last executing test programs: 2m5.007586704s ago: executing program 4 (id=484): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x3014, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x440000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000225cd94e5db8112190cabc0501350bad2dc83e5ac484af8ec34c733ba00049bfb42ffbf698f142f4924e41049a84fabfd9249301e74ce2ef694378349bcc6f60e419f72e83614f3d22468f4c6fa50af7ce518fac64002209c5797f8d04fd1ee85a2fb37ec858f7a45adecaa68d3e0e57d662102f6320f0d9160cdb3c9a913e7d7b163075f12c42b5aa164d60b8c75a2be8e2937453df52a2badb14737"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100}, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x212001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaaaaaaaaaaaabb86dd6140ea0000082bffff0131ec000000000000000000000001200100000000000000000000000000013200000000000000"], 0x42) 2m4.605188699s ago: executing program 4 (id=488): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc0000}], 0x1c, 0xa00, 0x0, 0x22) 2m3.261252501s ago: executing program 4 (id=494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, &(0x7f0000000000)="1c2fa899d2dc349b1502e6597160766b34b0c4468f2ab9f816082d5023ddaa499f911b35246cb354b0e93de71e72d113bba23b705dd9299342f3fb7ce8ee4bc28441238a368d923f2db1f3992be9ef9baa0312a3ed5942cba618d9ac88fe5386c8ed42000ddf168a03e320bba1b6989407e3a59d958b7a8dfd26a177826e0721f6eafe", 0x0}, 0x31) 2m2.618802105s ago: executing program 4 (id=499): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x2, 0x4, 0x9, 0x1800, 0x1}, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0xb093, 0x800003, 0x2, 0x2, 0x9, 0x6, 0x80, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x5}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r5, 0x13, 0x300}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000440)) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x10}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000300)={{0xffff0489}, 0x100, './file1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000240)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@init_itable}, {@init_itable}]}, 0x1, 0x551, &(0x7f0000000cc0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r8}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='noauto_da_alloc') lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 2m2.297500923s ago: executing program 4 (id=502): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20080058) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20) write(r0, &(0x7f0000000000)='9', 0x1) 2m1.242147985s ago: executing program 4 (id=508): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={0x0, 0x9}, 0x4a98, 0x7, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x800000) 2m1.199437574s ago: executing program 32 (id=508): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={0x0, 0x9}, 0x4a98, 0x7, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x800000) 1m47.013710512s ago: executing program 3 (id=609): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20080058) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20) write(r0, &(0x7f0000000000)='9', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) 1m46.796768087s ago: executing program 3 (id=613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='\xbc\x00', 0xfffffffffffffffa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 1m45.501634139s ago: executing program 3 (id=616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22008041, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x1, 0x0, 0x0) (async) shutdown(r2, 0x1) (async) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r3, &(0x7f0000000000)='7', 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsuid(0xee00) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)) 1m44.996737536s ago: executing program 3 (id=619): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./sys/file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setns(0xc9, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@acl}, {@oldalloc}, {@sb={'sb', 0x3d, 0x4}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) 1m44.710121116s ago: executing program 3 (id=623): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20080058) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20) write(r0, &(0x7f0000000000)='9', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) 1m44.299430022s ago: executing program 3 (id=627): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/file0\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(r0, &(0x7f0000000400)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 1m44.126221478s ago: executing program 33 (id=627): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/file0\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(r0, &(0x7f0000000400)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 17.395712317s ago: executing program 0 (id=1302): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb48, 0xc8, 0x1daf4}, 0x10) read(r0, &(0x7f0000000000)=""/75, 0x4b) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000380)={&(0x7f0000000080)=0xde, 0x6, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000340)}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000001060d1930f186d557c000000019078ac1e0005ac1414aa040090780300526bd0967fd8fc2600000000000000000000fd7fffff"], 0x0) 17.115725166s ago: executing program 0 (id=1303): r0 = io_uring_setup(0x7801, &(0x7f0000000040)={0x0, 0xbb0e, 0x800, 0x1, 0x81}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) (fail_nth: 1) 17.063619087s ago: executing program 0 (id=1305): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x4, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x13869, 0x7, 0x43a1bd76, 0x9, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x80004000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000002300)=ANY=[@ANYRESOCT], 0x0) 16.750812903s ago: executing program 0 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, &(0x7f0000001dc0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000030000000200008409010000040000000300000001000007000000000100000000080000003000612e"], &(0x7f0000000f40)=""/4067, 0x42, 0xfe3, 0x8, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) getsockopt$inet6_int(r4, 0x29, 0x19, 0x0, &(0x7f00000000c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x143042, 0x8c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000200)={0x0, 'rose0\x00', {0x2}}) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 16.508816033s ago: executing program 0 (id=1311): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5e570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x2401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020091000000000000001c001700000000002abd7000000000002abd7000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x218, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x27) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 16.018481597s ago: executing program 0 (id=1313): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r2, 0x4b34, 0x3bf) gettid() r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, '\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000140)) readv(r6, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/127, 0x7f}], 0x1) 15.984505084s ago: executing program 34 (id=1313): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r2, 0x4b34, 0x3bf) gettid() r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, '\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000140)) readv(r6, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/127, 0x7f}], 0x1) 10.164893135s ago: executing program 7 (id=1351): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x4, 0x0, 0x0, 0x1, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x80, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x884) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x6, 0x80000000, 0x0) getresuid(0x0, &(0x7f0000000200), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x15800, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, '-{'}}, {@smackfsroot={'smackfsroot', 0x3d, 'lo\x00'}}, {@flag='mand'}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) socket$xdp(0x2c, 0x3, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000400)=0x1482) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x2188, 0x0, 0x0, 0x3, 0x8, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r4) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="310700000000fddbdf2538000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a3030030001000000"], 0xa8}, 0x1, 0x2, 0x0, 0x4005}, 0x40) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16=r5, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec809e2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa1d, &(0x7f0000001740)="$eJzs3c1vHGdcB/DvbOzEcas0bUMJUdtsUqV1W+PYDk0U9UATe524+AXZjtQIUFM1CYpiUdSC1FYcUglxoqJCCAm4oB45VSoHekG5wZETByTof4AqLoQDLNrZdbKO9yV2N3YIn89qsvPye95mZufJrnfnCf+X1ev1ctrh8pW/2c3K8uS5OPvjt9993Zi+upP92Zd3ir9LRpJUk6H/Ls+V4ZnZleXFPhndTq4luZsUSQ6k+dzFwU1L11L8SZ59sHw3xV/laIdkI9tsHH3V+X9tr88/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Is3MTk5OFVmYX7ryQbW7cgjwHts3svuhHPW7+KFfsUVSNKaMjGwM9X30yIPNLzX+OZmXm0svN0f+HsmXz7x0+N0Xhyob6XtUaFd89sWXtz9aX7/x6YNVwx0Dh1rtaswf2LXqPbr9O0t2qbY0v7o8v3jhUq06v7pcPX/27OTpy3Or1bn51Favrq7VFqszK7ULa8sr1bGZN6tT58+fqdYmri5fWbo0O7FQ21h57penJyfPVt+f+PXahZXV5aXT70+szlyeX1iYX7pUxjQ2N2LONU7EX5tfq67VLixWqzdvrd8406+SjaCpjluKzUHT/XKanpyenpqanp46+875d85NTg5tWTH5kGyJ2PuTlr3ztwO9dsPPVGn1/1nIfJZyJR+k2vExk9msZDmLXba3bPT/p07Xepbb3v9v9PJHH2w+lrL/f7W59Gq3/r9LXfo/6vVmzjtNv/H4LF/ky9zOR1nPem7k08aeqPzcXDc9/mtA+VR/fmu3Pi6llqXMZzXLmc9iLpRrqq011ZzP2ZzNZD7M5cxlNdXMZT4LqWU1V7OatdTKM2omK6nlQtaynJVUM5aZvJlqpnI+53Mm1dQykatZzpUs5VJmc6HM5WZulfv9TI863g+aepSg6R5BA+7/60/i/wR53AZ+DYedqrf6//1dA+obc2Mzu1YrAAAAYJB+6R9z6MgL//CvyXBeKT+Xn5tfqE3udbUAAACAASq/rvdy42m4MfdKCu//AQAA4GlTlL+xK5KM5nhzrvlLqH3xIQAAAAA8Jcq//7/aeBptzB1Pcf9OKNf2um4AAADAYPS/x37fiGJ84/a/1evNgOutiNZ9fkfn5hdqEzPLC+9O5fXyLgPlLw225LYvKYbLnx+8lRPNqBOjzefRzTmONKKmJt6dyls52WrI2GuNp9fGOkRONyPfaEa+0SPyTCMSAJ52J3v0x4/a/7+V8WbE+LGh/UmGjnXoWSf1rADwpOg/xk7fiOJXHrz/H25lu6n/fyE3/7P5lYKJfJxPsp7rGS9/bVB+42BTrr/5Teszg/tfQ5jMeJ9PAzZi/+lcJeN9Pg8YbRvoZbzPJwLN2PxWcubxHwgA2EUnu/TD2+n/x9ve/2fr+//7Qwvd8JNCAHgi3B/BfqAzz23Kea/bCABsppcGAAAAAAAAAAAAAAAAAAAAAAAAAACAwRvobf9Hdpj831rj+g16GII+Mwdb+2Dn+fxpkt2rczHgsioDyKeeZLeO1+7N5HCy473a8TTen2Tv29V3Zqj1krj90fpeXZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYTUWyr9P6SnIgyWSS07tfq8fnzl5XYPf9avtCcS/38nkO7V11AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeTq37/1fSfH6muSpDleRUkmtJfmOv6zhI9/a6AgNycIfp2u7/3zjmqRcZah72FMMzsyvLi43DX479UPnx2+++bkxtyQ88ajllYOWhwSVaJTwc+9fPbsw9X6Yanb3x2e3f++R3q7MXU8n+XFybW5hdvLTy3oMkLxXfJ9U0pw0b9f2DU3//TYeWf99oaWcPlztX7pzZreX+YqfUvcvt5db6jelGSWu1D9Z+/3dufd626YWcSF4bS8Y2l/TbjalLSScy3Ku04qfij4pD+fNcK49/Y28U9aJxiJ4r23/w5q31GxMff7J+vUudDud4kuvJSO86fdW2+Xh5PemoPOsqw41SJ8ugxj9H+rSxp7Ycp7q04fnylBlttWF/1za0q3Zow//U6/WN+bb9XulUrWaNznSp0Yt5vcORrh9Iutfo9d5HurPip+Jfisv55/xh2/gflcbxP5Xur87NWZSRbWdK18hKM7Js+XT7hg8fjvz3v3ik2nccpobt+uNNL95K2/W/dawGdD2qFz2vR20lbu910VZiZetZ0eN1UfZIRx5K0br6dEvTqueRZlSXev5C3k6GjvW6Km7prd/uflXcnP69zpt3+vr/y2Is/5E7xv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACefEWyr9P6SnIqyeGN5WpS30a2B7ptqIwW263iQN25/89TobLdBMW93MvnOfR4qgMAAAAAAADAbrs4++O3333dmIqDrVWtv+9Xk6Ekh4s/O5jZleXFPhkNJ9eS3G3Mj3TY3uPP/Y10efbB8t3G0tHttgQAeFT/GwAA//8/wmND") r8 = socket$pptp(0x18, 0x1, 0x2) getpeername(r8, 0x0, &(0x7f0000000ac0)) 5.313891074s ago: executing program 7 (id=1380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x5c}}, 0x810) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) dup(0xffffffffffffffff) clock_gettime(0x7, &(0x7f00000006c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0xff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)="b8", 0x1) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0xcfd, 0x2, 0x9, 0xa, 0xffff, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x6000000000000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) mmap(&(0x7f0000199000/0x1000)=nil, 0x1000, 0x1002, 0x28011, r4, 0xffffffffffffc000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='1', 0x1) pipe(&(0x7f00000000c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) 5.288979189s ago: executing program 5 (id=1381): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r2, 0x4b34, 0x3bf) gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) readv(r5, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/127, 0x7f}], 0x1) 5.041626211s ago: executing program 5 (id=1383): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 4.964979357s ago: executing program 1 (id=1384): r0 = socket$inet6_udp(0xa, 0x2, 0x11) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x7fff}}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x6e}, 0x28) shutdown(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x47, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000280)) ioctl$TUNDETACHFILTER(r5, 0x8903, 0x1000000000000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00070400000800000000000000000000000000000000000005"], 0x40) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4.879386175s ago: executing program 1 (id=1386): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x20088ce, &(0x7f0000000080), 0xff, 0x498, &(0x7f0000000680)="$eJzs3MtvG8UfAPDvOnGStr/+Ekp59AWBgqh4JE36oBJIqAgkDiAhwaGIk0nTqjRtUBOktqogcEiPqBJ3xBGJv4AL5YIKJySucEdIFeqFipPRrr2Ja8dO3DgxrT8faZWZ3fHOzO5OPJ7Z3QB61mhE7ImI/0XEbxExHBFJfYLRyp/bgxFx68pUEuXyO38lWbq/b12ZypPmn9tWiZT7WuS7+H5EaWZm+kI1Pj5/7qPxuUuX0/Dp6dPT5yePHTt8aN/A0ckjdZ8cuqt6bk/LuvuT2b273njv2ltTJ6598NO3SbXeUVePThnNjlpmeLFu29OdzqzLtteEk/4uFoS2jEREerqKWfsfjr7YsrRtOF7/vKuFAzZUuVwoD965qlgTXigD97G0Nw/0ovyLPv39my+b2P3oupvHY2kc43Z1qWzpj0I1TXED8x+NiBML/3yVLrFB4xAAALWuH4+I5xv6f8fr0/0/Gw9ennvZEREPRsTOiHgoIh6OiEci4tE28x+tizf2f8rDbe6yLWn/7+WIuN3Q/8t7fzHSV41tz8bLi8mpMzPTB6vH5EAUB9P4xPIuG7qLP7z26xfN8q/t/6VLmn/eF6yW48/+ugG6k6Viab31zt38rDIB0Fj/ocincdL+8a6I2N3GfovZ2GLFmWe/2dss3er1b6ED80zlryOeqZz/hbij/suzoEnN/OQLZ86VlucnJ148OnlkfChmpg+O51dFo59/WXy7Wf7rqn8H3Lxejq0rXv9L9R9JhiLmLl0+m83XzrWfx+LvV5v+pmn3+h/Krv/50kDybhYfqK6/WJqfvzARMZC82bh+cvnzF0v5rHQlfXr9H9i/cvvfEctHYk9EpBfxvoh4LCIer5b9iYh4MiL2t6j/jVef+nCpQGuu/2CLPXZOWv+Tq53/qD3/7Qf6zv74XbP813b+D2ehA9U16flfrV5rLeB6jh0AAADcKwrZPfBJYWwpXCiMjVXu4d8ZWwszs3Pzz52a/fj8ycq98iNRLOQjXcM146ET1XuJ8/hkXfxQRDwQEV/2bcniY1OzM+2MJwKdt61J+0/90eoBHuD+sNI8WtMZO+C+4nlN6F3aP/Su2va/sbdbAv81vv+hd63U/j/tQjmAzbfK9/+WzSoHsPna7f9frXt5CHDv8vsfelcb7X9hI8sBbKqmz8YXWjzy/9KNdbwNQODuA8WIaJ3m+4H1vath7YEodPto3EOBV9ZyUoqx4qb+Nb/M4i4CSUQMrrip2/+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA///Vteja") bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000001980)=[{&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, 0x33, 0x2000051b) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x7) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r3, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x58) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x8880, 0x85) lseek(r5, 0x104, 0x3) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001700)=ANY=[@ANYBLOB="ff0100000000000005000000000000000300000000000000", @ANYRES32=r4, @ANYBLOB="00000000faffffffffffffff00000000000000000000000000000000c8933135ac30ba0bb5433dc09c25b15daf34d59f2a6d0907472830aa62f245d1d71406f4c4af2ffe97a73414c9057aed1b69114c06c44d87eaf97f1a0a658c7231454eaeeef8505192a0ab27af76d73672a56d6e08d82b74beca5045bc1b1b12f73b86d7e8d30a99552cf23862f4c82330982aa5152897eb95f26b5e6288d36d83ccdd6a9d2d493b93cd6a9db33895e1be7e948b621f559cda5f45370232cd9535f0eefef0a91619ec33989a9e9004d30e8f3ff3e4767aba488f0f99278c638875722bd26b262e83f4977b7aa7ccb7c10a474775f767b545e6c2bd332e9a3f448f0fe601f66f322f9b0410e304b543df7f8bad91a6c1ac9a737034fdc71b4462b32198c4b2d539b5262e9a10b308acf4a7", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00'/28]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000440)={[{@usrquota}, {@nodelalloc}], [{@fsmagic}, {@euid_lt}, {@fsname={'fsname', 0x3d, '^}[-'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") socket$nl_route(0x10, 0x3, 0x0) 4.291404839s ago: executing program 1 (id=1390): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8000200c}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf20, 0x0, @perf_config_ext={0x3, 0x5}, 0xb00, 0x9, 0x3, 0x6, 0x3, 0xfffffffe, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}]}, 0x3c}}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x0) sendmsg$unix(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="9952f8fd78c27ea037de3a8cfe184c90812c6fd55fea7cac3688b0ce098a2df8768bddb42105cc56bb9e80b53a6850e6170efc5dc79291c525302f31fefea9119f90b5d6e18afc7c37ff46466cbf1e03334f6355c66f113af7f8ffc836ee080939171151448ea0d9a0177875bbfc7b4e5906478816bb546a14f97a738379ee8f6cce6eafcbe17b582fccaea7e0b398aee33e2aab049b449903070cd75b6172bb62ffd6b320ab5e68e28f9d72e6b7a6cde2fd364ffe02c8cc36cd2965fb64995e5423d95756916684dd436fc2b13d56348dd73ec76fb0dc73a5c1c4a45be4", 0xde}], 0x2, &(0x7f0000001340), 0x0, 0x4801}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40032061, 0x0) r4 = syz_open_pts(r0, 0x200) dup3(r4, r0, 0x80000) 4.239824169s ago: executing program 7 (id=1391): openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, 0xffffffffffffffff, 0x1e67e000) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x50c09, &(0x7f00000001c0)={[{@nogrpid}, {@dax_inode}, {@data_err_abort}, {@journal_checksum}], [{@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '-%\'.\'%%-)'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r2, 0x540c) syz_emit_ethernet(0x73, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x12e) socket$kcm(0x29, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.028473734s ago: executing program 1 (id=1392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = epoll_create(0x9) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000440)={0x2000000}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4100) socket$inet6(0xa, 0x3, 0x8000000003c) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x804, 0x4) fstat(0xffffffffffffffff, 0x0) 3.926423805s ago: executing program 5 (id=1394): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5e570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020091000000000000001c001700000000002abd7000000000002abd7000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x218, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x27) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 3.823087437s ago: executing program 7 (id=1395): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/file0\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 3.177936482s ago: executing program 5 (id=1398): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x10a008, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000003c0), 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[], &(0x7f0000000200)=""/165, 0x8d, 0xa5, 0x0, 0x9, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000004e02317700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800"/40], 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000000000daaa000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000f00000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="000000004c900200260000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000010000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.699044883s ago: executing program 6 (id=1401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff6a3}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080), 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffb1315ec0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x400000000000000, 0x5}, 0x114244, 0x0, 0xafea, 0x2, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0x7, 0x0, &(0x7f0000000900)="e68886dd000000", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.653733012s ago: executing program 5 (id=1402): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x100) mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000100)='proc\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, &(0x7f0000000580)={0x0, 0x0, 0xdfbde0e9}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000000180)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 2.455387274s ago: executing program 5 (id=1404): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 2.455061544s ago: executing program 2 (id=1405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaaaaaaaaaaaabb86dd6140ea0000082bffff0131ec0000000000000000000000012001000000000000000000000000000132000000"], 0x42) 2.366816783s ago: executing program 2 (id=1406): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2.28438294s ago: executing program 2 (id=1407): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r2, 0x4b34, 0x3bf) gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) readv(r5, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/127, 0x7f}], 0x1) 2.256423636s ago: executing program 6 (id=1408): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5e570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020091000000000000001c001700000000002abd7000000000002abd7000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x218, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x27) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 2.132642662s ago: executing program 6 (id=1409): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x80000009, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x3}, 0x1b7cccd97f7f386a, 0x2, 0x11000, 0x1, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000240), 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x200448c1}, 0x20040080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x71, 0x239, 0x70bd2d, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) 1.895268861s ago: executing program 6 (id=1410): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r7}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, 0x0, 0x4) 1.317247243s ago: executing program 2 (id=1411): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r7}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, 0x0, 0x4) 1.001647669s ago: executing program 6 (id=1412): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./tracing\x00', 0x20340c, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/14, @ANYRES32, @ANYBLOB="6d866399000000002c000000000000066400000000000000000000000000000095000000000000009500"], 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x10}, 0x106a9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) statx(r0, &(0x7f0000000880)='./file1\x00', 0x4000, 0x7ff, &(0x7f00000008c0)) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000fc0)={&(0x7f0000000f00)=[{0x4, 0x9, 0x0, 0x53c9b1e5, 0xcd7f}, {0x7, 0x1, 0x9, 0x3, 0x2}, {0x2, 0x4, 0x1ff, 0x8, 0x1}, {0x2, 0xcbe2, 0x9, 0x800, 0x80000001}], 0x4, 0x28, 0x6d, 0x7fffffff}) setgroups(0x0, &(0x7f00000009c0)) chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x5, 0xf1, 0x1000, 0xfffffffffffffffe}) getdents64(r0, &(0x7f0000001000)=""/984, 0x3d8) read$watch_queue(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[], 0x194}}, 0x8881) writev(r3, &(0x7f00000000c0), 0x0) read(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="08000500", @ANYBLOB="1c0012800b0001006970766c616e", @ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) 464.874442ms ago: executing program 7 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x804) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00010000000080fedbdf2508000004"], 0x18}], 0x1, 0x0, 0x0, 0x800}, 0x0) ptrace$setregs(0xd, r2, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x10004, @private0, 0xfffffeff}, {0xa, 0x4e23, 0x2, @mcast2, 0x9}, r5, 0x7ffffffe}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ptrace$getregset(0x4205, r2, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=""/119, 0x77}) socket$vsock_stream(0x28, 0x1, 0x0) 313.695834ms ago: executing program 7 (id=1414): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, 0x0, 0x4) 312.696204ms ago: executing program 2 (id=1415): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) setns(0xffffffffffffffff, 0x24020000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0xdc}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x2f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_reply={0x12, 0x0, 0x0, 0xc6}}}}}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r1, 0x7}}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 289.480809ms ago: executing program 1 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaaaaaaaaaaaabb86dd6140ea0000082bffff0131ec000000000000000000000001200100000000000000000000000000013200"], 0x42) 242.314449ms ago: executing program 6 (id=1417): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8001}}], 0x2, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r2 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x891a, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @random="1900"}, 0x68, {0x2, 0x4e23, @broadcast}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimes(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}, {r5, r6/1000+10000}}) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x1003, @multicast2}}, {{0x2, 0xfffe, @multicast1}}}, 0x108) syz_clone(0x480, &(0x7f0000000200)="0a015063a50649b12676fab10cf40a57e21cce25e345f4b48defe875ce6a1fc71ffa7b7a71ecfe56d6e54bd9e5521e638ef4f5e6f6286247da81b9f312325d3d9515322df2c79b94b319ba7ef22888b5c01fc4ac263699b14f38dac2baa432cdd5aa37a52fd5da127a24c8de695c14d064395b5a915eb66b5c5ddf", 0x7b, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="8537b7085516d96dd0c0365d1f1e79888e4a561f017c11bbe393ebf3ecd2eca8b1b48d4f7ef44c0985badc3616fa25de91625f2c1a31edafdc2ff3bf6e918323f821bf9dcfad8bfc6b6d1616c2d9bf2a1b5ba5749aafae") ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000740)={0x2, 0x1000, "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"}) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES16], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x94) 15.450976ms ago: executing program 2 (id=1418): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r1, 0x1, 0x2, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x300000000000000}, 0x0) 0s ago: executing program 1 (id=1419): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5e570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020091000000000000001c001700000000002abd7000000000002abd7000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x218, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x27) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50e73e159 code=0x7ffc0000 [ 213.671389][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 214.177020][ T7715] loop1: detected capacity change from 0 to 512 [ 214.191727][ T7715] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 214.191888][ T7715] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.191908][ T7715] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1027: bad orphan inode 15 [ 214.191933][ T7715] loop1: lost filesystem error report for type 5 error -117 [ 214.192091][ T7715] ext4_test_bit(bit=14, block=5) = 0 [ 214.192506][ T7715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 214.258071][ T7715] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 214.318706][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.487677][ T7729] loop1: detected capacity change from 0 to 4096 [ 214.494728][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'. [ 214.533870][ T7732] loop0: detected capacity change from 0 to 128 [ 214.533944][ T7729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.550819][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 214.664173][ T7735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1029'. [ 214.901486][ T7730] UDC core: g1: couldn't find an available UDC or it's busy [ 215.126619][ T7751] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.1037'. [ 215.192832][ T7756] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1037'. [ 215.319400][ T7759] loop2: detected capacity change from 0 to 128 [ 215.370583][ T7758] loop5: detected capacity change from 0 to 512 [ 215.396314][ T7758] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 215.396545][ T7758] EXT4-fs (loop5): orphan cleanup on readonly fs [ 215.396571][ T7758] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1039: bad orphan inode 15 [ 215.396595][ T7758] loop5: lost filesystem error report for type 5 error -117 [ 215.396728][ T7758] ext4_test_bit(bit=14, block=5) = 0 [ 215.397588][ T7758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.582672][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.585411][ T7763] FAULT_INJECTION: forcing a failure. [ 215.585411][ T7763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.585471][ T7763] CPU: 1 UID: 0 PID: 7763 Comm: syz.2.1041 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.585497][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.585510][ T7763] Call Trace: [ 215.585517][ T7763] [ 215.585526][ T7763] __dump_stack+0x1d/0x30 [ 215.585552][ T7763] dump_stack_lvl+0x95/0xd0 [ 215.585635][ T7763] dump_stack+0x15/0x1b [ 215.585715][ T7763] should_fail_ex+0x262/0x280 [ 215.585742][ T7763] should_fail+0xb/0x20 [ 215.585764][ T7763] should_fail_usercopy+0x1a/0x20 [ 215.585791][ T7763] _copy_to_user+0x20/0xa0 [ 215.585842][ T7763] bpf_verifier_vlog+0x3c5/0x5a0 [ 215.585866][ T7763] __btf_verifier_log+0x7f/0xb0 [ 215.585896][ T7763] __btf_verifier_log_type+0x2a9/0x330 [ 215.585951][ T7763] btf_func_proto_check_meta+0xa0/0x100 [ 215.585982][ T7763] btf_parse_type_sec+0x291/0x1520 [ 215.586020][ T7763] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 215.586055][ T7763] ? btf_parse_hdr+0x43a/0x440 [ 215.586120][ T7763] ? btf_parse_str_sec+0x1ae/0x1b0 [ 215.586153][ T7763] btf_new_fd+0x2ec/0x6a0 [ 215.586174][ T7763] bpf_btf_load+0x116/0x130 [ 215.586203][ T7763] __sys_bpf+0xbce/0xc30 [ 215.586264][ T7763] ? do_futex+0x300/0x460 [ 215.586300][ T7763] __x64_sys_bpf+0x69/0x80 [ 215.586387][ T7763] x64_sys_call+0xf26/0x2550 [ 215.586414][ T7763] do_syscall_64+0x112/0x360 [ 215.586439][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.586462][ T7763] RIP: 0033:0x7f6d1c76e159 [ 215.586480][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.586580][ T7763] RSP: 002b:00007f6d1b1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.586678][ T7763] RAX: ffffffffffffffda RBX: 00007f6d1c9f5fa0 RCX: 00007f6d1c76e159 [ 215.586694][ T7763] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 215.586710][ T7763] RBP: 00007f6d1c80506b R08: 0000000000000000 R09: 0000000000000000 [ 215.586724][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.586779][ T7763] R13: 00007f6d1c9f6038 R14: 00007f6d1c9f5fa0 R15: 00007ffd68709128 [ 215.586801][ T7763] [ 215.670148][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.948393][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 216.240319][ T7767] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1042'. [ 216.388585][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 216.388612][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 216.759560][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 216.759579][ T29] audit: type=1326 audit(1790502758.199:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.760739][ T29] audit: type=1326 audit(1790502758.199:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.762807][ T29] audit: type=1326 audit(1790502758.199:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.764442][ T29] audit: type=1326 audit(1790502758.199:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.766181][ T29] audit: type=1326 audit(1790502758.199:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.769831][ T29] audit: type=1326 audit(1790502758.209:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.771013][ T29] audit: type=1326 audit(1790502758.209:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.772375][ T29] audit: type=1326 audit(1790502758.209:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.774319][ T29] audit: type=1326 audit(1790502758.209:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.775970][ T29] audit: type=1326 audit(1790502758.209:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1044" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a6224e98e code=0x7ffc0000 [ 216.827440][ T7792] UDC core: g1: couldn't find an available UDC or it's busy [ 217.031482][ T7797] loop2: detected capacity change from 0 to 4096 [ 217.053026][ T7797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.414213][ T7829] loop6: detected capacity change from 0 to 512 [ 217.431605][ T7829] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 217.431753][ T7829] EXT4-fs (loop6): orphan cleanup on readonly fs [ 217.431798][ T7829] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1053: bad orphan inode 15 [ 217.431846][ T7829] loop6: lost filesystem error report for type 5 error -117 [ 217.436801][ T7829] ext4_test_bit(bit=14, block=5) = 0 [ 217.443627][ T7829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 217.670388][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.837868][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.923659][ T6382] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.978688][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1055'. [ 218.200188][ T7847] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 218.298848][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 218.298880][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 218.391962][ T7873] loop1: detected capacity change from 0 to 512 [ 218.405629][ T7873] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.441031][ T7873] EXT4-fs (loop1): 1 truncate cleaned up [ 218.474610][ T7870] loop2: detected capacity change from 0 to 512 [ 218.481969][ T7870] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.482087][ T7870] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.482107][ T7870] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1065: bad orphan inode 15 [ 218.482129][ T7870] loop2: lost filesystem error report for type 5 error -117 [ 218.482381][ T7870] ext4_test_bit(bit=14, block=5) = 0 [ 218.522720][ T7871] FAULT_INJECTION: forcing a failure. [ 218.522720][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 218.522756][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.5.1063 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.522867][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.522883][ T7871] Call Trace: [ 218.522898][ T7871] [ 218.522909][ T7871] __dump_stack+0x1d/0x30 [ 218.522941][ T7871] dump_stack_lvl+0x95/0xd0 [ 218.522969][ T7871] dump_stack+0x15/0x1b [ 218.522995][ T7871] should_fail_ex+0x262/0x280 [ 218.523098][ T7871] ? io_cache_alloc_new+0x2a/0xb0 [ 218.523137][ T7871] should_failslab+0x8c/0xb0 [ 218.523219][ T7871] __kmalloc_noprof+0xd0/0x4d0 [ 218.523316][ T7871] ? __import_iovec+0x321/0x530 [ 218.523352][ T7871] ? io_cache_alloc_new+0x2a/0xb0 [ 218.523377][ T7871] io_cache_alloc_new+0x2a/0xb0 [ 218.523400][ T7871] __io_prep_rw+0x121/0x740 [ 218.523471][ T7871] ? io_req_defer_failed+0x16d/0x180 [ 218.523498][ T7871] io_prep_rwv+0x35/0x200 [ 218.523529][ T7871] io_prep_writev+0x22/0x30 [ 218.523581][ T7871] io_submit_sqes+0x737/0x1180 [ 218.523621][ T7871] __se_sys_io_uring_enter+0x25c/0xf90 [ 218.523657][ T7871] ? __se_sys_futex+0x2f6/0x370 [ 218.523724][ T7871] ? xfd_validate_state+0x45/0xf0 [ 218.523760][ T7871] __x64_sys_io_uring_enter+0x78/0x90 [ 218.523795][ T7871] x64_sys_call+0x1780/0x2550 [ 218.523821][ T7871] do_syscall_64+0x112/0x360 [ 218.523844][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.523871][ T7871] RIP: 0033:0x7f2efc90e159 [ 218.523888][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.523940][ T7871] RSP: 002b:00007f2efb367028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 218.524026][ T7871] RAX: ffffffffffffffda RBX: 00007f2efcb95fa0 RCX: 00007f2efc90e159 [ 218.524097][ T7871] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 218.524114][ T7871] RBP: 00007f2efc9a506b R08: 0000000000000000 R09: 0000000000000020 [ 218.524130][ T7871] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 218.524145][ T7871] R13: 00007f2efcb96038 R14: 00007f2efcb95fa0 R15: 00007ffe0f6b81c8 [ 218.524167][ T7871] [ 218.556098][ T7870] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 218.766513][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'. [ 218.818221][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1066'. [ 218.948736][ T7888] UDC core: g1: couldn't find an available UDC or it's busy [ 218.950833][ T7887] loop2: detected capacity change from 0 to 4096 [ 219.288189][ T7901] loop0: detected capacity change from 0 to 128 [ 219.343614][ T7897] loop1: detected capacity change from 0 to 4096 [ 219.364578][ T7897] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1069: corrupted inode contents [ 219.364755][ T7897] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.1069: mark_inode_dirty error [ 219.365024][ T7897] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1069: corrupted inode contents [ 219.365198][ T7897] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1069: mark_inode_dirty error [ 219.365337][ T7897] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1069: corrupted inode contents [ 219.365535][ T7897] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1069: mark_inode_dirty error [ 219.365717][ T7897] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1069: corrupted inode contents [ 219.365851][ T7897] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.1069: mark_inode_dirty error [ 219.366037][ T7897] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem [ 219.416933][ T7897] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.1069: corrupted inode contents [ 219.657430][ T7915] batadv1: entered promiscuous mode [ 219.657475][ T7915] batadv1: entered allmulticast mode [ 220.235975][ T7929] loop0: detected capacity change from 0 to 512 [ 220.247724][ T7929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.273977][ T7929] EXT4-fs (loop0): 1 truncate cleaned up [ 220.274535][ T7929] EXT4-fs mount: 8 callbacks suppressed [ 220.274551][ T7929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.389831][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1081'. [ 220.389918][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1081'. [ 220.483101][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.602281][ T7938] UDC core: g1: couldn't find an available UDC or it's busy [ 220.628924][ T7947] loop0: detected capacity change from 0 to 4096 [ 220.647043][ T7947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.891476][ T7960] selinux_netlink_send: 23 callbacks suppressed [ 220.891496][ T7960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=7960 comm=syz.6.1089 [ 221.062778][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.111663][ T7967] FAULT_INJECTION: forcing a failure. [ 221.111663][ T7967] name fail_futex, interval 1, probability 0, space 0, times 0 [ 221.111695][ T7967] CPU: 1 UID: 0 PID: 7967 Comm: syz.1.1092 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.111721][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.111805][ T7967] Call Trace: [ 221.111812][ T7967] [ 221.111822][ T7967] __dump_stack+0x1d/0x30 [ 221.111850][ T7967] dump_stack_lvl+0x95/0xd0 [ 221.111871][ T7967] dump_stack+0x15/0x1b [ 221.111959][ T7967] should_fail_ex+0x262/0x280 [ 221.112038][ T7967] should_fail+0xb/0x20 [ 221.112062][ T7967] get_futex_key+0x12d/0xb10 [ 221.112156][ T7967] ? kfree+0x143/0x3b0 [ 221.112183][ T7967] futex_wake+0x89/0x400 [ 221.112203][ T7967] do_futex+0x3f8/0x460 [ 221.112277][ T7967] mm_exit_exec_release+0xab/0x190 [ 221.112299][ T7967] exit_mm+0x37/0x1a0 [ 221.112324][ T7967] do_exit+0x438/0x1510 [ 221.112355][ T7967] do_group_exit+0xfe/0x140 [ 221.112398][ T7967] ? get_signal+0xe00/0xf10 [ 221.112458][ T7967] get_signal+0xe07/0xf10 [ 221.112541][ T7967] arch_do_signal_or_restart+0x96/0x480 [ 221.112608][ T7967] exit_to_user_mode_loop+0x15d/0x8c0 [ 221.112656][ T7967] do_syscall_64+0x212/0x360 [ 221.112732][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.112758][ T7967] RIP: 0033:0x7f6855fae159 [ 221.112775][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.112801][ T7967] RSP: 002b:00007f6854a070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.112889][ T7967] RAX: fffffffffffffe00 RBX: 00007f6856235fa8 RCX: 00007f6855fae159 [ 221.112905][ T7967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6856235fa8 [ 221.112918][ T7967] RBP: 00007f6856235fa0 R08: 0000000000000000 R09: 0000000000000000 [ 221.112931][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.112943][ T7967] R13: 00007f6856236038 R14: 00007ffca4085d30 R15: 00007ffca4085e18 [ 221.112962][ T7967] [ 221.331990][ T7980] loop5: detected capacity change from 0 to 512 [ 221.342531][ T7980] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 221.342602][ T7980] EXT4-fs (loop5): orphan cleanup on readonly fs [ 221.342630][ T7980] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1096: bad orphan inode 15 [ 221.342690][ T7980] loop5: lost filesystem error report for type 5 error -117 [ 221.343004][ T7980] ext4_test_bit(bit=14, block=5) = 0 [ 221.343401][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.404189][ T7980] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 221.435300][ T7984] __nla_validate_parse: 4 callbacks suppressed [ 221.435333][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'. [ 221.454921][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.472978][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1098'. [ 221.473006][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1098'. [ 221.704960][ T7994] UDC core: g1: couldn't find an available UDC or it's busy [ 221.728264][ T7998] LUN: removable file: (no medium) [ 221.746808][ T7988] blktrace: Concurrent blktraces are not allowed on sg0 [ 221.911204][ T8007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.989811][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 221.989832][ T29] audit: type=1400 audit(1790502763.429:9270): avc: denied { write } for pid=8003 comm="syz.6.1104" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.558784][ T8006] FAULT_INJECTION: forcing a failure. [ 222.558784][ T8006] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.558893][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.2.1105 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.558920][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.558933][ T8006] Call Trace: [ 222.558941][ T8006] [ 222.558950][ T8006] __dump_stack+0x1d/0x30 [ 222.558977][ T8006] dump_stack_lvl+0x95/0xd0 [ 222.559016][ T8006] dump_stack+0x15/0x1b [ 222.559037][ T8006] should_fail_ex+0x262/0x280 [ 222.559064][ T8006] should_fail+0xb/0x20 [ 222.559087][ T8006] get_futex_key+0x12d/0xb10 [ 222.559152][ T8006] ? kfree+0x143/0x3b0 [ 222.559181][ T8006] futex_wake+0x89/0x400 [ 222.559204][ T8006] do_futex+0x3f8/0x460 [ 222.559294][ T8006] mm_exit_exec_release+0xab/0x190 [ 222.559319][ T8006] exit_mm+0x37/0x1a0 [ 222.559348][ T8006] do_exit+0x438/0x1510 [ 222.559379][ T8006] do_group_exit+0xfe/0x140 [ 222.559464][ T8006] ? get_signal+0xe00/0xf10 [ 222.559497][ T8006] get_signal+0xe07/0xf10 [ 222.559534][ T8006] arch_do_signal_or_restart+0x96/0x480 [ 222.559615][ T8006] exit_to_user_mode_loop+0x15d/0x8c0 [ 222.559702][ T8006] do_syscall_64+0x212/0x360 [ 222.559727][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.559750][ T8006] RIP: 0033:0x7f6d1c76e159 [ 222.559769][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.559801][ T8006] RSP: 002b:00007f6d1b1c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.559825][ T8006] RAX: fffffffffffffe00 RBX: 00007f6d1c9f5fa8 RCX: 00007f6d1c76e159 [ 222.559841][ T8006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d1c9f5fa8 [ 222.559856][ T8006] RBP: 00007f6d1c9f5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.559871][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.560029][ T8006] R13: 00007f6d1c9f6038 R14: 00007ffd68709040 R15: 00007ffd68709128 [ 222.560050][ T8006] [ 222.819406][ T29] audit: type=1326 audit(1790502764.259:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.819441][ T29] audit: type=1326 audit(1790502764.259:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.819468][ T29] audit: type=1326 audit(1790502764.259:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.822409][ T29] audit: type=1326 audit(1790502764.259:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.877926][ T29] audit: type=1326 audit(1790502764.299:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.877963][ T29] audit: type=1326 audit(1790502764.299:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.885737][ T8011] FAULT_INJECTION: forcing a failure. [ 222.885737][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 222.885766][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.885791][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.885845][ T8011] Call Trace: [ 222.885853][ T8011] [ 222.885933][ T8011] __dump_stack+0x1d/0x30 [ 222.885959][ T8011] dump_stack_lvl+0x95/0xd0 [ 222.886003][ T8011] dump_stack+0x15/0x1b [ 222.886076][ T8011] should_fail_ex+0x262/0x280 [ 222.886102][ T8011] ? io_cache_alloc_new+0x2a/0xb0 [ 222.886140][ T8011] should_failslab+0x8c/0xb0 [ 222.886171][ T8011] __kmalloc_noprof+0xd0/0x4d0 [ 222.886277][ T8011] ? __import_iovec+0x321/0x530 [ 222.886306][ T8011] ? io_cache_alloc_new+0x2a/0xb0 [ 222.886358][ T8011] io_cache_alloc_new+0x2a/0xb0 [ 222.886385][ T8011] __io_prep_rw+0x121/0x740 [ 222.886438][ T8011] ? io_req_defer_failed+0x16d/0x180 [ 222.886488][ T8011] io_prep_rwv+0x35/0x200 [ 222.886517][ T8011] io_prep_writev+0x22/0x30 [ 222.886544][ T8011] io_submit_sqes+0x737/0x1180 [ 222.886598][ T8011] __se_sys_io_uring_enter+0x25c/0xf90 [ 222.886693][ T8011] ? xfd_validate_state+0x45/0xf0 [ 222.886788][ T8011] __x64_sys_io_uring_enter+0x78/0x90 [ 222.886895][ T8011] x64_sys_call+0x1780/0x2550 [ 222.886997][ T8011] do_syscall_64+0x112/0x360 [ 222.887053][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.887076][ T8011] RIP: 0033:0x7f5a6228e159 [ 222.887093][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.887112][ T8011] RSP: 002b:00007f5a60ce7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 222.887135][ T8011] RAX: ffffffffffffffda RBX: 00007f5a62515fa0 RCX: 00007f5a6228e159 [ 222.887222][ T8011] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 222.887237][ T8011] RBP: 00007f5a6232506b R08: 0000000000000000 R09: 0000000000000020 [ 222.887251][ T8011] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 222.887335][ T8011] R13: 00007f5a62516038 R14: 00007f5a62515fa0 R15: 00007ffc846ebb18 [ 222.887355][ T8011] [ 222.887446][ T29] audit: type=1326 audit(1790502764.319:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.887543][ T29] audit: type=1326 audit(1790502764.319:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 222.887699][ T29] audit: type=1326 audit(1790502764.319:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.0.1106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 223.010345][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.083875][ T8032] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1110'. [ 223.638609][ T8049] set_capacity_and_notify: 2 callbacks suppressed [ 223.638629][ T8049] loop1: detected capacity change from 0 to 512 [ 223.639000][ T8049] msdos: Unknown parameter '' [ 223.728239][ T8051] loop5: detected capacity change from 0 to 512 [ 223.729052][ T8051] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.730644][ T8051] EXT4-fs (loop5): 1 truncate cleaned up [ 223.731069][ T8051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.880040][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.539206][ T8058] FAULT_INJECTION: forcing a failure. [ 224.539206][ T8058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.542843][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.0.1118 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.542875][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.542893][ T8058] Call Trace: [ 224.542901][ T8058] [ 224.542910][ T8058] __dump_stack+0x1d/0x30 [ 224.543065][ T8058] dump_stack_lvl+0x95/0xd0 [ 224.543098][ T8058] dump_stack+0x15/0x1b [ 224.543120][ T8058] should_fail_ex+0x262/0x280 [ 224.543165][ T8058] should_fail+0xb/0x20 [ 224.543190][ T8058] get_futex_key+0x12d/0xb10 [ 224.543217][ T8058] ? kfree+0x143/0x3b0 [ 224.543299][ T8058] futex_wake+0x89/0x400 [ 224.543319][ T8058] do_futex+0x3f8/0x460 [ 224.543405][ T8058] mm_exit_exec_release+0xab/0x190 [ 224.543427][ T8058] exit_mm+0x37/0x1a0 [ 224.543453][ T8058] do_exit+0x438/0x1510 [ 224.543488][ T8058] do_group_exit+0xfe/0x140 [ 224.543521][ T8058] ? get_signal+0xe00/0xf10 [ 224.543559][ T8058] get_signal+0xe07/0xf10 [ 224.543615][ T8058] arch_do_signal_or_restart+0x96/0x480 [ 224.543709][ T8058] exit_to_user_mode_loop+0x15d/0x8c0 [ 224.543817][ T8058] do_syscall_64+0x212/0x360 [ 224.543843][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.543877][ T8058] RIP: 0033:0x7f5a6228e159 [ 224.543896][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.543913][ T8058] RSP: 002b:00007f5a60ce70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.543969][ T8058] RAX: fffffffffffffe00 RBX: 00007f5a62515fa8 RCX: 00007f5a6228e159 [ 224.543984][ T8058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a62515fa8 [ 224.543997][ T8058] RBP: 00007f5a62515fa0 R08: 0000000000000000 R09: 0000000000000000 [ 224.544009][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.544021][ T8058] R13: 00007f5a62516038 R14: 00007ffc846eba30 R15: 00007ffc846ebb18 [ 224.544048][ T8058] [ 224.653518][ T8063] loop2: detected capacity change from 0 to 4096 [ 224.668421][ T8063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.897140][ T8073] loop5: detected capacity change from 0 to 512 [ 224.897593][ T8073] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.933171][ T8073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.933233][ T8073] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.007728][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.029351][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1121'. [ 225.585709][ T8087] loop0: detected capacity change from 0 to 512 [ 225.641484][ T8089] loop5: detected capacity change from 0 to 512 [ 225.642280][ T8089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.703208][ T8089] EXT4-fs (loop5): 1 truncate cleaned up [ 225.720618][ T8089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.857005][ T8087] blktrace: Concurrent blktraces are not allowed on sg0 [ 225.937546][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.299821][ T8099] loop0: detected capacity change from 0 to 1764 [ 226.362385][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.394363][ T3407] hid (null): unknown global tag 0xd [ 226.421054][ T3407] corsair-psu 0003:1B1C:1C03.0001: unknown global tag 0xd [ 226.421074][ T3407] corsair-psu 0003:1B1C:1C03.0001: item 0 4 1 13 parsing failed [ 226.423248][ T3407] corsair-psu 0003:1B1C:1C03.0001: probe with driver corsair-psu failed with error -22 [ 226.516548][ T8102] loop5: detected capacity change from 0 to 512 [ 226.524093][ T8102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.540230][ T8102] EXT4-fs (loop5): 1 truncate cleaned up [ 226.540675][ T8102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.555049][ T8107] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 226.555092][ T8107] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1133'. [ 226.555108][ T8107] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 226.647820][ T8109] loop2: detected capacity change from 0 to 512 [ 226.648109][ T8109] msdos: Unknown parameter '' [ 226.691820][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1134'. [ 226.691850][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1134'. [ 226.887941][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.987917][ T8122] FAULT_INJECTION: forcing a failure. [ 226.987917][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.987950][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.987985][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.987999][ T8122] Call Trace: [ 226.988007][ T8122] [ 226.988017][ T8122] __dump_stack+0x1d/0x30 [ 226.988087][ T8122] dump_stack_lvl+0x95/0xd0 [ 226.988112][ T8122] dump_stack+0x15/0x1b [ 226.988134][ T8122] should_fail_ex+0x262/0x280 [ 226.988193][ T8122] should_fail+0xb/0x20 [ 226.988217][ T8122] should_fail_usercopy+0x1a/0x20 [ 226.988245][ T8122] _copy_from_user+0x1c/0xb0 [ 226.988272][ T8122] restore_altstack+0x4b/0x300 [ 226.988359][ T8122] ? __set_current_blocked+0x284/0x2e0 [ 226.988443][ T8122] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 226.988475][ T8122] ? arch_do_signal_or_restart+0x2f3/0x480 [ 226.988559][ T8122] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 226.988594][ T8122] ? __rcu_read_unlock+0x4e/0x70 [ 226.988626][ T8122] x64_sys_call+0x1532/0x2550 [ 226.988707][ T8122] do_syscall_64+0x112/0x360 [ 226.988732][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.988757][ T8122] RIP: 0033:0x7fa50e6df4d9 [ 226.988774][ T8122] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 226.988795][ T8122] RSP: 002b:00007fa50d175a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 226.988833][ T8122] RAX: ffffffffffffffda RBX: 00007fa50e9c6090 RCX: 00007fa50e6df4d9 [ 226.988850][ T8122] RDX: 00007fa50d175a80 RSI: 00007fa50d175bb0 RDI: 0000000000000021 [ 226.988866][ T8122] RBP: 00007fa50d176090 R08: 0000000000000001 R09: 0000000000000003 [ 226.988900][ T8122] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 226.988914][ T8122] R13: 00007fa50e9c6128 R14: 00007fa50e9c6090 R15: 00007ffff685d9c8 [ 226.988936][ T8122] [ 227.772073][ T8139] loop2: detected capacity change from 0 to 512 [ 228.024765][ T8141] blktrace: Concurrent blktraces are not allowed on sg0 [ 228.034137][ T8142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.040113][ T8142] EXT4-fs (loop6): 1 truncate cleaned up [ 228.040545][ T8142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.633132][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.249531][ T8163] set_capacity_and_notify: 1 callbacks suppressed [ 229.249553][ T8163] loop6: detected capacity change from 0 to 128 [ 229.285253][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1148'. [ 229.397311][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 229.397331][ T29] audit: type=1400 audit(1790502770.829:9513): avc: denied { write } for pid=8161 comm="syz.2.1149" name="target" dev="configfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.397360][ T29] audit: type=1400 audit(1790502770.829:9514): avc: denied { write } for pid=8161 comm="syz.2.1149" name="target" dev="configfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.475791][ T8171] loop2: detected capacity change from 0 to 512 [ 229.488598][ T8171] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 229.488691][ T8171] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.488713][ T8171] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1152: bad orphan inode 15 [ 229.488737][ T8171] loop2: lost filesystem error report for type 5 error -117 [ 229.490004][ T8171] ext4_test_bit(bit=14, block=5) = 0 [ 229.493154][ T8171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.503085][ T8173] loop1: detected capacity change from 0 to 512 [ 229.503386][ T8173] msdos: Unknown parameter '' [ 229.616905][ T8177] loop5: detected capacity change from 0 to 512 [ 229.737463][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.791451][ T8184] blktrace: Concurrent blktraces are not allowed on sg0 [ 229.815123][ T8187] loop6: detected capacity change from 0 to 512 [ 229.826182][ T8187] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 229.869815][ T8187] EXT4-fs (loop6): 1 truncate cleaned up [ 229.870279][ T8187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.317960][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.695098][ T29] audit: type=1326 audit(1790502773.129:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.695427][ T29] audit: type=1326 audit(1790502773.129:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.695675][ T29] audit: type=1326 audit(1790502773.129:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.696988][ T29] audit: type=1326 audit(1790502773.129:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.757206][ T29] audit: type=1326 audit(1790502773.189:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.757279][ T29] audit: type=1326 audit(1790502773.189:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 231.994233][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 231.994274][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.018355][ T29] audit: type=1326 audit(1790502773.379:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 232.018389][ T29] audit: type=1326 audit(1790502773.379:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.1.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 232.183968][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'. [ 232.221305][ T8202] netlink: 'syz.2.1162': attribute type 11 has an invalid length. [ 232.252673][ T8219] @0Ù: renamed from bond_slave_1 [ 232.277907][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1165'. [ 232.278006][ T8219] netlink: 'syz.1.1165': attribute type 2 has an invalid length. [ 232.370023][ T8215] UDC core: g1: couldn't find an available UDC or it's busy [ 232.585236][ T8233] loop1: detected capacity change from 0 to 512 [ 232.746213][ T8233] blktrace: Concurrent blktraces are not allowed on sg0 [ 232.861133][ T8239] loop5: detected capacity change from 0 to 512 [ 232.863303][ T8239] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.887997][ T8239] EXT4-fs (loop5): 1 truncate cleaned up [ 232.888453][ T8239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.892655][ T8244] Illegal XDP return value 4294967282 on prog (id 501) dev N/A, expect packet loss! [ 232.913292][ T8247] blktrace: Concurrent blktraces are not allowed on loop2 [ 232.925475][ T8240] loop2: detected capacity change from 0 to 512 [ 232.928946][ T8240] /dev/loop2: Can't open blockdev [ 232.990673][ T8248] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1173'. [ 233.353595][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 233.353622][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 233.377753][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.441361][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1176'. [ 234.770410][ T8286] loop6: detected capacity change from 0 to 512 [ 234.792752][ T8286] EXT4-fs (loop6): 1 truncate cleaned up [ 234.793555][ T8286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.853041][ T8294] tmpfs: Bad value for 'mpol' [ 234.877189][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 234.877208][ T29] audit: type=1400 audit(1790502776.289:9819): avc: denied { mounton } for pid=8290 comm="syz.2.1186" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 235.003908][ T8298] UDC core: g1: couldn't find an available UDC or it's busy [ 235.123948][ T8303] loop1: detected capacity change from 0 to 512 [ 235.144999][ T8303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.161489][ T8303] EXT4-fs (loop1): 1 truncate cleaned up [ 235.161934][ T8303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.308837][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.337304][ T8306] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.446286][ T8308] loop1: detected capacity change from 0 to 512 [ 235.473405][ T8308] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 235.473433][ T8308] FAT-fs (loop1): Filesystem has been set read-only [ 235.473546][ T8308] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 235.543994][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.565992][ T29] audit: type=1400 audit(1790502776.999:9820): avc: denied { connect } for pid=8316 comm="syz.6.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.834913][ T8325] team0: Caught tx_queue_len zero misconfig [ 236.216834][ T8333] loop6: detected capacity change from 0 to 512 [ 236.218473][ T8333] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 236.218575][ T8333] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.218592][ T8333] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1198: bad orphan inode 15 [ 236.218614][ T8333] loop6: lost filesystem error report for type 5 error -117 [ 236.218705][ T8333] ext4_test_bit(bit=14, block=5) = 0 [ 236.219160][ T8333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.308811][ T8336] loop1: detected capacity change from 0 to 512 [ 236.309897][ T8336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.317471][ T8336] EXT4-fs (loop1): 1 truncate cleaned up [ 236.317898][ T8336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.330893][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.391323][ T29] audit: type=1400 audit(1790502777.829:9821): avc: denied { setopt } for pid=8342 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.525338][ T8343] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32 [ 236.572960][ T8361] loop6: detected capacity change from 0 to 128 [ 236.614089][ T29] audit: type=1400 audit(1790502778.049:9822): avc: denied { write } for pid=8353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.670616][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.674429][ T29] audit: type=1400 audit(1790502778.109:9823): avc: denied { write } for pid=8372 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.861291][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'. [ 236.977086][ T8394] loop1: detected capacity change from 0 to 512 [ 236.985226][ T8394] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 236.985442][ T8394] EXT4-fs (loop1): orphan cleanup on readonly fs [ 236.985458][ T8394] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1212: bad orphan inode 15 [ 236.985550][ T8394] loop1: lost filesystem error report for type 5 error -117 [ 236.985641][ T8394] ext4_test_bit(bit=14, block=5) = 0 [ 236.987066][ T8394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.247066][ T29] audit: type=1400 audit(1790502778.629:9824): avc: denied { write } for pid=8389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.361292][ T29] audit: type=1400 audit(1790502778.799:9825): avc: denied { write } for pid=8410 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.378296][ T29] audit: type=1400 audit(1790502778.819:9826): avc: denied { watch watch_reads } for pid=8408 comm="syz.2.1214" path="/241" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.547717][ T29] audit: type=1400 audit(1790502778.979:9827): avc: denied { write } for pid=8415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.567087][ T29] audit: type=1400 audit(1790502778.999:9828): avc: denied { write } for pid=8426 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.594483][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.689093][ T8441] loop6: detected capacity change from 0 to 512 [ 237.693322][ T8441] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 237.718121][ T8441] EXT4-fs (loop6): 1 truncate cleaned up [ 237.718585][ T8441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.765065][ T8446] loop1: detected capacity change from 0 to 512 [ 237.776329][ T8450] LUN: removable file: (no medium) [ 238.048162][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.192738][ T8448] loop5: detected capacity change from 0 to 512 [ 238.227926][ T8446] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.277659][ T8477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 238.291806][ T8477] EXT4-fs (loop6): 1 truncate cleaned up [ 238.292172][ T8477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.763628][ T8448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.786767][ T8448] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.211983][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.279603][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.384276][ T8503] LUN: removable file: (no medium) [ 239.792790][ T8508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.792887][ T8508] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.793749][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.794017][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.794081][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.794733][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.794997][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.795508][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.797248][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.797478][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.797574][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.798821][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.799835][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.800034][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.803029][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.803205][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.804156][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.804278][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.807392][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.807448][ T8507] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1228: corrupted xattr block 33: invalid header [ 239.807606][ T8507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.809595][ T8506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.809806][ T8506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.814984][ T8498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 239.835885][ T8513] set_capacity_and_notify: 2 callbacks suppressed [ 239.835903][ T8513] loop2: detected capacity change from 0 to 512 [ 239.837256][ T8513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.845981][ T8513] EXT4-fs (loop2): 1 truncate cleaned up [ 239.846430][ T8513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.901956][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 239.901987][ T29] audit: type=1400 audit(1790502781.329:9843): avc: denied { open } for pid=8509 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 239.902013][ T29] audit: type=1400 audit(1790502781.329:9844): avc: denied { kernel } for pid=8509 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.031715][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.047951][ T8519] capability: warning: `syz.1.1233' uses deprecated v2 capabilities in a way that may be insecure [ 240.168342][ T8524] loop0: detected capacity change from 0 to 512 [ 240.184313][ T29] audit: type=1400 audit(1790502781.619:9845): avc: denied { write } for pid=8521 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.204613][ T8528] loop6: detected capacity change from 0 to 512 [ 240.216484][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.216547][ T8524] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.242780][ T29] audit: type=1400 audit(1790502781.679:9846): avc: denied { connect } for pid=8517 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.245983][ T29] audit: type=1400 audit(1790502781.679:9847): avc: denied { write } for pid=8517 comm="syz.1.1233" laddr=fe80::a084:b3ff:fe6f:3d88 lport=8768 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.266726][ T29] audit: type=1326 audit(1790502781.689:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.1235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 240.266793][ T29] audit: type=1326 audit(1790502781.689:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.1235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 240.266865][ T29] audit: type=1326 audit(1790502781.689:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.1235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 240.266890][ T29] audit: type=1326 audit(1790502781.689:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.1235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 240.266916][ T29] audit: type=1326 audit(1790502781.689:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.1235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 240.324985][ T8519] loop1: detected capacity change from 0 to 512 [ 240.325543][ T8519] journal_path: Non-blockdev passed as './file2' [ 240.325561][ T8519] EXT4-fs: error: could not find journal device path [ 240.353577][ T8519] syzkaller1: entered promiscuous mode [ 240.353598][ T8519] syzkaller1: entered allmulticast mode [ 240.486405][ T8528] blktrace: Concurrent blktraces are not allowed on sg0 [ 240.543104][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.557864][ T8540] loop5: detected capacity change from 0 to 512 [ 240.558512][ T8540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.560025][ T8540] EXT4-fs (loop5): 1 truncate cleaned up [ 240.560458][ T8540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.616935][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.752987][ T8552] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 240.829790][ T8554] FAULT_INJECTION: forcing a failure. [ 240.829790][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 240.829852][ T8554] CPU: 1 UID: 0 PID: 8554 Comm: syz.2.1243 Not tainted syzkaller #0 PREEMPT(lazy) [ 240.829881][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.829907][ T8554] Call Trace: [ 240.829916][ T8554] [ 240.829926][ T8554] __dump_stack+0x1d/0x30 [ 240.829956][ T8554] dump_stack_lvl+0x95/0xd0 [ 240.830071][ T8554] dump_stack+0x15/0x1b [ 240.830140][ T8554] should_fail_ex+0x262/0x280 [ 240.830164][ T8554] ? io_cache_alloc_new+0x2a/0xb0 [ 240.830193][ T8554] should_failslab+0x8c/0xb0 [ 240.830232][ T8554] __kmalloc_noprof+0xd0/0x4d0 [ 240.830324][ T8554] ? io_cache_alloc_new+0x2a/0xb0 [ 240.830395][ T8554] io_cache_alloc_new+0x2a/0xb0 [ 240.830419][ T8554] __io_prep_rw+0x121/0x740 [ 240.830451][ T8554] ? io_rw_fail+0xa2/0xb0 [ 240.830500][ T8554] ? io_req_defer_failed+0x16d/0x180 [ 240.830533][ T8554] io_prep_rwv+0x35/0x200 [ 240.830586][ T8554] io_prep_writev+0x22/0x30 [ 240.830610][ T8554] io_submit_sqes+0x737/0x1180 [ 240.830694][ T8554] __se_sys_io_uring_enter+0x25c/0xf90 [ 240.830798][ T8554] ? xfd_validate_state+0x45/0xf0 [ 240.830862][ T8554] __x64_sys_io_uring_enter+0x78/0x90 [ 240.830896][ T8554] x64_sys_call+0x1780/0x2550 [ 240.830921][ T8554] do_syscall_64+0x112/0x360 [ 240.830980][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.831005][ T8554] RIP: 0033:0x7f6d1c76e159 [ 240.831022][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.831065][ T8554] RSP: 002b:00007f6d1b1c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 240.831086][ T8554] RAX: ffffffffffffffda RBX: 00007f6d1c9f5fa0 RCX: 00007f6d1c76e159 [ 240.831100][ T8554] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 240.831113][ T8554] RBP: 00007f6d1c80506b R08: 0000000000000000 R09: 0000000000000020 [ 240.831197][ T8554] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 240.831210][ T8554] R13: 00007f6d1c9f6038 R14: 00007f6d1c9f5fa0 R15: 00007ffd68709128 [ 240.831228][ T8554] [ 241.226076][ T8564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1245'. [ 241.245564][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.331690][ T8574] loop2: detected capacity change from 0 to 512 [ 241.585551][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1251'. [ 242.029435][ T8574] blktrace: Concurrent blktraces are not allowed on sg0 [ 242.112650][ T8581] loop1: detected capacity change from 0 to 512 [ 242.184892][ T8589] loop0: detected capacity change from 0 to 512 [ 242.185498][ T8589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.187061][ T8589] EXT4-fs (loop0): 1 truncate cleaned up [ 242.187576][ T8589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.413158][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.413585][ T8602] loop1: detected capacity change from 0 to 512 [ 242.415978][ T8602] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.429254][ T8602] EXT4-fs (loop1): 1 truncate cleaned up [ 242.429722][ T8602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.632083][ T8607] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 242.702051][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.957402][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 244.957474][ T29] audit: type=1400 audit(1790502786.399:9994): avc: denied { setopt } for pid=8635 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.060810][ T8642] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.1267'. [ 245.067149][ T29] audit: type=1400 audit(1790502786.509:9995): avc: denied { mount } for pid=8638 comm="syz.2.1269" name="/" dev="rpc_pipefs" ino=21279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 245.135591][ T8646] loop5: detected capacity change from 0 to 512 [ 245.151708][ T8646] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 245.151779][ T8646] EXT4-fs (loop5): orphan cleanup on readonly fs [ 245.151799][ T8646] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1268: bad orphan inode 15 [ 245.151821][ T8646] loop5: lost filesystem error report for type 5 error -117 [ 245.153472][ T8646] ext4_test_bit(bit=14, block=5) = 0 [ 245.153854][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 245.191357][ T29] audit: type=1326 audit(1790502786.619:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.191392][ T29] audit: type=1326 audit(1790502786.619:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.191436][ T29] audit: type=1326 audit(1790502786.619:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.191464][ T29] audit: type=1326 audit(1790502786.619:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.191532][ T29] audit: type=1326 audit(1790502786.629:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.234796][ T29] audit: type=1326 audit(1790502786.669:10001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.257050][ T29] audit: type=1326 audit(1790502786.679:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.257109][ T29] audit: type=1326 audit(1790502786.679:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.0.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6228e159 code=0x7ffc0000 [ 245.282653][ T8652] loop1: detected capacity change from 0 to 512 [ 245.286331][ T8652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.318625][ T8652] EXT4-fs (loop1): 1 truncate cleaned up [ 245.319026][ T8652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.467343][ T8658] FAULT_INJECTION: forcing a failure. [ 245.467343][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.467396][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.6.1272 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.467451][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.467464][ T8658] Call Trace: [ 245.467473][ T8658] [ 245.467482][ T8658] __dump_stack+0x1d/0x30 [ 245.467510][ T8658] dump_stack_lvl+0x95/0xd0 [ 245.467534][ T8658] dump_stack+0x15/0x1b [ 245.467622][ T8658] should_fail_ex+0x262/0x280 [ 245.467648][ T8658] should_fail+0xb/0x20 [ 245.467671][ T8658] should_fail_usercopy+0x1a/0x20 [ 245.467699][ T8658] _copy_to_user+0x20/0xa0 [ 245.467735][ T8658] simple_read_from_buffer+0xb5/0x130 [ 245.467821][ T8658] proc_fail_nth_read+0x10e/0x150 [ 245.467850][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.467873][ T8658] vfs_read+0x18e/0x7c0 [ 245.467911][ T8658] ? __rcu_read_unlock+0x4e/0x70 [ 245.467992][ T8658] ? __fget_files+0x184/0x1c0 [ 245.468016][ T8658] ? mutex_lock+0x57/0x90 [ 245.468074][ T8658] ksys_read+0xdc/0x1a0 [ 245.468106][ T8658] __x64_sys_read+0x40/0x50 [ 245.468162][ T8658] x64_sys_call+0x2135/0x2550 [ 245.468194][ T8658] do_syscall_64+0x112/0x360 [ 245.468269][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.468294][ T8658] RIP: 0033:0x7fa50e6fe98e [ 245.468382][ T8658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.468421][ T8658] RSP: 002b:00007fa50d196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.468487][ T8658] RAX: ffffffffffffffda RBX: 00007fa50d1976c0 RCX: 00007fa50e6fe98e [ 245.468503][ T8658] RDX: 000000000000000f RSI: 00007fa50d1970a0 RDI: 0000000000000004 [ 245.468519][ T8658] RBP: 00007fa50d197090 R08: 0000000000000000 R09: 0000000000000000 [ 245.468533][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.468548][ T8658] R13: 00007fa50e9c6038 R14: 00007fa50e9c5fa0 R15: 00007ffff685d9c8 [ 245.468569][ T8658] [ 245.613570][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.662858][ T8665] loop0: detected capacity change from 0 to 512 [ 245.663115][ T8665] msdos: Unknown parameter '' [ 245.808587][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.812475][ T8681] loop6: detected capacity change from 0 to 512 [ 245.834096][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 245.837895][ T8681] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 245.838094][ T8681] EXT4-fs (loop6): orphan cleanup on readonly fs [ 245.838112][ T8681] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1276: bad orphan inode 15 [ 245.838197][ T8681] loop6: lost filesystem error report for type 5 error -117 [ 245.838366][ T8681] ext4_test_bit(bit=14, block=5) = 0 [ 245.838870][ T8681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 245.890587][ T8681] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 247.038491][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.179716][ T8699] FAULT_INJECTION: forcing a failure. [ 247.179716][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 247.179749][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.1.1282 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.179818][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.179832][ T8699] Call Trace: [ 247.179841][ T8699] [ 247.179849][ T8699] __dump_stack+0x1d/0x30 [ 247.179876][ T8699] dump_stack_lvl+0x95/0xd0 [ 247.179968][ T8699] dump_stack+0x15/0x1b [ 247.180025][ T8699] should_fail_ex+0x262/0x280 [ 247.180048][ T8699] ? futex_lock_pi+0x736/0x7c0 [ 247.180077][ T8699] should_failslab+0x8c/0xb0 [ 247.180142][ T8699] __kmalloc_cache_noprof+0x7a/0x400 [ 247.180176][ T8699] ? futex_lock_pi+0x736/0x7c0 [ 247.180209][ T8699] futex_lock_pi+0x736/0x7c0 [ 247.180249][ T8699] ? futex_unqueue+0xc5/0xf0 [ 247.180287][ T8699] ? __pfx_futex_wake_mark+0x10/0x10 [ 247.180319][ T8699] do_futex+0x2ea/0x460 [ 247.180432][ T8699] __se_sys_futex+0x2f6/0x370 [ 247.180523][ T8699] ? xfd_validate_state+0x45/0xf0 [ 247.180557][ T8699] __x64_sys_futex+0x78/0x90 [ 247.180590][ T8699] x64_sys_call+0x22e2/0x2550 [ 247.180696][ T8699] do_syscall_64+0x112/0x360 [ 247.180718][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.180740][ T8699] RIP: 0033:0x7f6855fae159 [ 247.180767][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.180787][ T8699] RSP: 002b:00007f6854a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.180810][ T8699] RAX: ffffffffffffffda RBX: 00007f6856235fa0 RCX: 00007f6855fae159 [ 247.180825][ T8699] RDX: 0000000000000080 RSI: 0000000000000006 RDI: 0000000000000000 [ 247.180840][ T8699] RBP: 00007f685604506b R08: 0000000000000000 R09: 00000000ffffffec [ 247.180854][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.180869][ T8699] R13: 00007f6856236038 R14: 00007f6856235fa0 R15: 00007ffca4085e18 [ 247.180928][ T8699] [ 247.721413][ T8716] loop0: detected capacity change from 0 to 512 [ 247.722057][ T8716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 247.744370][ T8716] EXT4-fs (loop0): 1 truncate cleaned up [ 247.745572][ T8712] loop1: detected capacity change from 0 to 512 [ 247.754296][ T8712] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 247.754391][ T8712] EXT4-fs (loop1): orphan cleanup on readonly fs [ 247.754409][ T8712] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1285: bad orphan inode 15 [ 247.754432][ T8712] loop1: lost filesystem error report for type 5 error -117 [ 247.756973][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 247.756992][ C0] EXT4-fs (loop1): initial error at time 1790502789: ext4_orphan_get:1429 [ 247.757016][ C0] EXT4-fs (loop1): last error at time 1790502789: ext4_orphan_get:1429 [ 247.759870][ T8712] ext4_test_bit(bit=14, block=5) = 0 [ 247.821714][ T8716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.822274][ T8712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 247.920997][ T8723] FAULT_INJECTION: forcing a failure. [ 247.920997][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.921044][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.6.1288 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.921144][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.921208][ T8723] Call Trace: [ 247.921217][ T8723] [ 247.921225][ T8723] __dump_stack+0x1d/0x30 [ 247.921269][ T8723] dump_stack_lvl+0x95/0xd0 [ 247.921339][ T8723] dump_stack+0x15/0x1b [ 247.921361][ T8723] should_fail_ex+0x262/0x280 [ 247.921389][ T8723] should_fail+0xb/0x20 [ 247.921413][ T8723] should_fail_usercopy+0x1a/0x20 [ 247.921454][ T8723] _copy_from_user+0x1c/0xb0 [ 247.921485][ T8723] sg_write+0x65a/0x7a0 [ 247.921552][ T8723] ? __pfx_sg_write+0x10/0x10 [ 247.921580][ T8723] vfs_write+0x254/0x9a0 [ 247.921611][ T8723] ? __fget_files+0x184/0x1c0 [ 247.921765][ T8723] ksys_write+0xdc/0x1a0 [ 247.921804][ T8723] __x64_sys_write+0x40/0x50 [ 247.921904][ T8723] x64_sys_call+0x154e/0x2550 [ 247.921932][ T8723] do_syscall_64+0x112/0x360 [ 247.921990][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.922047][ T8723] RIP: 0033:0x7fa50e73e159 [ 247.922064][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.922085][ T8723] RSP: 002b:00007fa50d197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.922186][ T8723] RAX: ffffffffffffffda RBX: 00007fa50e9c5fa0 RCX: 00007fa50e73e159 [ 247.922202][ T8723] RDX: 0000000000000054 RSI: 00002000000002c0 RDI: 0000000000000005 [ 247.922217][ T8723] RBP: 00007fa50d197090 R08: 0000000000000000 R09: 0000000000000000 [ 247.922260][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.922274][ T8723] R13: 00007fa50e9c6038 R14: 00007fa50e9c5fa0 R15: 00007ffff685d9c8 [ 247.922295][ T8723] [ 247.945093][ T8725] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 247.945093][ T8725] program syz.6.1290 not setting count and/or reply_len properly [ 248.136703][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.136848][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.158792][ T8732] loop6: detected capacity change from 0 to 512 [ 248.165940][ T8732] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 248.166056][ T8732] EXT4-fs (loop6): orphan cleanup on readonly fs [ 248.166073][ T8732] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1291: bad orphan inode 15 [ 248.166168][ T8732] loop6: lost filesystem error report for type 5 error -117 [ 248.166264][ T8732] ext4_test_bit(bit=14, block=5) = 0 [ 248.166765][ T8732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 248.232950][ T8732] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 248.267669][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.362637][ T8739] loop1: detected capacity change from 0 to 512 [ 248.364100][ T8739] msdos: Unknown parameter '' [ 248.387743][ T8741] FAULT_INJECTION: forcing a failure. [ 248.387743][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 248.387771][ T8741] CPU: 0 UID: 0 PID: 8741 Comm: syz.6.1294 Not tainted syzkaller #0 PREEMPT(lazy) [ 248.387802][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.387817][ T8741] Call Trace: [ 248.387870][ T8741] [ 248.387880][ T8741] __dump_stack+0x1d/0x30 [ 248.387905][ T8741] dump_stack_lvl+0x95/0xd0 [ 248.387961][ T8741] dump_stack+0x15/0x1b [ 248.387986][ T8741] should_fail_ex+0x262/0x280 [ 248.388016][ T8741] ? key_alloc+0x275/0x940 [ 248.388087][ T8741] should_failslab+0x8c/0xb0 [ 248.388185][ T8741] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 248.388290][ T8741] ? key_alloc+0x275/0x940 [ 248.388324][ T8741] key_alloc+0x275/0x940 [ 248.388350][ T8741] ? sprintf+0x88/0xb0 [ 248.388408][ T8741] ? request_key_auth_new+0xbd/0x5d0 [ 248.388442][ T8741] request_key_auth_new+0x48a/0x5d0 [ 248.388474][ T8741] request_key_and_link+0x8fe/0xe20 [ 248.388541][ T8741] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 248.388592][ T8741] ? __pfx_keyring_search_iterator+0x10/0x10 [ 248.388624][ T8741] __se_sys_request_key+0x1e9/0x2a0 [ 248.388710][ T8741] ? fput+0x91/0xc0 [ 248.388738][ T8741] __x64_sys_request_key+0x55/0x70 [ 248.388853][ T8741] x64_sys_call+0x1741/0x2550 [ 248.388884][ T8741] do_syscall_64+0x112/0x360 [ 248.388984][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.389163][ T8741] RIP: 0033:0x7fa50e73e159 [ 248.389183][ T8741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.389205][ T8741] RSP: 002b:00007fa50d197028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 248.389226][ T8741] RAX: ffffffffffffffda RBX: 00007fa50e9c5fa0 RCX: 00007fa50e73e159 [ 248.389242][ T8741] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 248.389311][ T8741] RBP: 00007fa50d197090 R08: 0000000000000000 R09: 0000000000000000 [ 248.389383][ T8741] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 248.389399][ T8741] R13: 00007fa50e9c6038 R14: 00007fa50e9c5fa0 R15: 00007ffff685d9c8 [ 248.389472][ T8741] [ 248.816575][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1297'. [ 249.323905][ T8756] loop1: detected capacity change from 0 to 128 [ 249.495264][ T8760] loop2: detected capacity change from 0 to 512 [ 249.601424][ T8760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.693640][ T8760] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1301: invalid indirect mapped block 4294967295 (level 0) [ 249.694202][ T8760] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 249.695422][ T8760] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1301: invalid indirect mapped block 4294967295 (level 1) [ 249.695528][ T8760] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 249.696999][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 249.697033][ C0] EXT4-fs (loop2): initial error at time 1790502791: ext4_free_branches:1023: inode 16 [ 249.697150][ C0] EXT4-fs (loop2): last error at time 1790502791: ext4_free_branches:1023: inode 16 [ 249.781643][ T8760] EXT4-fs (loop2): 1 orphan inode deleted [ 249.781839][ T8760] EXT4-fs (loop2): 1 truncate cleaned up [ 249.887689][ T8769] FAULT_INJECTION: forcing a failure. [ 249.887689][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.887723][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.887846][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.887869][ T8769] Call Trace: [ 249.887876][ T8769] [ 249.887883][ T8769] __dump_stack+0x1d/0x30 [ 249.887911][ T8769] dump_stack_lvl+0x95/0xd0 [ 249.887960][ T8769] dump_stack+0x15/0x1b [ 249.887981][ T8769] should_fail_ex+0x262/0x280 [ 249.888047][ T8769] should_fail+0xb/0x20 [ 249.888071][ T8769] should_fail_usercopy+0x1a/0x20 [ 249.888202][ T8769] _copy_to_user+0x20/0xa0 [ 249.888241][ T8769] simple_read_from_buffer+0xb5/0x130 [ 249.888332][ T8769] proc_fail_nth_read+0x10e/0x150 [ 249.888356][ T8769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.888380][ T8769] vfs_read+0x18e/0x7c0 [ 249.888410][ T8769] ? __rcu_read_unlock+0x4e/0x70 [ 249.888566][ T8769] ? __fget_files+0x184/0x1c0 [ 249.888590][ T8769] ? mutex_lock+0x57/0x90 [ 249.888622][ T8769] ksys_read+0xdc/0x1a0 [ 249.888653][ T8769] __x64_sys_read+0x40/0x50 [ 249.888722][ T8769] x64_sys_call+0x2135/0x2550 [ 249.888749][ T8769] do_syscall_64+0x112/0x360 [ 249.888772][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.888833][ T8769] RIP: 0033:0x7f5a6224e98e [ 249.888851][ T8769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.888872][ T8769] RSP: 002b:00007f5a60ce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.888894][ T8769] RAX: ffffffffffffffda RBX: 00007f5a60ce76c0 RCX: 00007f5a6224e98e [ 249.888977][ T8769] RDX: 000000000000000f RSI: 00007f5a60ce70a0 RDI: 0000000000000004 [ 249.888992][ T8769] RBP: 00007f5a60ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.889007][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.889019][ T8769] R13: 00007f5a62516038 R14: 00007f5a62515fa0 R15: 00007ffc846ebb18 [ 249.889039][ T8769] [ 250.321457][ T8782] loop0: detected capacity change from 0 to 1024 [ 250.357309][ T8782] EXT4-fs: Ignoring removed bh option [ 250.366235][ T8782] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 250.404752][ T8782] EXT4-fs mount: 4 callbacks suppressed [ 250.404772][ T8782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.441015][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 250.441031][ T29] audit: type=1400 audit(1790502791.879:10358): avc: denied { write } for pid=8781 comm="syz.0.1309" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.499664][ T3303] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /261/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 250.499910][ T29] audit: type=1400 audit(1790502791.939:10359): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.499936][ T29] audit: type=1400 audit(1790502791.939:10360): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.500701][ T3303] EXT4-fs (loop0): Remounting filesystem read-only [ 250.501514][ T29] audit: type=1400 audit(1790502791.939:10361): avc: denied { write } for pid=3303 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.501539][ T29] audit: type=1400 audit(1790502791.939:10362): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.501627][ T29] audit: type=1400 audit(1790502791.939:10363): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.501686][ T29] audit: type=1400 audit(1790502791.939:10364): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.503165][ T29] audit: type=1400 audit(1790502791.939:10365): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.503191][ T29] audit: type=1400 audit(1790502791.939:10366): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.503271][ T29] audit: type=1400 audit(1790502791.939:10367): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.509987][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1308'. [ 250.741137][ T8792] FAULT_INJECTION: forcing a failure. [ 250.741137][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 250.741182][ T8792] CPU: 1 UID: 0 PID: 8792 Comm: syz.1.1310 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.741209][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.741221][ T8792] Call Trace: [ 250.741230][ T8792] [ 250.741293][ T8792] __dump_stack+0x1d/0x30 [ 250.741320][ T8792] dump_stack_lvl+0x95/0xd0 [ 250.741342][ T8792] dump_stack+0x15/0x1b [ 250.741407][ T8792] should_fail_ex+0x262/0x280 [ 250.741433][ T8792] ? io_cache_alloc_new+0x2a/0xb0 [ 250.741458][ T8792] should_failslab+0x8c/0xb0 [ 250.741488][ T8792] __kmalloc_noprof+0xd0/0x4d0 [ 250.741560][ T8792] ? io_cache_alloc_new+0x2a/0xb0 [ 250.741642][ T8792] io_cache_alloc_new+0x2a/0xb0 [ 250.741680][ T8792] __io_prep_rw+0x121/0x740 [ 250.741775][ T8792] ? io_req_defer_failed+0x16d/0x180 [ 250.741803][ T8792] io_prep_rwv+0x35/0x200 [ 250.741840][ T8792] io_prep_writev+0x22/0x30 [ 250.741867][ T8792] io_submit_sqes+0x737/0x1180 [ 250.741912][ T8792] __se_sys_io_uring_enter+0x25c/0xf90 [ 250.742021][ T8792] ? __se_sys_futex+0x2f6/0x370 [ 250.742051][ T8792] ? xfd_validate_state+0x45/0xf0 [ 250.742130][ T8792] __x64_sys_io_uring_enter+0x78/0x90 [ 250.742178][ T8792] x64_sys_call+0x1780/0x2550 [ 250.742203][ T8792] do_syscall_64+0x112/0x360 [ 250.742227][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.742320][ T8792] RIP: 0033:0x7f6855fae159 [ 250.742337][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.742356][ T8792] RSP: 002b:00007f6854a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 250.742379][ T8792] RAX: ffffffffffffffda RBX: 00007f6856235fa0 RCX: 00007f6855fae159 [ 250.742394][ T8792] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 250.742470][ T8792] RBP: 00007f685604506b R08: 0000000000000000 R09: 0000000000000020 [ 250.742484][ T8792] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 250.742498][ T8792] R13: 00007f6856236038 R14: 00007f6856235fa0 R15: 00007ffca4085e18 [ 250.742518][ T8792] [ 251.000630][ T8788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.540737][ T8810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 251.540765][ T8810] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.541053][ T8810] vhci_hcd vhci_hcd.0: Device attached [ 251.578008][ T8821] vhci_hcd: connection closed [ 251.579594][ T6383] vhci_hcd vhci_hcd.1: stop threads [ 251.579617][ T6383] vhci_hcd vhci_hcd.1: release socket [ 251.579634][ T6383] vhci_hcd vhci_hcd.1: disconnect device [ 252.166501][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.166604][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.166746][ T8801] bridge_slave_0: entered allmulticast mode [ 252.190951][ T8801] bridge_slave_0: entered promiscuous mode [ 252.198944][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.199019][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.199148][ T8801] bridge_slave_1: entered allmulticast mode [ 252.200367][ T8801] bridge_slave_1: entered promiscuous mode [ 252.422195][ T8835] loop5: detected capacity change from 0 to 512 [ 252.576477][ T8841] loop6: detected capacity change from 0 to 512 [ 252.635105][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.646915][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.674770][ T8801] team0: Port device team_slave_0 added [ 252.676674][ T8801] team0: Port device team_slave_1 added [ 252.707827][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.707843][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.707937][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.709397][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.709419][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.709465][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.797083][ T8801] hsr_slave_0: entered promiscuous mode [ 252.797489][ T8801] hsr_slave_1: entered promiscuous mode [ 252.797680][ T8801] debugfs: 'hsr0' already exists in 'hsr' [ 252.797695][ T8801] Cannot create hsr debugfs directory [ 252.811570][ T8841] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 252.811704][ T8841] EXT4-fs (loop6): orphan cleanup on readonly fs [ 252.811724][ T8841] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1321: bad orphan inode 15 [ 252.811746][ T8841] loop6: lost filesystem error report for type 5 error -117 [ 252.812056][ T8835] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 252.812119][ T8835] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.812210][ T8835] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1320: bad orphan inode 15 [ 252.812252][ T8835] loop5: lost filesystem error report for type 5 error -117 [ 252.812337][ T8835] ext4_test_bit(bit=14, block=5) = 0 [ 252.812803][ T8835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.817599][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 252.817626][ C0] EXT4-fs (loop6): initial error at time 1790502794: ext4_orphan_get:1429 [ 252.817665][ C0] EXT4-fs (loop6): last error at time 1790502794: ext4_orphan_get:1429 [ 252.844468][ T8841] ext4_test_bit(bit=14, block=5) = 0 [ 252.844922][ T8841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.914266][ T8835] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 252.956834][ T8848] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 253.016275][ T8801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 253.025138][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.026105][ T8801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.039121][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.039871][ T8801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.045446][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.059991][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.062253][ T8801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.076669][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.082167][ T8851] loop2: detected capacity change from 0 to 512 [ 253.082545][ T8851] msdos: Unknown parameter '' [ 253.096696][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 253.122074][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.122128][ T8801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.122260][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.122355][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.185185][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.196182][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.207101][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.208505][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.252246][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.256323][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.256357][ T4831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.265847][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.265883][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.325499][ T8868] FAULT_INJECTION: forcing a failure. [ 253.325499][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 253.325541][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.1.1328 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.325569][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.325580][ T8868] Call Trace: [ 253.325586][ T8868] [ 253.325593][ T8868] __dump_stack+0x1d/0x30 [ 253.325641][ T8868] dump_stack_lvl+0x95/0xd0 [ 253.325732][ T8868] dump_stack+0x15/0x1b [ 253.325815][ T8868] should_fail_ex+0x262/0x280 [ 253.325845][ T8868] should_failslab+0x8c/0xb0 [ 253.325879][ T8868] __kmalloc_node_noprof+0xdb/0x500 [ 253.325918][ T8868] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 253.325983][ T8868] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 253.326034][ T8868] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 253.326071][ T8868] ? __d_rehash+0x124/0x1d0 [ 253.326106][ T8868] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 253.326201][ T8868] __vmalloc_noprof+0xa4/0xf0 [ 253.326228][ T8868] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 253.326251][ T8868] bpf_prog_alloc_no_stats+0x47/0x390 [ 253.326272][ T8868] ? bpf_prog_alloc+0x2a/0x150 [ 253.326310][ T8868] bpf_prog_alloc+0x3c/0x150 [ 253.326330][ T8868] bpf_prog_load+0x54b/0x1060 [ 253.326372][ T8868] ? avc_has_perm_noaudit+0xac/0x160 [ 253.326428][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.326488][ T8868] __sys_bpf+0xbae/0xc30 [ 253.326510][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.326538][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.326613][ T8868] __x64_sys_bpf+0x69/0x80 [ 253.326662][ T8868] x64_sys_call+0xf26/0x2550 [ 253.326685][ T8868] do_syscall_64+0x112/0x360 [ 253.326758][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.326782][ T8868] RIP: 0033:0x7f6855fae159 [ 253.326799][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.326817][ T8868] RSP: 002b:00007f6854a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.326842][ T8868] RAX: ffffffffffffffda RBX: 00007f6856235fa0 RCX: 00007f6855fae159 [ 253.326899][ T8868] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 253.326975][ T8868] RBP: 00007f6854a07090 R08: 0000000000000000 R09: 0000000000000000 [ 253.326989][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.327054][ T8868] R13: 00007f6856236038 R14: 00007f6856235fa0 R15: 00007ffca4085e18 [ 253.327076][ T8868] [ 253.399233][ T8868] syz.1.1328: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 253.399431][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.1.1328 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.399456][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.399468][ T8868] Call Trace: [ 253.399475][ T8868] [ 253.399483][ T8868] __dump_stack+0x1d/0x30 [ 253.399542][ T8868] dump_stack_lvl+0x95/0xd0 [ 253.399564][ T8868] dump_stack+0x15/0x1b [ 253.399584][ T8868] warn_alloc+0x146/0x1c0 [ 253.399686][ T8868] ? __kmalloc_node_noprof+0x2fb/0x500 [ 253.399716][ T8868] ? __kmalloc_node_noprof+0xdb/0x500 [ 253.399761][ T8868] __vmalloc_node_range_noprof+0x70d/0x1000 [ 253.399793][ T8868] ? __d_rehash+0x124/0x1d0 [ 253.399826][ T8868] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 253.399901][ T8868] __vmalloc_noprof+0xa4/0xf0 [ 253.399930][ T8868] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 253.399954][ T8868] bpf_prog_alloc_no_stats+0x47/0x390 [ 253.400033][ T8868] ? bpf_prog_alloc+0x2a/0x150 [ 253.400055][ T8868] bpf_prog_alloc+0x3c/0x150 [ 253.400157][ T8868] bpf_prog_load+0x54b/0x1060 [ 253.400235][ T8868] ? avc_has_perm_noaudit+0xac/0x160 [ 253.400266][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.400305][ T8868] __sys_bpf+0xbae/0xc30 [ 253.400331][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.400358][ T8868] ? vfs_write+0x7b0/0x9a0 [ 253.400390][ T8868] __x64_sys_bpf+0x69/0x80 [ 253.400481][ T8868] x64_sys_call+0xf26/0x2550 [ 253.400506][ T8868] do_syscall_64+0x112/0x360 [ 253.400529][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.400551][ T8868] RIP: 0033:0x7f6855fae159 [ 253.400572][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.400591][ T8868] RSP: 002b:00007f6854a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.400613][ T8868] RAX: ffffffffffffffda RBX: 00007f6856235fa0 RCX: 00007f6855fae159 [ 253.400628][ T8868] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 253.400642][ T8868] RBP: 00007f6854a07090 R08: 0000000000000000 R09: 0000000000000000 [ 253.400656][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.400694][ T8868] R13: 00007f6856236038 R14: 00007f6856235fa0 R15: 00007ffca4085e18 [ 253.400777][ T8868] [ 253.400845][ T8868] Mem-Info: [ 253.401104][ T8868] active_anon:26913 inactive_anon:2 isolated_anon:0 [ 253.401104][ T8868] active_file:2647 inactive_file:22555 isolated_file:0 [ 253.401104][ T8868] unevictable:0 dirty:339 writeback:0 [ 253.401104][ T8868] slab_reclaimable:3541 slab_unreclaimable:19200 [ 253.401104][ T8868] mapped:30233 shmem:17948 pagetables:5546 [ 253.401104][ T8868] sec_pagetables:0 bounce:0 [ 253.401104][ T8868] kernel_misc_reclaimable:0 [ 253.401104][ T8868] free:1851006 free_pcp:9179 free_cma:0 [ 253.401622][ T8868] Node 0 active_anon:107652kB inactive_anon:8kB active_file:10588kB inactive_file:90220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120932kB dirty:1356kB writeback:0kB shmem:71792kB kernel_stack:4384kB pagetables:22184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 253.401746][ T8868] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.401849][ T8868] lowmem_reserve[]: 0 2878 7856 7856 [ 253.402418][ T8868] Node 0 DMA32 free:2943660kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947184kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 253.402718][ T8868] lowmem_reserve[]: 0 0 4978 4978 [ 253.403437][ T8868] Node 0 Normal free:4445004kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:107652kB inactive_anon:8kB active_file:10588kB inactive_file:90220kB unevictable:0kB writepending:1356kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:33192kB local_pcp:17956kB free_cma:0kB [ 253.403542][ T8868] lowmem_reserve[]: 0 0 0 0 [ 253.411378][ T8868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.422481][ T8868] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943660kB [ 253.434208][ T8868] Node 0 Normal: [ 253.435375][ T8874] loop5: detected capacity change from 0 to 128 [ 253.442068][ T8868] 1*4kB (E) 89*8kB (UME) 176*16kB (ME) 244*32kB (UME) 81*64kB (UM) 90*128kB (M) 30*256kB (M) 16*512kB (ME) 8*1024kB (UME) 9*2048kB (UM) 1068*4096kB (UM) = 4445068kB [ 253.459586][ T8868] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 253.460237][ T8868] 43146 total pagecache pages [ 253.460468][ T8868] 0 pages in swap cache [ 253.460491][ T8868] Free swap = 124996kB [ 253.460657][ T8868] Total swap = 124996kB [ 253.467983][ T8868] 2097051 pages RAM [ 253.468013][ T8868] 0 pages HighMem/MovableOnly [ 253.468033][ T8868] 81858 pages reserved [ 253.628244][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.858435][ T8882] FAULT_INJECTION: forcing a failure. [ 253.858435][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 253.858468][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.1.1331 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.858537][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.858549][ T8882] Call Trace: [ 253.858557][ T8882] [ 253.858565][ T8882] __dump_stack+0x1d/0x30 [ 253.858592][ T8882] dump_stack_lvl+0x95/0xd0 [ 253.858622][ T8882] dump_stack+0x15/0x1b [ 253.858659][ T8882] should_fail_ex+0x262/0x280 [ 253.858683][ T8882] ? io_cache_alloc_new+0x2a/0xb0 [ 253.858708][ T8882] should_failslab+0x8c/0xb0 [ 253.858763][ T8882] __kmalloc_noprof+0xd0/0x4d0 [ 253.858852][ T8882] ? io_cache_alloc_new+0x2a/0xb0 [ 253.858880][ T8882] io_cache_alloc_new+0x2a/0xb0 [ 253.858904][ T8882] io_uring_cmd_prep+0x228/0x2d0 [ 253.858929][ T8882] io_submit_sqes+0x737/0x1180 [ 253.859020][ T8882] __se_sys_io_uring_enter+0x25c/0xf90 [ 253.859048][ T8882] ? __se_sys_futex+0x2f6/0x370 [ 253.859076][ T8882] ? xfd_validate_state+0x45/0xf0 [ 253.859183][ T8882] __x64_sys_io_uring_enter+0x78/0x90 [ 253.859247][ T8882] x64_sys_call+0x1780/0x2550 [ 253.859282][ T8882] do_syscall_64+0x112/0x360 [ 253.859306][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.859328][ T8882] RIP: 0033:0x7f6855fae159 [ 253.859392][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.859409][ T8882] RSP: 002b:00007f6854a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.859431][ T8882] RAX: ffffffffffffffda RBX: 00007f6856235fa0 RCX: 00007f6855fae159 [ 253.859516][ T8882] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 253.859531][ T8882] RBP: 00007f685604506b R08: 0000000000000000 R09: 0000000000000020 [ 253.859545][ T8882] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 253.859618][ T8882] R13: 00007f6856236038 R14: 00007f6856235fa0 R15: 00007ffca4085e18 [ 253.859632][ T8882] [ 254.658286][ T8801] veth0_vlan: entered promiscuous mode [ 254.665295][ T8801] veth1_vlan: entered promiscuous mode [ 254.688660][ T8801] veth0_macvtap: entered promiscuous mode [ 254.694992][ T8801] veth1_macvtap: entered promiscuous mode [ 254.722799][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.733500][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1335'. [ 254.743988][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.762920][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 254.774505][ T6382] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.774627][ T6382] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.774729][ T6382] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.774760][ T6382] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.806338][ T8920] loop1: detected capacity change from 0 to 512 [ 254.870414][ T8920] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.019452][ T8936] loop7: detected capacity change from 0 to 512 [ 255.194729][ T8913] netlink: 'syz.1.1334': attribute type 9 has an invalid length. [ 255.195198][ T8913] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1334'. [ 255.205997][ T8939] loop6: detected capacity change from 0 to 512 [ 255.210359][ T8939] msdos: Unknown parameter '' [ 255.286900][ T3296] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 255.697030][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 255.697058][ T29] audit: type=1326 audit(1790502797.109:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d6de159 code=0x7ffc0000 [ 255.697358][ T29] audit: type=1326 audit(1790502797.109:10592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d6de159 code=0x7ffc0000 [ 255.697408][ T29] audit: type=1326 audit(1790502797.109:10593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d6de159 code=0x7ffc0000 [ 255.697463][ T29] audit: type=1326 audit(1790502797.109:10594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f930d6de159 code=0x7ffc0000 [ 255.741440][ T29] audit: type=1326 audit(1790502797.179:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d6de159 code=0x7ffc0000 [ 255.741469][ T29] audit: type=1326 audit(1790502797.179:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f930d6ddec2 code=0x7ffc0000 [ 255.741592][ T29] audit: type=1326 audit(1790502797.179:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f930d6ddf57 code=0x7ffc0000 [ 255.741617][ T29] audit: type=1326 audit(1790502797.179:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f930d69ae51 code=0x7ffc0000 [ 255.741664][ T29] audit: type=1326 audit(1790502797.179:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f930d6def49 code=0x7ffc0000 [ 255.741737][ T29] audit: type=1326 audit(1790502797.179:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f930d69aebb code=0x7ffc0000 [ 255.917274][ T8945] FAULT_INJECTION: forcing a failure. [ 255.917274][ T8945] name failslab, interval 1, probability 0, space 0, times 0 [ 255.917304][ T8945] CPU: 0 UID: 0 PID: 8945 Comm: syz.7.1344 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.917329][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.917361][ T8945] Call Trace: [ 255.917368][ T8945] [ 255.917376][ T8945] __dump_stack+0x1d/0x30 [ 255.917482][ T8945] dump_stack_lvl+0x95/0xd0 [ 255.917505][ T8945] dump_stack+0x15/0x1b [ 255.917526][ T8945] should_fail_ex+0x262/0x280 [ 255.917581][ T8945] ? __alloc_skb+0x2e0/0x6f0 [ 255.917655][ T8945] should_failslab+0x8c/0xb0 [ 255.917684][ T8945] kmem_cache_alloc_node_noprof+0x82/0x400 [ 255.917714][ T8945] ? should_fail_ex+0xdb/0x280 [ 255.917761][ T8945] ? __alloc_skb+0x2e0/0x6f0 [ 255.917831][ T8945] __alloc_skb+0x2e0/0x6f0 [ 255.917861][ T8945] ? __alloc_skb+0x209/0x6f0 [ 255.917892][ T8945] audit_log_start+0x3aa/0x730 [ 255.917971][ T8945] audit_seccomp+0x49/0x110 [ 255.917992][ T8945] __seccomp_filter+0x909/0x1360 [ 255.918024][ T8945] ? __se_sys_futex+0x2f6/0x370 [ 255.918163][ T8945] __seccomp_permit_syscall+0x7d/0x150 [ 255.918192][ T8945] do_syscall_64+0xca/0x360 [ 255.918215][ T8945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.918238][ T8945] RIP: 0033:0x7f930d6de159 [ 255.918333][ T8945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.918382][ T8945] RSP: 002b:00007f930c1370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.918405][ T8945] RAX: ffffffffffffffda RBX: 00007f930d965fa8 RCX: 00007f930d6de159 [ 255.918420][ T8945] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f930d965fa8 [ 255.918438][ T8945] RBP: 00007f930d965fa0 R08: 0000000000000000 R09: 0000000000000000 [ 255.918452][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.918465][ T8945] R13: 00007f930d966038 R14: 00007ffe812d9260 R15: 00007ffe812d9348 [ 255.918543][ T8945] [ 255.971563][ T8953] LUN: removable file: (no medium) [ 256.391144][ T8957] loop2: detected capacity change from 0 to 512 [ 256.406852][ T8957] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 256.407011][ T8957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 256.407072][ T8957] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1347: bad orphan inode 15 [ 256.407177][ T8957] loop2: lost filesystem error report for type 5 error -117 [ 256.407550][ T8957] ext4_test_bit(bit=14, block=5) = 0 [ 256.407937][ T8957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 256.413017][ T8959] loop6: detected capacity change from 0 to 512 [ 256.438710][ T8957] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 256.469257][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.859495][ T8959] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 256.859621][ T8959] EXT4-fs (loop6): orphan cleanup on readonly fs [ 256.859642][ T8959] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1348: bad orphan inode 15 [ 256.859666][ T8959] loop6: lost filesystem error report for type 5 error -117 [ 256.859792][ T8959] ext4_test_bit(bit=14, block=5) = 0 [ 256.860291][ T8959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 256.896655][ T8959] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 256.944710][ T8972] loop2: detected capacity change from 0 to 512 [ 256.964496][ T8972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.965059][ T8972] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.985951][ T8969] loop7: detected capacity change from 0 to 512 [ 257.037830][ T8977] loop5: detected capacity change from 0 to 512 [ 257.049736][ T8977] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.057886][ T8977] EXT4-fs (loop5): 1 truncate cleaned up [ 257.058358][ T8977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.087854][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.184539][ T8981] loop1: detected capacity change from 0 to 512 [ 257.207957][ T8983] loop6: detected capacity change from 0 to 512 [ 257.249455][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.255513][ T8983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.255603][ T8983] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.459894][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.491519][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1351'. [ 257.499676][ T8996] loop7: detected capacity change from 0 to 1764 [ 257.499940][ T8996] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000ÿÿñDïVjª&Ú¾¶ô0ßícF¬( [ 257.499940][ T8996] о0¬þ1>i¢úlþgŒaÉô  ký™¾È â½¥(ªé7%à´ûðÏ…·ûC~4Gõvö2v‘Q\µF' [ 257.783514][ T9000] loop6: detected capacity change from 0 to 512 [ 257.793318][ T9000] msdos: Unknown parameter '' [ 258.168780][ T8994] blktrace: Concurrent blktraces are not allowed on sg0 [ 258.264702][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.318474][ T9009] loop1: detected capacity change from 0 to 1024 [ 258.319206][ T9009] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 258.319244][ T9009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 258.321345][ T9009] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 258.321511][ T9009] EXT4-fs (loop1): orphan cleanup on readonly fs [ 258.321731][ T9009] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.1362: Inode bitmap for bg 0 marked uninitialized [ 258.321755][ T9009] loop1: lost filesystem error report for type 5 error -117 [ 258.321917][ T9009] EXT4-fs (loop1): Remounting filesystem read-only [ 258.322335][ T9009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.000273][ T9033] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 260.000879][ T9033] EXT4-fs (loop6): orphan cleanup on readonly fs [ 260.000994][ T9033] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1367: bad orphan inode 15 [ 260.001049][ T9033] loop6: lost filesystem error report for type 5 error -117 [ 260.001219][ T9033] ext4_test_bit(bit=14, block=5) = 0 [ 260.001697][ T9033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.191610][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.240221][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.561893][ T9046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.800774][ T9055] blktrace: Concurrent blktraces are not allowed on sg0 [ 260.895587][ T9063] msdos: Unknown parameter '' [ 261.330036][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 261.330055][ T29] audit: type=1326 audit(1790502802.769:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.6.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50e73e159 code=0x7fc00000 [ 261.394714][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.661248][ T9075] LUN: removable file: (no medium) [ 261.661572][ T29] audit: type=1400 audit(1790502803.099:10835): avc: denied { write } for pid=9074 comm="syz.6.1379" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.802474][ T29] audit: type=1400 audit(1790502803.239:10836): avc: denied { write } for pid=9074 comm="syz.6.1379" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.053997][ T9092] --map-set only usable from mangle table [ 262.062431][ T29] audit: type=1400 audit(1790502803.509:10837): avc: denied { write } for pid=9091 comm="syz.1.1384" lport=47066 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.118956][ T9094] set_capacity_and_notify: 5 callbacks suppressed [ 262.118973][ T9094] loop2: detected capacity change from 0 to 512 [ 262.187859][ T9098] loop1: detected capacity change from 0 to 512 [ 262.230055][ T9098] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 262.263108][ T9098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1386: bg 0: block 16: invalid block bitmap [ 262.263145][ T9098] loop1: lost filesystem error report for type 5 error -117 [ 262.264813][ T9098] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 262.264835][ T9098] loop1: lost filesystem error report for type 5 error -117 [ 262.265025][ T9098] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1386: invalid indirect mapped block 5 (level 0) [ 262.265058][ T9098] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 262.265189][ T9098] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1386: invalid indirect mapped block 4294967295 (level 1) [ 262.265270][ T9098] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 262.265406][ T9098] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1386: invalid indirect mapped block 4294967295 (level 2) [ 262.265436][ T9098] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 262.265774][ T9098] EXT4-fs (loop1): 1 truncate cleaned up [ 262.266183][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.280554][ T29] audit: type=1400 audit(1790502803.719:10838): avc: denied { write } for pid=9096 comm="syz.1.1386" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.354241][ T9103] blktrace: Concurrent blktraces are not allowed on sg0 [ 262.439700][ T29] audit: type=1400 audit(1790502803.879:10839): avc: denied { write } for pid=9096 comm="syz.1.1386" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.650362][ T9110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1388'. [ 262.698090][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.824994][ T9115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=9115 comm=syz.2.1389 [ 262.923878][ T9119] loop7: detected capacity change from 0 to 512 [ 263.040527][ T9119] loop7: detected capacity change from 0 to 512 [ 263.053500][ T9119] EXT4-fs: Ignoring removed i_version option [ 263.083558][ T9119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.083624][ T9119] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.138134][ T9129] LUN: removable file: (no medium) [ 263.138354][ T29] audit: type=1400 audit(1790502804.579:10840): avc: denied { write } for pid=9128 comm="syz.5.1394" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.200696][ T29] audit: type=1400 audit(1790502804.639:10841): avc: denied { write } for pid=9128 comm="syz.5.1394" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.203622][ T8801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.407597][ T29] audit: type=1326 audit(1790502804.849:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.1.1392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 263.407704][ T29] audit: type=1326 audit(1790502804.849:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.1.1392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855fae159 code=0x7ffc0000 [ 263.874227][ T9142] loop2: detected capacity change from 0 to 512 [ 263.891136][ T9142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.927978][ T9142] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 264.005622][ T9142] EXT4-fs (loop2): orphan cleanup on readonly fs [ 264.005787][ T9142] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 264.005809][ T9142] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 264.030961][ T9142] EXT4-fs (loop2): 1 truncate cleaned up [ 264.031517][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.183887][ T9146] loop5: detected capacity change from 0 to 512 [ 264.186816][ T9146] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 264.186997][ T9146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.187078][ T9146] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1398: bad orphan inode 15 [ 264.187102][ T9146] loop5: lost filesystem error report for type 5 error -117 [ 264.194676][ T9146] ext4_test_bit(bit=14, block=5) = 0 [ 264.195150][ T9146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.207307][ T9146] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 264.297400][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.353052][ T9152] loop6: detected capacity change from 0 to 512 [ 264.364385][ T9152] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 264.380643][ T5509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.389448][ T9152] EXT4-fs (loop6): 1 truncate cleaned up [ 264.389986][ T9152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.521992][ T9161] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 264.767542][ T6090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.795319][ T9173] LUN: removable file: (no medium) [ 264.807508][ T6375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.840283][ T6375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.873389][ T6375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.903680][ T6375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.972613][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1409'. [ 264.972657][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1409'. [ 265.007103][ T6375] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.060972][ T6375] bridge_slave_1: left allmulticast mode [ 265.060996][ T6375] bridge_slave_1: left promiscuous mode [ 265.061091][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.067616][ T6375] bridge_slave_0: left allmulticast mode [ 265.067635][ T6375] bridge_slave_0: left promiscuous mode [ 265.067789][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.108186][ T6375] bond_slave_0: left promiscuous mode [ 265.108215][ T6375] bond_slave_1: left promiscuous mode [ 265.802719][ T6375] bond1 (unregistering): (slave gretap1): Releasing active interface [ 265.845137][ T6375] bond0 (unregistering): left allmulticast mode [ 265.845207][ T6375] bond_slave_0: left allmulticast mode [ 265.845225][ T6375] bond_slave_1: left allmulticast mode [ 265.864974][ T6375] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 265.865195][ T6375] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 265.865521][ T6375] macvlan2 (unregistering): left allmulticast mode [ 266.029236][ T6381] smc: removing ib device syz0 [ 266.037110][ T6375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.038872][ T6375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.039824][ T6375] bond0 (unregistering): Released all slaves [ 266.042022][ T9201] loop6: detected capacity change from 0 to 512 [ 266.042062][ T6375] bond1 (unregistering): Released all slaves [ 266.600760][ T9201] blktrace: Concurrent blktraces are not allowed on sg0 [ 266.604004][ T6375] bond2 (unregistering): Released all slaves [ 266.661513][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 266.730959][ T9124] syz.1.1392 (9124) used greatest stack depth: 9416 bytes left [ 266.765244][ T9210] SELinux: syz.2.1415 (9210) wrote to checkreqprot. This is no longer supported. [ 267.052016][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 267.052032][ T9234] LUN: removable file: (no medium) [ 267.052034][ T29] audit: type=1400 audit(1790502808.489:10862): avc: denied { write } for pid=9233 comm="syz.1.1419" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.052141][ T9234] ================================================================== [ 267.052175][ T9234] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 267.052218][ T9234] [ 267.052225][ T9234] write to 0xffffffff895f0df8 of 14 bytes by task 29 on cpu 1: [ 267.052245][ T9234] vsnprintf+0x2c0/0x8c0 [ 267.052274][ T9234] vscnprintf+0x41/0x90 [ 267.052301][ T9234] printk_sprint+0x30/0x2b0 [ 267.052328][ T9234] vprintk_store+0x57f/0x910 [ 267.052357][ T9234] vprintk_emit+0x1a4/0x610 [ 267.052384][ T9234] vprintk_default+0x26/0x30 [ 267.052414][ T9234] vprintk+0x1d/0x30 [ 267.052432][ T9234] _printk+0x79/0xa0 [ 267.052450][ T9234] kauditd_hold_skb+0x1b1/0x1c0 [ 267.052477][ T9234] kauditd_send_queue+0x275/0x2d0 [ 267.052504][ T9234] kauditd_thread+0x439/0x660 [ 267.052528][ T9234] kthread+0x223/0x270 [ 267.052570][ T9234] ret_from_fork+0x146/0x330 [ 267.052596][ T9234] ret_from_fork_asm+0x1a/0x30 [ 267.052621][ T9234] [ 267.052628][ T9234] read to 0xffffffff895f0df8 of 8 bytes by task 9234 on cpu 0: [ 267.052648][ T9234] data_push_tail+0x104/0x440 [ 267.052677][ T9234] data_alloc+0x111/0x380 [ 267.052697][ T9234] prb_reserve+0x8e3/0xaf0 [ 267.052718][ T9234] vprintk_store+0x54e/0x910 [ 267.052741][ T9234] vprintk_emit+0x1a4/0x610 [ 267.052768][ T9234] vprintk_default+0x26/0x30 [ 267.052792][ T9234] vprintk+0x1d/0x30 [ 267.052809][ T9234] _printk+0x79/0xa0 [ 267.052823][ T9234] fsg_common_create_lun+0x4e7/0x500 [ 267.052843][ T9234] fsg_alloc_inst+0x244/0x450 [ 267.052865][ T9234] usb_get_function_instance+0x98/0x220 [ 267.052896][ T9234] function_make+0xbd/0x240 [ 267.052931][ T9234] configfs_mkdir+0x303/0x650 [ 267.052954][ T9234] vfs_mkdir+0x291/0x3e0 [ 267.052995][ T9234] filename_mkdirat+0x138/0x300 [ 267.053022][ T9234] __se_sys_mkdirat+0x32/0xf0 [ 267.053048][ T9234] __x64_sys_mkdirat+0x43/0x50 [ 267.053077][ T9234] x64_sys_call+0x368/0x2550 [ 267.053106][ T9234] do_syscall_64+0x112/0x360 [ 267.053128][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.053152][ T9234] [ 267.053156][ T9234] value changed: 0x3fffffffffffeb74 -> 0x3a74696475613501 [ 267.053168][ T9234] [ 267.053173][ T9234] Reported by Kernel Concurrency Sanitizer on: [ 267.053186][ T9234] CPU: 0 UID: 0 PID: 9234 Comm: syz.1.1419 Not tainted syzkaller #0 PREEMPT(lazy) [ 267.053215][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.053227][ T9234] ================================================================== [ 267.134465][ T29] audit: type=1400 audit(1790502808.549:10863): avc: denied { write } for pid=9233 comm="syz.1.1419" name="functions" dev="configfs" ino=5587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.183966][ T29] audit: type=1400 audit(1790502808.619:10864): avc: denied { write } for pid=9219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.317574][ T29] audit: type=1400 audit(1790502808.749:10865): avc: denied { write } for pid=9240 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.420124][ T6375] hsr_slave_0: left promiscuous mode [ 267.423995][ T6375] hsr_slave_1: left promiscuous mode [ 267.424452][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.424470][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.424819][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.424854][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.433464][ T6375] veth1_macvtap: left promiscuous mode [ 267.433490][ T6375] veth0_macvtap: left promiscuous mode [ 267.433574][ T6375] veth1_vlan: left promiscuous mode [ 267.433604][ T6375] veth0_vlan: left promiscuous mode [ 267.662006][ T6375] team0 (unregistering): Port device team_slave_1 removed [ 267.675904][ T6375] team0 (unregistering): Port device team_slave_0 removed [ 267.705435][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 267.804762][ T29] audit: type=1400 audit(1790502809.239:10866): avc: denied { write } for pid=9243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.830115][ T29] audit: type=1400 audit(1790502809.259:10867): avc: denied { write } for pid=9254 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.839331][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 267.930486][ T6375] IPVS: stop unused estimator thread 0... [ 267.944175][ T29] audit: type=1400 audit(1790502809.379:10868): avc: denied { write } for pid=9257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.967429][ T29] audit: type=1400 audit(1790502809.399:10869): avc: denied { write } for pid=9268 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.981805][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 268.086975][ T29] audit: type=1400 audit(1790502809.519:10870): avc: denied { write } for pid=9272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.126910][ T29] audit: type=1400 audit(1790502809.559:10871): avc: denied { write } for pid=9283 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.160994][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13