comm="syz.2.660" path="/134/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.846964][ T5732] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 109.871040][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.890105][ T5736] CPU: 0 UID: 0 PID: 5736 Comm: syz.1.672 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.890134][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.890144][ T5736] Call Trace: [ 109.890152][ T5736] [ 109.890159][ T5736] __dump_stack+0x1d/0x30 [ 109.890241][ T5736] dump_stack_lvl+0x95/0xd0 [ 109.890310][ T5736] dump_stack+0x15/0x1b [ 109.890326][ T5736] should_fail_ex+0x25e/0x270 [ 109.890343][ T5736] ? sctp_add_bind_addr+0x71/0x1e0 [ 109.890366][ T5736] should_failslab+0x8c/0xb0 [ 109.890434][ T5736] __kmalloc_cache_noprof+0x5f/0x400 [ 109.890508][ T5736] sctp_add_bind_addr+0x71/0x1e0 [ 109.890530][ T5736] sctp_copy_local_addr_list+0x1b4/0x250 [ 109.890554][ T5736] sctp_copy_one_addr+0x7f/0x280 [ 109.890583][ T5736] sctp_bind_addr_copy+0x79/0x290 [ 109.890603][ T5736] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 109.890622][ T5736] sctp_connect_new_asoc+0x1c3/0x3a0 [ 109.890638][ T5736] sctp_sendmsg+0x105f/0x1d00 [ 109.890792][ T5736] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 109.890916][ T5736] ? __pfx_sctp_sendmsg+0x10/0x10 [ 109.890995][ T5736] inet_sendmsg+0xc5/0xd0 [ 109.891014][ T5736] ? __pfx_inet_sendmsg+0x10/0x10 [ 109.891032][ T5736] ____sys_sendmsg+0x4e8/0x580 [ 109.891132][ T5736] ___sys_sendmsg+0x195/0x1e0 [ 109.891163][ T5736] __x64_sys_sendmsg+0xd4/0x160 [ 109.891252][ T5736] x64_sys_call+0x194c/0x3020 [ 109.891270][ T5736] do_syscall_64+0x136/0x3c0 [ 109.891358][ T5736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.891442][ T5736] RIP: 0033:0x7fdc1bd6ce59 [ 109.891456][ T5736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.891470][ T5736] RSP: 002b:00007fdc1a7a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.891486][ T5736] RAX: ffffffffffffffda RBX: 00007fdc1bfe6090 RCX: 00007fdc1bd6ce59 [ 109.891497][ T5736] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 109.891527][ T5736] RBP: 00007fdc1a7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.891538][ T5736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.891547][ T5736] R13: 00007fdc1bfe6128 R14: 00007fdc1bfe6090 R15: 00007ffddd18e778 [ 109.891561][ T5736] [ 110.131280][ T28] audit: type=1400 audit(1781800534.110:1017): avc: denied { write } for pid=5729 comm="syz.3.671" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.207356][ T28] audit: type=1400 audit(1781800534.180:1018): avc: denied { getopt } for pid=5743 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.362521][ T5750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.370000][ T5750] IPv6: NLM_F_CREATE should be set when creating new route [ 110.374118][ T5756] set_capacity_and_notify: 3 callbacks suppressed [ 110.374133][ T5756] loop5: detected capacity change from 0 to 256 [ 110.377412][ T5750] IPv6: NLM_F_CREATE should be set when creating new route [ 110.397608][ T5750] IPv6: NLM_F_CREATE should be set when creating new route [ 110.400791][ T5756] msdos: Bad value for 'time_offset' [ 110.482635][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 110.537177][ T5760] loop0: detected capacity change from 0 to 4096 [ 110.586477][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.600932][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.815556][ T5762] loop5: detected capacity change from 0 to 512 [ 110.839354][ T5762] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.681: inode #1792: comm syz.5.681: iget: illegal inode # [ 110.853907][ T5762] loop5: lost filesystem error report for type 5 error -117 [ 110.854505][ T5762] EXT4-fs (loop5): Remounting filesystem read-only [ 110.868766][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 110.868816][ C0] EXT4-fs (loop5): initial error at time 1781800534: ext4_get_journal_inode:5896 [ 110.868865][ C0] EXT4-fs (loop5): last error at time 1781800534: ext4_get_journal_inode:5896 [ 110.896187][ T5762] EXT4-fs (loop5): no journal found [ 110.902216][ T5762] EXT4-fs (loop5): can't get journal size [ 110.966911][ T5762] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 110.967137][ T5780] SET target dimension over the limit! [ 110.980522][ T5762] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 111.008089][ T5762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.181337][ T5782] loop2: detected capacity change from 0 to 256 [ 111.266850][ T5762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.616800][ T5796] loop5: detected capacity change from 0 to 256 [ 111.624058][ T5770] syz.2.684 (5770) used greatest stack depth: 8520 bytes left [ 111.631864][ T5794] loop1: detected capacity change from 0 to 512 [ 111.652982][ T5787] loop0: detected capacity change from 0 to 512 [ 111.677681][ T5796] msdos: Bad value for 'time_offset' [ 111.695311][ T5798] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 111.707756][ T5794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.723010][ T5787] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.689: bg 0: block 393: padding at end of block bitmap is not set [ 111.732717][ T5794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.690: bg 0: block 393: padding at end of block bitmap is not set [ 111.758988][ T5787] loop0: lost filesystem error report for type 5 error -117 [ 111.759131][ T5787] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 111.766549][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 111.766568][ C1] EXT4-fs (loop0): initial error at time 1781800535: ext4_validate_block_bitmap:441 [ 111.766587][ C1] EXT4-fs (loop0): last error at time 1781800535: ext4_validate_block_bitmap:441 [ 111.785979][ T5794] loop1: lost filesystem error report for type 5 error -117 [ 111.813126][ T5794] EXT4-fs (loop1): Remounting filesystem read-only [ 111.819375][ T5806] netlink: 'syz.5.694': attribute type 1 has an invalid length. [ 111.832795][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.839261][ T5794] EXT4-fs (loop1): 2 truncates cleaned up [ 111.841490][ C0] EXT4-fs (loop1): initial error at time 1781800535: ext4_validate_block_bitmap:441 [ 111.856912][ C0] EXT4-fs (loop1): last error at time 1781800535: ext4_validate_block_bitmap:441 [ 111.872264][ T5787] loop0: lost filesystem error report for type 5 error -117 [ 111.872466][ T5809] loop3: detected capacity change from 0 to 256 [ 111.872648][ T5787] EXT4-fs (loop0): 2 truncates cleaned up [ 111.893871][ T5794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.910519][ T5801] netlink: 92 bytes leftover after parsing attributes in process `syz.2.693'. [ 111.933341][ T5787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.941693][ T5806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.952569][ T5809] loop3: detected capacity change from 0 to 512 [ 111.961433][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.977439][ T5809] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.695: corrupted xattr block 95: invalid header [ 111.977943][ T5794] ucma_write: process 457 (syz.1.690) changed security contexts after opening file descriptor, this is not allowed. [ 112.036303][ T5809] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.036621][ T5809] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.695: bg 0: block 7: invalid block bitmap [ 112.045835][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 112.045851][ C0] EXT4-fs (loop3): initial error at time 1781800536: ext4_expand_extra_isize_ea:2810: inode 11 [ 112.045875][ C0] EXT4-fs (loop3): last error at time 1781800536: ext4_expand_extra_isize_ea:2810: inode 11 [ 112.086901][ T5806] netlink: 60 bytes leftover after parsing attributes in process `syz.5.694'. [ 112.121121][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 112.122663][ T5809] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.139088][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 112.141619][ T5809] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.695: corrupted xattr block 95: invalid header [ 112.145592][ T5806] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 112.149033][ T5809] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.173049][ T5809] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 112.191616][ T5809] EXT4-fs (loop3): 1 orphan inode deleted [ 112.193122][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.197716][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.208077][ T39] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.259822][ T28] audit: type=1400 audit(1781800536.240:1019): avc: denied { ioctl } for pid=5819 comm="syz.1.698" path="socket:[12251]" dev="sockfs" ino=12251 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.326534][ T28] audit: type=1400 audit(1781800536.310:1020): avc: denied { create } for pid=5819 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 112.353072][ T5806] netlink: 'syz.5.694': attribute type 10 has an invalid length. [ 112.357821][ T39] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.362890][ T5806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.694'. [ 112.386740][ T28] audit: type=1400 audit(1781800536.330:1021): avc: denied { write } for pid=5819 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 112.409126][ T5806] dummy0: entered promiscuous mode [ 112.425335][ T39] bond1: (slave dummy0): link status up again after 0 ms [ 112.436397][ T28] audit: type=1400 audit(1781800536.420:1022): avc: denied { write } for pid=5826 comm="syz.1.701" lport=44273 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 112.463700][ T39] bond1: (slave dummy0): link status up again after 0 ms [ 112.482899][ T39] bond1: (slave dummy0): link status up again after 0 ms [ 112.502785][ T30] bond1: (slave dummy0): link status up again after 0 ms [ 112.518303][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.527439][ T30] bond1: (slave dummy0): link status up again after 0 ms [ 112.535363][ T5806] bond1: (slave dummy0): Removing an active aggregator [ 112.545489][ T5806] bond1: (slave dummy0): Releasing backup interface [ 112.633002][ T5839] loop5: detected capacity change from 0 to 256 [ 112.644485][ T5839] msdos: Bad value for 'time_offset' [ 112.670682][ T28] audit: type=1400 audit(1781800536.650:1023): avc: denied { read } for pid=5841 comm="syz.2.705" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.800029][ T5858] tmpfs: Bad value for 'mpol' [ 112.939675][ T5870] ISOFS: unable to read i-node block [ 112.946110][ T5870] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 112.957257][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 112.966591][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 112.977562][ T5870] netlink: 'syz.0.714': attribute type 19 has an invalid length. [ 112.985632][ T5870] netlink: 'syz.0.714': attribute type 20 has an invalid length. [ 113.018219][ T5873] 9p: Bad value for 'wfdno' [ 113.646895][ T5896] msdos: Bad value for 'time_offset' [ 113.767383][ T5902] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.807326][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.825347][ T5902] FAULT_INJECTION: forcing a failure. [ 113.825347][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 113.845979][ T5913] netlink: 144 bytes leftover after parsing attributes in process `syz.5.730'. [ 113.854384][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.0.726 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.854411][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.854423][ T5902] Call Trace: [ 113.854466][ T5902] [ 113.854474][ T5902] __dump_stack+0x1d/0x30 [ 113.854571][ T5902] dump_stack_lvl+0x95/0xd0 [ 113.854638][ T5902] dump_stack+0x15/0x1b [ 113.854661][ T5902] should_fail_ex+0x25e/0x270 [ 113.854704][ T5902] should_failslab+0x8c/0xb0 [ 113.854730][ T5902] kmem_cache_alloc_noprof+0x66/0x3f0 [ 113.854759][ T5902] ? ext4_init_io_end+0x31/0xb0 [ 113.854798][ T5902] ext4_init_io_end+0x31/0xb0 [ 113.854823][ T5902] ext4_do_writepages+0x78c/0x2720 [ 113.854853][ T5902] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 113.854916][ T5902] ? try_to_wake_up+0x4b5/0x6c0 [ 113.854953][ T5902] ? kick_pool+0x267/0x2d0 [ 113.854976][ T5902] ? __rcu_read_unlock+0x4e/0x70 [ 113.855000][ T5902] ? __queue_delayed_work+0xa6/0x1c0 [ 113.855028][ T5902] ? mod_delayed_work_on+0xbc/0x140 [ 113.855074][ T5902] ? kblockd_mod_delayed_work_on+0x35/0x50 [ 113.855106][ T5902] ext4_writepages+0x18f/0x300 [ 113.855133][ T5902] ? __pfx_ext4_writepages+0x10/0x10 [ 113.855155][ T5902] do_writepages+0x1b9/0x300 [ 113.855251][ T5902] ? __rcu_read_unlock+0x4e/0x70 [ 113.855272][ T5902] ? inode_to_bdi+0x47/0xa0 [ 113.855297][ T5902] ? _raw_spin_unlock+0x9/0x30 [ 113.855315][ T5902] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 113.855387][ T5902] filemap_write_and_wait_range+0x166/0x370 [ 113.855426][ T5902] filemap_invalidate_pages+0xd3/0x1e0 [ 113.855454][ T5902] ? should_fail_ex+0xd9/0x270 [ 113.855478][ T5902] ? __iomap_dio_rw+0x191/0x1410 [ 113.855500][ T5902] ? should_failslab+0x8c/0xb0 [ 113.855620][ T5902] kiocb_invalidate_pages+0x6e/0x80 [ 113.855655][ T5902] __iomap_dio_rw+0x6e7/0x1410 [ 113.855689][ T5902] iomap_dio_rw+0x40/0x90 [ 113.855784][ T5902] ext4_file_write_iter+0xc2d/0xef0 [ 113.855857][ T5902] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 113.855876][ T5902] vfs_write+0x57d/0x990 [ 113.855905][ T5902] ksys_write+0xdc/0x1a0 [ 113.855931][ T5902] __x64_sys_write+0x40/0x50 [ 113.856029][ T5902] x64_sys_call+0x27e1/0x3020 [ 113.856050][ T5902] do_syscall_64+0x136/0x3c0 [ 113.856164][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.856185][ T5902] RIP: 0033:0x7f88e6face59 [ 113.856201][ T5902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.856219][ T5902] RSP: 002b:00007f88e5a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.856314][ T5902] RAX: ffffffffffffffda RBX: 00007f88e7225fa0 RCX: 00007f88e6face59 [ 113.856327][ T5902] RDX: 00000000fffffe4c RSI: 0000200000000600 RDI: 0000000000000005 [ 113.856341][ T5902] RBP: 00007f88e5a07090 R08: 0000000000000000 R09: 0000000000000000 [ 113.856353][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.856366][ T5902] R13: 00007f88e7226038 R14: 00007f88e7225fa0 R15: 00007ffd1ca3f888 [ 113.856435][ T5902] [ 113.920164][ T5914] netlink: 72 bytes leftover after parsing attributes in process `syz.5.730'. [ 113.982509][ T5908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 114.070041][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 114.133923][ T5926] ipt_REJECT: TCP_RESET invalid for non-tcp [ 114.140014][ T5908] System zones: [ 114.154017][ T5925] EXT4-fs: Mount option(s) incompatible with ext2 [ 114.201975][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.202567][ T5908] 1-12 [ 114.238349][ T5908] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.729: error while reading EA inode 32 err=-116 [ 114.255404][ T5933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.267570][ T5908] loop2: lost filesystem error report for type 5 error -117 [ 114.270110][ T5908] EXT4-fs (loop2): Remounting filesystem read-only [ 114.277977][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 114.278011][ C0] EXT4-fs (loop2): initial error at time 1781800538: ext4_xattr_inode_iget:446 [ 114.278111][ C0] EXT4-fs (loop2): last error at time 1781800538: ext4_xattr_inode_iget:446 [ 114.408898][ T5908] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 114.420850][ T5908] EXT4-fs (loop2): 1 orphan inode deleted [ 114.429017][ T5914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.447950][ T5908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.453071][ T5914] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.730: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 114.507975][ T5914] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.508398][ T5914] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.730: couldn't read orphan inode 11 (err -117) [ 114.517588][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 114.517605][ C1] EXT4-fs (loop5): initial error at time 1781800538: ext4_ext_check_inode:521: inode 11 [ 114.517644][ C1] EXT4-fs (loop5): last error at time 1781800538: ext4_ext_check_inode:521: inode 11 [ 114.614249][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 114.614272][ T28] audit: type=1400 audit(1781800538.590:1032): avc: denied { write } for pid=5927 comm="syz.3.734" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.811182][ T28] audit: type=1400 audit(1781800538.600:1033): avc: denied { write } for pid=5927 comm="syz.3.734" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.871700][ T5959] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.893206][ T5914] loop5: lost filesystem error report for type 5 error -117 [ 114.899102][ T5914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.976369][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.010090][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.093528][ T28] audit: type=1400 audit(1781800538.980:1034): avc: denied { write } for pid=5957 comm="syz.1.739" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.165784][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.176272][ T28] audit: type=1400 audit(1781800539.030:1035): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.204566][ T28] audit: type=1400 audit(1781800539.050:1036): avc: denied { write } for pid=5971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.336767][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.395187][ T5981] set_capacity_and_notify: 9 callbacks suppressed [ 115.395205][ T5981] loop5: detected capacity change from 0 to 512 [ 117.010503][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.051562][ T6001] FAULT_INJECTION: forcing a failure. [ 117.051562][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.052570][ T5999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.069114][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.3.748 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.069141][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.069185][ T6001] Call Trace: [ 117.069192][ T6001] [ 117.069200][ T6001] __dump_stack+0x1d/0x30 [ 117.069224][ T6001] dump_stack_lvl+0x95/0xd0 [ 117.069243][ T6001] dump_stack+0x15/0x1b [ 117.069292][ T6001] should_fail_ex+0x25e/0x270 [ 117.069312][ T6001] should_fail+0xb/0x20 [ 117.069329][ T6001] should_fail_usercopy+0x1a/0x20 [ 117.069410][ T6001] _copy_from_user+0x1c/0xb0 [ 117.069435][ T6001] ___sys_sendmsg+0xc1/0x1e0 [ 117.069460][ T6001] ? _raw_spin_unlock+0x9/0x30 [ 117.069491][ T6001] __x64_sys_sendmsg+0xd4/0x160 [ 117.069562][ T6001] x64_sys_call+0x194c/0x3020 [ 117.069640][ T6001] do_syscall_64+0x136/0x3c0 [ 117.069669][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.069690][ T6001] RIP: 0033:0x7fba7752ce59 [ 117.069744][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.069762][ T6001] RSP: 002b:00007fba75f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.069782][ T6001] RAX: ffffffffffffffda RBX: 00007fba777a5fa0 RCX: 00007fba7752ce59 [ 117.069796][ T6001] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000005 [ 117.069817][ T6001] RBP: 00007fba75f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.069830][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.069847][ T6001] R13: 00007fba777a6038 R14: 00007fba777a5fa0 R15: 00007ffe89361d18 [ 117.069866][ T6001] [ 117.188629][ T6012] xt_hashlimit: size too large, truncated to 1048576 [ 117.273216][ T6012] xt_hashlimit: max too large, truncated to 1048576 [ 117.522612][ T6017] syzkaller0: entered promiscuous mode [ 117.528668][ T6017] syzkaller0: entered allmulticast mode [ 117.582871][ T6037] loop3: detected capacity change from 0 to 1024 [ 117.610364][ T6037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.627760][ T28] audit: type=1400 audit(1781800541.610:1037): avc: denied { write } for pid=6036 comm="syz.3.758" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.813531][ T6035] loop2: detected capacity change from 0 to 512 [ 117.844024][ T6035] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.874542][ T6035] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 117.891240][ T6035] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.902269][ T6035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.917793][ T6035] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.757: Invalid block bitmap block 0 in block_group 0 [ 117.962231][ T28] audit: type=1400 audit(1781800541.940:1038): avc: denied { write } for pid=6036 comm="syz.3.758" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.991981][ T6035] loop2: lost filesystem error report for type 5 error -117 [ 118.004325][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 118.018585][ C1] EXT4-fs (loop2): last error at time 1781800541: ext4_read_block_bitmap_nowait:483 [ 118.032403][ T6035] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.757: Invalid block bitmap block 0 in block_group 0 [ 118.052000][ T6055] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 118.052025][ T28] audit: type=1400 audit(1781800541.970:1039): avc: denied { write } for pid=6036 comm="syz.3.758" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.056280][ T6035] loop2: lost filesystem error report for type 5 error -117 [ 118.083765][ T6055] SELinux: failed to load policy [ 118.137838][ T6035] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.757: Invalid block bitmap block 0 in block_group 0 [ 118.163559][ T6035] loop2: lost filesystem error report for type 5 error -117 [ 118.165231][ T6035] Quota error (device loop2): write_blk: dquota write failed [ 118.187614][ T6060] loop0: detected capacity change from 0 to 128 [ 118.194084][ T6035] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 118.215340][ T6035] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.757: Failed to acquire dquot type 1 [ 118.255634][ T6062] loop5: detected capacity change from 0 to 512 [ 118.256375][ T6035] loop2: lost filesystem error report for type 5 error -28 [ 118.270475][ T6035] EXT4-fs (loop2): 1 orphan inode deleted [ 118.286260][ T39] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 1 [ 118.308894][ T39] loop2: lost filesystem error report for type 5 error -117 [ 118.312309][ T6062] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.347641][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.390298][ T6062] EXT4-fs (loop5): 1 truncate cleaned up [ 118.406581][ T6062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.430722][ T6051] loop1: detected capacity change from 0 to 8192 [ 118.499709][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.514678][ T4390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.687340][ T6076] loop1: detected capacity change from 0 to 512 [ 118.704192][ T6076] EXT4-fs: Ignoring removed nobh option [ 118.724087][ T6078] loop2: detected capacity change from 0 to 1024 [ 118.739481][ T6076] ------------[ cut here ]------------ [ 118.745013][ T6076] EA inode 11 i_nlink=1026 [ 118.745035][ T6076] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.768/6076 [ 118.760125][ T6076] Modules linked in: [ 118.764037][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.1.768 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.773273][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.783401][ T6076] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 118.790065][ T6076] Code: f6 35 97 ff 49 8d 7e 40 4c 8d 2d 2b eb 5a 05 e8 26 07 b6 ff 49 8b 6e 40 4c 89 e7 e8 5a 02 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 61 2a d8 03 90 90 90 90 90 90 90 [ 118.809705][ T6076] RSP: 0018:ffffc90002c7b7f8 EFLAGS: 00010246 [ 118.815787][ T6076] RAX: ffff88810575be30 RBX: ffff888108f3da38 RCX: ffffffff81c23586 [ 118.823820][ T6076] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d20a0 [ 118.831789][ T6076] RBP: 000000000000000b R08: 0001888108f3d9eb R09: 0000000000000000 [ 118.839775][ T6076] R10: ffffc90002c7b728 R11: 0001c90002c7b728 R12: ffff888108f3d9e8 [ 118.847772][ T6076] R13: ffffffff871d20a0 R14: ffff888108f3d9a0 R15: 0000000000000001 [ 118.855806][ T6076] FS: 00007fdc1a7a66c0(0000) GS:ffff8882ae8de000(0000) knlGS:0000000000000000 [ 118.864799][ T6076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.871482][ T6076] CR2: 00007f6773b6e000 CR3: 000000017917e000 CR4: 00000000003506f0 [ 118.879546][ T6076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.887591][ T6076] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 118.895649][ T6076] Call Trace: [ 118.898953][ T6076] [ 118.901894][ T6076] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 118.907840][ T6076] ext4_xattr_delete_inode+0x6b5/0x790 [ 118.913328][ T6076] ext4_evict_inode+0xb18/0xdf0 [ 118.918240][ T6076] ? __pfx_ext4_evict_inode+0x10/0x10 [ 118.923728][ T6076] evict+0x2a5/0x510 [ 118.927652][ T6076] iput+0x430/0x5a0 [ 118.931465][ T6076] ext4_process_orphan+0x1a4/0x1c0 [ 118.936614][ T6076] ext4_orphan_cleanup+0x6a6/0xa10 [ 118.941761][ T6076] ? ext4_register_li_request+0x14c/0x440 [ 118.947662][ T6076] ext4_fill_super+0x33d5/0x3780 [ 118.952708][ T6076] ? set_blocksize+0x14c/0x270 [ 118.957658][ T6076] ? __pfx_ext4_fill_super+0x10/0x10 [ 118.963045][ T6076] get_tree_bdev_flags+0x291/0x300 [ 118.968177][ T6076] ? __pfx_ext4_fill_super+0x10/0x10 [ 118.973545][ T6076] get_tree_bdev+0x1f/0x30 [ 118.974098][ T6069] loop5: detected capacity change from 0 to 8192 [ 118.977978][ T6076] ext4_get_tree+0x1c/0x30 [ 118.988893][ T6076] vfs_get_tree+0x57/0x1d0 [ 118.993342][ T6076] do_new_mount+0x288/0x8d0 [ 118.997969][ T6076] path_mount+0x4ad/0xb90 [ 119.002325][ T6076] __se_sys_mount+0x28c/0x2e0 [ 119.007092][ T6076] __x64_sys_mount+0x67/0x80 [ 119.011727][ T6076] x64_sys_call+0x2d61/0x3020 [ 119.016442][ T6076] do_syscall_64+0x136/0x3c0 [ 119.021055][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.026977][ T6076] RIP: 0033:0x7fdc1bd6e0ca [ 119.031400][ T6076] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.051146][ T6076] RSP: 002b:00007fdc1a7a5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.059622][ T6076] RAX: ffffffffffffffda RBX: 00007fdc1a7a5ee0 RCX: 00007fdc1bd6e0ca [ 119.067639][ T6076] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fdc1a7a5ea0 [ 119.075769][ T6076] RBP: 0000200000000180 R08: 00007fdc1a7a5ee0 R09: 0000000000800718 [ 119.083787][ T6076] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 119.091770][ T6076] R13: 00007fdc1a7a5ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 119.099812][ T6076] [ 119.102858][ T6076] ---[ end trace 0000000000000000 ]--- [ 119.109863][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.123563][ T6076] EXT4-fs (loop1): 1 orphan inode deleted [ 119.130330][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.139886][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.158230][ T6078] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 119.280193][ T6086] loop0: detected capacity change from 0 to 512 [ 119.453213][ T6086] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.770: inode #1792: comm syz.0.770: iget: illegal inode # [ 119.491957][ T6086] loop0: lost filesystem error report for type 5 error -117 [ 119.492806][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.507627][ C0] EXT4-fs (loop0): initial error at time 1781800543: ext4_get_journal_inode:5896 [ 119.517737][ C0] EXT4-fs (loop0): last error at time 1781800543: ext4_get_journal_inode:5896 [ 119.821444][ T6076] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.768: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 119.904603][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 119.904627][ T28] audit: type=1400 audit(1781800543.760:1040): avc: denied { write } for pid=6074 comm="syz.1.768" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.945926][ T6086] EXT4-fs (loop0): Remounting filesystem read-only [ 119.957419][ T6093] EXT4-fs: Ignoring removed nobh option [ 119.978900][ T6093] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.007854][ T6086] EXT4-fs (loop0): no journal found [ 120.027409][ T6086] EXT4-fs (loop0): can't get journal size [ 120.029403][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.044990][ T6093] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 120.049982][ T6086] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 120.068000][ T6086] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 120.093737][ T6093] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 120.102669][ T6093] EXT4-fs (loop5): orphan cleanup on readonly fs [ 120.115213][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.135668][ T6086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.149103][ T6093] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.773: Invalid block bitmap block 0 in block_group 0 [ 120.164445][ T6093] loop5: lost filesystem error report for type 5 error -117 [ 120.172792][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 120.186538][ C1] EXT4-fs (loop5): last error at time 1781800544: ext4_read_block_bitmap_nowait:483 [ 120.201699][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.214264][ T6093] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.773: Invalid block bitmap block 0 in block_group 0 [ 120.262946][ T6093] loop5: lost filesystem error report for type 5 error -117 [ 120.291626][ T6093] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.773: Invalid block bitmap block 0 in block_group 0 [ 120.316439][ T6093] loop5: lost filesystem error report for type 5 error -117 [ 120.317335][ T6093] Quota error (device loop5): write_blk: dquota write failed [ 120.336361][ T6093] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 120.352482][ T6093] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.773: Failed to acquire dquot type 1 [ 120.367211][ T6093] loop5: lost filesystem error report for type 5 error -28 [ 120.373378][ T6093] EXT4-fs (loop5): 1 orphan inode deleted [ 120.395892][ T30] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 120.407786][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.416091][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7068: comm kworker/u8:1: Failed to release dquot type 1 [ 120.442617][ T6111] set_capacity_and_notify: 4 callbacks suppressed [ 120.442648][ T6111] loop1: detected capacity change from 0 to 512 [ 120.459359][ T6102] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.466151][ T6093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.485977][ T6111] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.777: Unrecognised inode hash code 255 [ 120.497755][ T28] audit: type=1400 audit(1781800544.480:1041): avc: denied { write } for pid=6101 comm="syz.2.776" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.499552][ T6093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.530636][ T6111] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.777: Corrupt directory, running e2fsck is recommended [ 120.562786][ T28] audit: type=1400 audit(1781800544.540:1042): avc: denied { ioctl } for pid=6101 comm="syz.2.776" path="/150/file0/file1" dev="loop2" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.567123][ T6111] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 120.599974][ T6120] loop0: detected capacity change from 0 to 512 [ 120.611460][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.628876][ T6111] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.777: corrupted in-inode xattr: e_name out of bounds [ 120.642912][ T6111] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.644107][ T6111] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.777: couldn't read orphan inode 15 (err -117) [ 120.653316][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 120.653353][ C1] EXT4-fs (loop1): initial error at time 1781800544: ext4_iget_extra_inode:5128: inode 15 [ 120.653394][ C1] EXT4-fs (loop1): last error at time 1781800544: ext4_iget_extra_inode:5128: inode 15 [ 120.697757][ T6120] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.781: inode has both inline data and extents flags [ 120.714828][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.739205][ T6120] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.739482][ T6120] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.781: couldn't read orphan inode 15 (err -117) [ 120.748740][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 120.748774][ C0] EXT4-fs (loop0): initial error at time 1781800544: ext4_orphan_get:1399: inode 15 [ 120.748836][ C0] EXT4-fs (loop0): last error at time 1781800544: ext4_orphan_get:1399: inode 15 [ 120.811250][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.843589][ T6127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.851115][ T28] audit: type=1400 audit(1781800544.830:1043): avc: denied { write } for pid=6119 comm="syz.0.781" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.910642][ T28] audit: type=1400 audit(1781800544.890:1044): avc: denied { ioctl } for pid=6119 comm="syz.0.781" path="/161/file0/memory.stat" dev="loop0" ino=18 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.985898][ T6128] loop5: detected capacity change from 0 to 8192 [ 120.994500][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.039960][ T4178] ================================================================== [ 121.048059][ T4178] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 121.055001][ T4178] [ 121.057323][ T4178] write to 0xffff888103fbbcc4 of 4 bytes by task 3289 on cpu 0: [ 121.064955][ T4178] shmem_mknod+0x143/0x170 [ 121.069384][ T4178] shmem_create+0x34/0x50 [ 121.073731][ T4178] path_openat+0xcfb/0x2000 [ 121.078251][ T4178] do_file_open+0x16c/0x290 [ 121.082763][ T4178] do_sys_openat2+0xa0/0x130 [ 121.087362][ T4178] __x64_sys_openat+0xf2/0x120 [ 121.092131][ T4178] x64_sys_call+0x1e39/0x3020 [ 121.096817][ T4178] do_syscall_64+0x136/0x3c0 [ 121.101415][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.107313][ T4178] [ 121.109632][ T4178] read to 0xffff888103fbbcc4 of 4 bytes by task 4178 on cpu 1: [ 121.117175][ T4178] fill_mg_cmtime+0x5b/0x240 [ 121.121771][ T4178] generic_fillattr+0x24d/0x340 [ 121.126634][ T4178] shmem_getattr+0x181/0x200 [ 121.131232][ T4178] vfs_getattr_nosec+0x146/0x1e0 [ 121.136175][ T4178] vfs_getattr+0x48/0x60 [ 121.140424][ T4178] vfs_statx_path+0x28/0x140 [ 121.145022][ T4178] vfs_statx+0xc4/0x170 [ 121.148423][ T6141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.149179][ T4178] vfs_fstatat+0x118/0x170 [ 121.149200][ T4178] __se_sys_newfstatat+0x55/0x3e0 [ 121.149221][ T4178] __x64_sys_newfstatat+0x55/0x70 [ 121.149242][ T4178] x64_sys_call+0x2c64/0x3020 [ 121.149264][ T4178] do_syscall_64+0x136/0x3c0 [ 121.149287][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.149304][ T4178] [ 121.149308][ T4178] value changed: 0x01d736bb -> 0x01dfc8ae [ 121.149318][ T4178] [ 121.149321][ T4178] Reported by Kernel Concurrency Sanitizer on: [ 121.149334][ T4178] CPU: 1 UID: 0 PID: 4178 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 121.149365][ T4178] Tainted: [W]=WARN [ 121.149373][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.149386][ T4178] ================================================================== [ 121.238909][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.