last executing test programs: 1m17.192265783s ago: executing program 2 (id=143): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000080)=0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4) getsockname(r0, 0x0, 0x0) 1m16.220018464s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4020, &(0x7f0000000200)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000001040)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$pid(0x3, 0x0, 0x6000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000000c0)=""/188) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xdca0115dd4dc89fc}, 0xc, &(0x7f0000002380)={&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x364}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008880) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000a00), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000001e00)='syzkaller\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000001e40)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0x200, 0x8, 0x43a1bd76, 0x8, 0xb, 0xa, 0x2, 0x0, 0xdc, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x5, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$DM_DEV_REMOVE(r1, 0xc138fd04, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) r5 = syz_socket_connect_nvme_tcp() getsockopt(r5, 0x8000, 0x6c, &(0x7f0000000600)=""/55, &(0x7f0000000640)=0x37) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) 1m15.504471859s ago: executing program 2 (id=157): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x1575) perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8306}, 0x20, 0x2, 0xfffffffe, 0x0, 0x4000000000}, r0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x100}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000640)=0x0) bind$nfc_llcp(r3, &(0x7f0000000680)={0x27, r5, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) accept4$nfc_llcp(r3, 0x0, 0x0, 0x80800) close(r4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x7, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x213}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m15.285912621s ago: executing program 2 (id=158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001240), r0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@oldalloc}, {@grpquota}, {@user_xattr}]}, 0xff, 0x4be, &(0x7f0000000940)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4048410) syz_emit_ethernet(0xd6, 0x0, 0x0) unshare(0x40000400) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x10000000) syz_create_resource$futex(&(0x7f00000007c0)=0x2) prlimit64(0x0, 0xc, &(0x7f0000000800)={0x0, 0x2}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000840)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d6cfb05c416386b983d7374617469633a2c00"]) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x8) r2 = syz_open_dev$MSR(&(0x7f0000000900), 0x80000000, 0x0) read$msr(r2, &(0x7f0000001340)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001a340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f000001a380)='./tracing\x00', &(0x7f000001a3c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000001a400)='./tracing/events/sched/filter\x00', 0x2240, 0x13) readv(r3, &(0x7f000001a440), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./tracing\x00', 0xf000083) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='mountinfo\x00') epoll_create1(0x0) 1m14.107126364s ago: executing program 2 (id=166): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='auxv\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/vlan/vlan1\x00') readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/66, 0x42) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x4b72, &(0x7f0000000640)={0x5, 0x1ff, 0x1, 0x22, 0x16, "16eeffffff0800"}) perf_event_open(&(0x7f0000001f80)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x100}, 0x45, 0x11224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000002140)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000200)={0x6, 0x5, 0x1}) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000e80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) perf_event_open(&(0x7f0000001e80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xab}, 0x4000, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 1m13.741312672s ago: executing program 2 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r0, 0x0, 0x0) 1m13.632171873s ago: executing program 32 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r0, 0x0, 0x0) 6.722893829s ago: executing program 1 (id=735): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x3, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0x80000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b40)={0x0, 0x1, 0x71f2, 0x1000007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c00)='4', 0x1) fcntl$addseals(r1, 0x409, 0xb) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) 5.704697745s ago: executing program 1 (id=740): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000380)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@abort}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@discard}, {@debug}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x495, &(0x7f0000000f00)="$eJzs3MtvVNUfAPDvnT54/9of4gMEqaKR+GhpecjCjUYTFpqY6ALjqraFVAo1tCZCiFYXuDQk7o07/wTDSjdG3WjiVveGhBg2oG7G3Ln30mmZF3SmQ53PJ5n2nLm3c873nnum554zdwLoWSPpjyRie0T8FhFDWXblDiPZr1s3Lk39dePSVBLl8pt/JpX9bt64NBURpaj6u21ZplzO85tqlHv5nYjJubmZ83l+bPHs+2MLFy4+P3t28vTM6ZlzE8ePHzm8b/DYxNG2xJnGdXPPR/N7d594+8rrUyevvPtjklZ6e749j6OtRrKjW9NT7S6sy3ZUpZP+6i37f15O1zoT6Ka+iEiba6DS/4eiL7bc3jYUr37a1coBHVUul8sN3pWXysB/WBLdrgHQHcU/+vT6t3is09DjvnD9pewCKI37Vv7ItvRnkxoR+wdWXd9ub2P5IxFxcunvL9NHdGgeAgCg2rfp+Oe5WuO/UjyUJQbTH//L11CGI+L/EbEzIh6IiF0R8WBEZd+HI+KRFa8+3LT81Sskd45/StfWFGAT6fjvxXxta+X4r1TsMtyX53ZUIhpITs3OzRzKj8nBGNh0ajaZGW9Qxnev/Pp5vW3V47/0kZZfjAXzelzrXzVBNz25OLmWmKtd/yRiTzHlvyL+JIplnCQidkfEnnssY/aZ/rrbmsffQP2XbVn5q4ins/ZfWh1/Iam7Pjn+wrGJo2ObY27m0FhxVtzpp18uv1Gv/DXF3wZp+2+tef7fjn842RyxcOHimcp67cJdvXzadeLy75/VvabJ40+7Vyvn/4kd+fk/mLxVeWIw3/Dh5OLi+fGIweS1O5+fWH61Il/sn8Z/8EDt/r8zlo/EoxGxNyL2RcRj6UVhXvfHI+KJiDjQ4CD88PKT7zWJv0b7r89aaRr/dLP2j+r2v/tE35nvrzaPf3NE1Gv/I5XUwfyZVt7/Wq3gWo4dAAAAbBTZZ+CT0ujtdKk0Opp9hn9XbC3NzS8sPntq/oNz09m693AMlIqZrqGq+dDxfLa3yE+syh/O542/6NtSyY9Ozc9Ndzt46HHb6vT/1B993a4d0HFtWEcDNij9H3qX/g+9KdH/oafp/9C7avX/j+vuPfpNRysDrKvW//9fbXSfE7ABtdD/l7Jf9UcFwMbk+h96l/4PPanuvfGlprf8fz1wT98G0DyRtHz3/nLin/z7DDtRH4laiSg13Kf4+or7oaobO9HfiWNYHsqaJ31mU819uvmuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//+eMNw7") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000600)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000640)={r3}, 0x8) close(r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000006c0)={0x6, 0x80, 0x5, 0x40, 0xea, 0x9, 0x0, 0xb5, 0x400, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000680), 0x5}, 0x20, 0x200, 0x4, 0x5, 0x9, 0x5, 0x5, 0x0, 0x4af, 0x0, 0x1}) unshare(0x40000000) sendto$inet6(r2, &(0x7f0000000040)="2ae0e710", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0x6, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000004c0)={0x0, 0x1000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x8, 0x1, 0x6, 0x8, {{0xe, 0x4, 0x2, 0x11, 0x38, 0x67, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x4, [{@empty, 0x2}, {@broadcast, 0x1}]}, @timestamp={0x44, 0xc, 0xc3, 0x0, 0x9, [0x4, 0xfffffff7]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', r6, 0x700, 0x10, 0x979, 0x1000, {{0x2d, 0x4, 0x1, 0x5, 0xb4, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x18, 0xd5, 0x0, 0x8, [0x972, 0x0, 0x7, 0x80, 0xf510]}, @ssrr={0x89, 0x17, 0x21, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x4, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@multicast1, 0xf}, {@multicast1, 0xd5}]}, @lsrr={0x83, 0xf, 0x4f, [@multicast1, @broadcast, @local]}, @ssrr={0x89, 0xf, 0x12, [@empty, @rand_addr=0x64010102, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0x84, 0x1, 0x9, [{@remote, 0x5}, {@broadcast, 0x7}, {@remote, 0xffffff01}, {@loopback, 0x100}, {@private=0xa010100, 0x2}]}]}}}}}) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/33, 0x21}, 0x2}], 0x1, 0x10162, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.51165275s ago: executing program 0 (id=750): setxattr$system_posix_acl(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x2}}, 0x24, 0x0) lgetxattr(&(0x7f0000000c40)='.\x00', &(0x7f0000000c80)=@known='system.posix_acl_default\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) 3.726237362s ago: executing program 5 (id=752): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x3, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0x80000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b40)={0x0, 0x1, 0x71f2, 0x1000007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c00)='4', 0x1) fcntl$addseals(r1, 0x409, 0xb) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) 3.4525325s ago: executing program 0 (id=754): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x3, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0x80000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b40)={0x0, 0x1, 0x71f2, 0x1000007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c00)='4', 0x1) fcntl$addseals(r1, 0x409, 0xb) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x7, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 2.763091582s ago: executing program 4 (id=757): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010400000000fd"], 0x20}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000001c0), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642"], 0x97) 2.654545413s ago: executing program 3 (id=758): socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000040)={0x801400, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000680)=0x1, 0x4) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e23, 0x4, @private0, 0x5}}, 0x0, 0x0, 0x1d, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f00000007c0)="e9", 0x1, 0x20008045, &(0x7f0000000800)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4c20, 0x0, @local, 0x34fc}}, 0xde24}, 0x0) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket(0x10, 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x80, 0x200001d, 0x30, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x36, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000a00)=0x9) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, r1, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="36c31184", @ANYRES16=r3, @ANYBLOB="0cdfeb17210c57abd9e69c407435019938c87ff7b4d4"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004854) 2.560135693s ago: executing program 4 (id=759): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x4, 0x1c0863) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000580), 0x6) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0xc108, 0x1, 0xc, 0x0, 0x2b61, 0x4, 0xfffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000740)='-:_/p', 0x5) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', 0x0}) fsopen(&(0x7f00000008c0)='exofs\x00', 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000240)={0x2, 0x1, 0x10000, 0x5}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffbe}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f8000000160001000300000000000000ac14140d080000000000000000000000fc000000000000000000000000000001fffe000700000000000000a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000000000000002a0000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/176], 0xf8}}, 0x0) 2.559794673s ago: executing program 1 (id=760): setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x10001}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x3b, 0x6}, 0x9050, 0x35, 0x6, 0x8, 0x10000, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000940)={0x0, 0xfffffff5, &(0x7f0000000980)=[{&(0x7f00000009c0)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000a00)={0x0, 0xffffffffffffffff, 0x0, {0xfffffffffffffffc, 0x100000004}}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x10) write$9p(r6, &(0x7f00000006c0)="d52dbd", 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r7, 0x0, 0x30, 0xc, @val=@uprobe_multi={&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) sendfile(r5, r5, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x20, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x3ff, 0x8, 0xe, 0x12, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000e00)={@rand_addr=' \x01\x00', @broadcast, 0x2, 0x1}}) 2.129986878s ago: executing program 3 (id=761): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000a40)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r0}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000ac0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}, r0, 0x9dff7ffc}}, 0x48) 2.100933251s ago: executing program 1 (id=762): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000004c0)=""/239, 0xef, 0x35) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000600)=0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f00000006c0)={{0x77359400}}) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r2 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r2, 0x1) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) write$evdev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.884114073s ago: executing program 3 (id=763): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/state\x00', 0x0, 0x0) bind$phonet(r0, &(0x7f0000000140)={0x23, 0x1, 0x1, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1205, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1227, 0x0, 0x8, 0x8, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x8) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xb7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r2) ptrace(0x11, 0x0) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x262) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracefs\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/instances/foo\x00', 0x200) r3 = io_uring_setup(0x35c5, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) 1.570863376s ago: executing program 0 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 1.539060759s ago: executing program 4 (id=765): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e40)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(0xffffffffffffffff, 0x80796c) madvise(&(0x7f0000312000/0x3000)=nil, 0x3000, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000f00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x7f) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000160) socket$netlink(0x10, 0x3, 0x0) inotify_rm_watch(0xffffffffffffffff, r5) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000, 0xb}, 0x220, 0x2, 0xdffffffe, 0x0, 0x400000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 1.4325452s ago: executing program 0 (id=766): sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)}, 0x45) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100"], 0x4c}}, 0x0) 1.43136509s ago: executing program 1 (id=767): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000600), 0x181201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='fd/3\x00') writev(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000a00)="6c1b", 0x2}, {&(0x7f00000006c0)="d0660da152fb07bf87c7b34c202a5c508e81e071cdd44284bc97e4bfaf3f5733230c229ca84ddf0eb8b5f600000000000000", 0x32}], 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x410, [0x200000000600, 0x0, 0x0, 0x200000000630, 0x2000000009e0], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x488) ppoll(0x0, 0x0, &(0x7f0000000cc0)={0x7fffffffffffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x49) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000005c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000700)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$usbfs(&(0x7f0000000d00), 0x20000007d, 0x0) mmap(&(0x7f0000129000/0x1000)=nil, 0x1000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x16fab000) pread64(r5, &(0x7f0000001840)=""/4081, 0xff1, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000a80)={0x1d, r6, 0x2, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000ac0)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x4000041) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000bc0)=[{0x4, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0xf0}, 0xfe, 0x2}], 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa, 0xfff3}, {0xfff2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000680)=0x2) recvmmsg(r7, &(0x7f0000000780), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x16, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.111472674s ago: executing program 0 (id=768): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x1) setpriority(0x2, 0x0, 0x5) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000040000000000000000"], &(0x7f0000000540)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000017c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001840)={0x4, 0x8, 0xfa00, {r2, 0x6}}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001880), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000028c0)) 868.102009ms ago: executing program 5 (id=769): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010400000000fd"], 0x20}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000001c0), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642"], 0x97) 867.433369ms ago: executing program 3 (id=770): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0041, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="340000001a000100000000000000000002202000000000000000000008000100e0000001080002007f1414bb0800030001000000", 0x34) 768.01484ms ago: executing program 3 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./proc\x00', 0x80, &(0x7f0000000400)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000540)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) socket$kcm(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40074) socket(0x2, 0xa, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x44804}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004090) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000940), &(0x7f0000000980)=0xe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x2c}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="200800eb76000d0b00400000000000d36a0000000000000008000a00"], 0x20}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x83, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="50000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0ffffff"], 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="28000000131409"], 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x8004) mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys/devices/system/node/node0/reclaim\x00', 0x2201, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x6, &(0x7f0000000e40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call, @generic={0x0, 0xe, 0x5, 0x2, 0x10}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000e80)='GPL\x00', 0x5, 0xc3, &(0x7f0000000ec0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) write(r4, &(0x7f0000000fc0)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) 751.631651ms ago: executing program 0 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f00000001c0)="d5", 0xb840c58f) close_range(r0, 0xffffffffffffffff, 0x8000000) 549.871812ms ago: executing program 5 (id=773): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/state\x00', 0x0, 0x0) bind$phonet(r0, &(0x7f0000000140)={0x23, 0x1, 0x1, 0x6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1205, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1227, 0x0, 0x8, 0x8, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x8) r2 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xb7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r3) ptrace(0x11, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x262) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracefs\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/instances/foo\x00', 0x200) r5 = io_uring_setup(0x35c5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, r1, 0x1) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 544.931823ms ago: executing program 4 (id=774): r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x21, 0x4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f00006b9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/71, 0x47, 0x0, &(0x7f0000000280)=""/70, 0x46}, &(0x7f0000000340)=0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 453.076612ms ago: executing program 3 (id=775): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x3, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0x80000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b40)={0x0, 0x1, 0x71f2, 0x1000007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c00)='4', 0x1) fcntl$addseals(r1, 0x409, 0xb) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x7, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 366.443362ms ago: executing program 4 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)={0x2, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000080)={r2}, 0x8) 222.088046ms ago: executing program 1 (id=777): r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f00000002c0)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x0, 0x4}, {0x3}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e4472ffb07227f4d191d27000000000000234dacc6"], 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x8802, 0x68) write(r1, &(0x7f0000000340)='1', 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) semop(0x0, &(0x7f0000000080)=[{0x3, 0x5b7a, 0x800}], 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000007000030000040a0000000094f7000000", @ANYRES32=0x0, @ANYBLOB="0000000014000300030000000400000001000000f9ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) semop(0x0, &(0x7f0000000540)=[{0x1, 0xbbdb, 0x1000}], 0x1) dup(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="185a020000ef00000000253e4873eccf"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa594, 0xffffffffffffffff, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x4, 0x1, 0xd, 0x9}], 0x10, 0xfdd}, 0x94) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x802) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000380)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r3, 0x0, 0x0, 0x6000, &(0x7f00000007c0)={0x2, 0x4622, @remote}, 0x10) recvfrom(r3, 0x0, 0x0, 0x80002161, 0x0, 0xffffffffffffff89) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)) r5 = socket$inet(0x2, 0x6000000000000001, 0x3) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) 221.411266ms ago: executing program 5 (id=778): sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)}, 0x45) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100"], 0x4c}}, 0x0) 203.414888ms ago: executing program 4 (id=779): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x3, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0x80000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b40)={0x0, 0x1, 0x71f2, 0x1000007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000c00)='4', 0x1) fcntl$addseals(r1, 0x409, 0xb) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x8, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x7, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 116.661748ms ago: executing program 5 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}}, 0x20000000) (fail_nth: 7) 0s ago: executing program 5 (id=781): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7fff, 0x55c, 0x7fff, 0x7, 0xf, 0x101, 0x4, 0x6, 0x9, 0x4, 0x8, 0x3, 0x1, 0x2, 0x3ff, 0x7, 0x0, 0x180, 0x6, 0xfffffff7, 0x5, 0x9, 0xfffffffc, 0x59e7, 0x4, 0x7ac, 0x7, 0x9, 0x2, 0x5, 0x9, 0xe, 0x1, 0x29, 0x7, 0x9, 0x80000, 0x4, 0x7fff, 0x0, 0x9, 0x101, 0x3, 0x7, 0x4, 0x5, 0x1431, 0x5, 0x1, 0x36c6, 0x1, 0x0, 0x167cfbf0, 0xe, 0x0, 0x61, 0x1, 0xfffffff7, 0x8, 0x2, 0x80000000, 0x7, 0x93, 0xc, 0x0, 0x8, 0x80, 0x101, 0x2, 0x6, 0xb, 0x0, 0x1000, 0x8, 0xca, 0x7, 0x0, 0x8, 0x5, 0xc, 0x777, 0xa, 0xd8, 0x3, 0x8, 0x65, 0x56, 0x8, 0x7, 0x3, 0x6, 0x4, 0x3, 0x80000000, 0x6, 0x3, 0x3, 0x2, 0x401, 0x4, 0x0, 0x7, 0x3, 0xf598, 0xddb, 0xe, 0x5, 0x2, 0x1, 0x4, 0xffff9a17, 0xc77d9c9, 0x5, 0x2, 0x8000, 0x5, 0xffffffff, 0x3, 0x4, 0x6, 0x3, 0xfffff3a0, 0xc, 0x7, 0xfac, 0x7, 0x7, 0x400, 0x2, 0x4, 0x6, 0x4, 0x200, 0x6, 0x3, 0x9, 0x5, 0xf20, 0x5c, 0x7ffb, 0x10, 0xa, 0x9, 0x7f, 0x1, 0x7, 0x3, 0xfffffff9, 0x80000001, 0x0, 0x6, 0xfffffffc, 0x6, 0x80, 0x9, 0x2, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x800, 0xffffffe5, 0x8000, 0xd, 0x7fff, 0x2000000, 0x2, 0xd0b5, 0xfffffff8, 0x62fc, 0xaf19, 0x7f, 0xb, 0x4, 0x6, 0xfffffff6, 0x3ff, 0x401, 0x3ff, 0x9, 0x0, 0xfffffffa, 0x8, 0x4, 0x7, 0x1, 0xf5b, 0x6, 0x2a, 0x2, 0x2, 0x5, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1, 0x1000, 0xf07, 0x0, 0x7ffd, 0x3e, 0x2, 0x1579, 0x9, 0x4, 0x1, 0x9, 0x6504608a, 0x5, 0x203, 0xfff, 0x6, 0x0, 0x7, 0x10001, 0x8bd, 0x2, 0x8, 0x2, 0x1, 0xfffffff7, 0x101, 0x3, 0x4, 0x7, 0xb7, 0x5, 0x4, 0x100000, 0x3, 0x6, 0x8, 0x1, 0x7fffffff, 0xa4c, 0x1, 0xfffffffe, 0x3, 0x8, 0x80000001, 0x5, 0x1, 0x2, 0x4, 0x10, 0x0, 0x7fff, 0xffffff7f, 0xff, 0x4, 0x51e, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24008018}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="80", 0x1}], 0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xb16, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xa87db000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_CPUID(0x1011) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r12, &(0x7f0000000300)="30313a38303a63323a30303a30313a3089", 0x11) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r1, 0x1) r13 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') ptrace(0x4208, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}]) kernel console output (not intermixed with test programs): i_reserved_data_blocks=1 [ 56.711835][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.727877][ T4170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.740653][ T4170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.812834][ T4170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.825191][ T355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.837697][ T4170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.841377][ T4170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.841826][ T4170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.848854][ T4170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.893205][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.893249][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.893462][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.893579][ T4170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.931801][ T355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.948147][ T4206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.960859][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.062947][ T355] bridge_slave_1: left allmulticast mode [ 57.062976][ T355] bridge_slave_1: left promiscuous mode [ 57.063246][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.091720][ T355] bridge_slave_0: left allmulticast mode [ 57.091748][ T355] bridge_slave_0: left promiscuous mode [ 57.091951][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.116330][ T355] pimreg: left allmulticast mode [ 57.176115][ T355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.189509][ T355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.192225][ T355] bond0 (unregistering): Released all slaves [ 57.213251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.215879][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.251001][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.264564][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.267428][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.267509][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.293567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.293613][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.511340][ T355] hsr_slave_0: left promiscuous mode [ 57.514147][ T355] hsr_slave_1: left promiscuous mode [ 57.515187][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.515230][ T355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.519500][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.519544][ T355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.523600][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.546140][ T355] veth1_macvtap: left promiscuous mode [ 57.546177][ T355] veth0_macvtap: left promiscuous mode [ 57.546236][ T355] veth1_vlan: left promiscuous mode [ 57.546341][ T355] veth0_vlan: left promiscuous mode [ 57.569873][ T4214] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.580511][ T4214] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.641528][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 57.641554][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 57.729022][ T4250] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.182: iget: bad i_size value: 38620345925642 [ 57.729071][ T4250] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.729281][ T4250] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.182: couldn't read orphan inode 15 (err -117) [ 57.729308][ T4250] loop0: lost filesystem error report for type 5 error -117 [ 57.729827][ T4250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.838982][ T4254] random: crng reseeded on system resumption [ 57.929787][ T355] team0 (unregistering): Port device team_slave_1 removed [ 57.936574][ T355] team0 (unregistering): Port device team_slave_0 removed [ 58.092209][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 58.105202][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.173098][ T3292] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.214457][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 58.214473][ T30] audit: type=1400 audit(1794158615.056:756): avc: denied { allowed } for pid=4267 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.226890][ T30] audit: type=1400 audit(1794158615.066:757): avc: denied { sqpoll } for pid=4267 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.433919][ T4256] set_capacity_and_notify: 4 callbacks suppressed [ 58.433953][ T4256] loop3: detected capacity change from 0 to 1024 [ 58.476443][ T4256] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.487379][ T4256] EXT4-fs: Ignoring removed bh option [ 58.494636][ T30] audit: type=1400 audit(1794158615.336:758): avc: denied { write } for pid=4269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.611039][ T30] audit: type=1400 audit(1794158615.436:759): avc: denied { write } for pid=4291 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.644283][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.658965][ T4170] veth0_vlan: entered promiscuous mode [ 58.669968][ T4170] veth1_vlan: entered promiscuous mode [ 58.687095][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.695104][ T4170] veth0_macvtap: entered promiscuous mode [ 58.697022][ T4170] veth1_macvtap: entered promiscuous mode [ 58.702140][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.705901][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.848314][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.851495][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.851838][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.851979][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.865757][ T4304] loop0: detected capacity change from 0 to 256 [ 58.899884][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 58.906852][ T30] audit: type=1400 audit(1794158615.706:760): avc: denied { mounton } for pid=4170 comm="syz-executor" path="/root/syzkaller.evMDtD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.187379][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.187732][ T4256] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.302449][ T4321] loop5: detected capacity change from 0 to 512 [ 59.316317][ T4321] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 59.316338][ T4321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.338960][ T4321] EXT4-fs (loop5): 1 truncate cleaned up [ 59.340216][ T4321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.371497][ T30] audit: type=1400 audit(1794158616.216:761): avc: denied { write } for pid=4308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.380937][ T30] audit: type=1400 audit(1794158616.226:762): avc: denied { write } for pid=4320 comm="syz.5.171" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.381030][ T30] audit: type=1400 audit(1794158616.226:763): avc: denied { write } for pid=4320 comm="syz.5.171" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.381112][ T30] audit: type=1400 audit(1794158616.226:764): avc: denied { rename } for pid=4320 comm="syz.5.171" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.404792][ T4321] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 59.405387][ T4321] EXT4-fs (loop5): Remounting filesystem read-only [ 59.405640][ T4321] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 59.545316][ T30] audit: type=1400 audit(1794158616.386:765): avc: denied { write } for pid=4340 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.569781][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.171'. [ 59.570703][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 59.570747][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 59.620536][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.789224][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.897106][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.017467][ T4383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44032 sclass=netlink_route_socket pid=4383 comm=syz.0.196 [ 60.057438][ T4371] loop1: detected capacity change from 0 to 128 [ 60.069479][ T4371] vfat: Unknown parameter 'æ—shortname' [ 60.247490][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.284059][ T4389] loop5: detected capacity change from 0 to 164 [ 60.454976][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 60.544400][ T4403] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 60.725590][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.205'. [ 60.871346][ T4416] loop1: detected capacity change from 0 to 512 [ 60.894603][ T4416] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.208: iget: bad i_size value: 38620345925642 [ 60.894639][ T4416] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.894788][ T4416] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.208: couldn't read orphan inode 15 (err -117) [ 60.894836][ T4416] loop1: lost filesystem error report for type 5 error -117 [ 60.895364][ T4416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.935614][ T4420] __nla_validate_parse: 1 callbacks suppressed [ 60.935676][ T4420] netlink: 72 bytes leftover after parsing attributes in process `syz.3.210'. [ 60.989337][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.210'. [ 61.063411][ T4412] loop0: detected capacity change from 0 to 512 [ 61.122774][ T4412] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 61.124312][ T4412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.198612][ T4427] loop3: detected capacity change from 0 to 512 [ 61.211583][ T4427] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 61.211603][ T4427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.213090][ T4427] EXT4-fs (loop3): 1 truncate cleaned up [ 61.213929][ T4427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.215461][ T4412] EXT4-fs (loop0): 1 truncate cleaned up [ 61.232523][ T4427] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 61.232972][ T4427] EXT4-fs (loop3): Remounting filesystem read-only [ 61.233213][ T4427] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 61.328545][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 61.334836][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.362608][ T4412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.730882][ T4448] syz.1.215 (4448): drop_caches: 2 [ 61.744744][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 61.809969][ T4453] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 61.810006][ T4453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.810328][ T4453] vhci_hcd vhci_hcd.0: Device attached [ 61.814106][ T4455] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 61.814137][ T4455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.814168][ T4455] vhci_hcd vhci_hcd.0: Device attached [ 62.043411][ T4453] loop4: detected capacity change from 0 to 512 [ 62.067640][ T3392] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 62.096921][ T4453] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 62.111171][ T4453] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.111434][ T4453] EXT4-fs (loop4): too many log groups per flexible block group [ 62.111757][ T4453] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 62.112140][ T4453] EXT4-fs (loop4): mount failed [ 62.163653][ T4456] vhci_hcd: connection reset by peer [ 62.163986][ T72] vhci_hcd vhci_hcd.4: stop threads [ 62.164069][ T72] vhci_hcd vhci_hcd.4: release socket [ 62.164143][ T72] vhci_hcd vhci_hcd.4: disconnect device [ 62.164241][ T4458] vhci_hcd: connection closed [ 62.165062][ T72] vhci_hcd vhci_hcd.4: stop threads [ 62.165116][ T72] vhci_hcd vhci_hcd.4: release socket [ 62.165179][ T72] vhci_hcd vhci_hcd.4: disconnect device [ 62.257708][ T4438] syz.1.215 (4438): drop_caches: 2 [ 62.261588][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.316064][ T4470] FAULT_INJECTION: forcing a failure. [ 62.316064][ T4470] name failslab, interval 1, probability 0, space 0, times 0 [ 62.316186][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.316255][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.316268][ T4470] Call Trace: [ 62.316274][ T4470] [ 62.316281][ T4470] __dump_stack+0x1d/0x30 [ 62.316312][ T4470] dump_stack_lvl+0x95/0xd0 [ 62.316343][ T4470] dump_stack+0x15/0x1b [ 62.316427][ T4470] should_fail_ex+0x259/0x270 [ 62.316464][ T4470] ? __kernfs_new_node+0x70/0x440 [ 62.316488][ T4470] should_failslab+0x8c/0xb0 [ 62.316544][ T4470] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 62.316587][ T4470] ? __kernfs_new_node+0x70/0x440 [ 62.316622][ T4470] __kernfs_new_node+0x70/0x440 [ 62.316668][ T4470] ? __rcu_read_unlock+0x4e/0x70 [ 62.316698][ T4470] ? up_write+0x19/0x60 [ 62.316729][ T4470] ? kernfs_link_sibling+0x2f5/0x320 [ 62.316781][ T4470] ? __rcu_read_unlock+0x4e/0x70 [ 62.316854][ T4470] kernfs_new_node+0x107/0x140 [ 62.316929][ T4470] __kernfs_create_file+0x4b/0x180 [ 62.316970][ T4470] ? __pfx_dev_attr_show+0x10/0x10 [ 62.317007][ T4470] ? __pfx_dev_attr_store+0x10/0x10 [ 62.317042][ T4470] sysfs_add_file_mode_ns+0x132/0x1b0 [ 62.317146][ T4470] internal_create_group+0x43e/0x9e0 [ 62.317178][ T4470] ? kernfs_add_one+0xf4/0x310 [ 62.317263][ T4470] sysfs_create_groups+0x3f/0xf0 [ 62.317321][ T4470] device_add_attrs+0xf2/0x3f0 [ 62.317350][ T4470] ? kobject_put+0x108/0x180 [ 62.317385][ T4470] device_add+0x37a/0x790 [ 62.317486][ T4470] netdev_register_kobject+0x127/0x240 [ 62.317577][ T4470] register_netdevice+0xc68/0x13f0 [ 62.317600][ T4470] macvlan_common_newlink+0xa8a/0xc70 [ 62.317631][ T4470] macvlan_newlink+0x25/0x30 [ 62.317671][ T4470] ? __pfx_macvlan_newlink+0x10/0x10 [ 62.317751][ T4470] rtnl_newlink_create+0x1e4/0x4a0 [ 62.317796][ T4470] ? security_capable+0x7b/0x90 [ 62.317866][ T4470] ? netlink_ns_capable+0x86/0xa0 [ 62.317908][ T4470] rtnl_newlink+0x1255/0x1510 [ 62.317950][ T4470] ? __css_rstat_updated+0xbb/0x280 [ 62.317995][ T4470] ? put_dec_trunc8+0x119/0x140 [ 62.318109][ T4470] ? __memcg_slab_free_hook+0x154/0x340 [ 62.318200][ T4470] ? __rcu_read_unlock+0x4e/0x70 [ 62.318225][ T4470] ? avc_has_perm_noaudit+0xac/0x160 [ 62.318256][ T4470] ? cred_has_capability+0x224/0x2a0 [ 62.318343][ T4470] ? selinux_capable+0x31/0x40 [ 62.318381][ T4470] ? security_capable+0x7b/0x90 [ 62.318494][ T4470] ? ns_capable+0x80/0xb0 [ 62.318541][ T4470] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.318580][ T4470] rtnetlink_rcv_msg+0x64b/0x720 [ 62.318611][ T4470] ? __copy_skb_header+0x22f/0x2b0 [ 62.318648][ T4470] netlink_rcv_skb+0x11e/0x220 [ 62.318673][ T4470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.318707][ T4470] rtnetlink_rcv+0x1c/0x30 [ 62.318745][ T4470] netlink_unicast+0x665/0x740 [ 62.318793][ T4470] netlink_sendmsg+0x5ef/0x740 [ 62.318828][ T4470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.318854][ T4470] ____sys_sendmsg+0x54a/0x590 [ 62.319041][ T4470] ___sys_sendmsg+0x195/0x1e0 [ 62.319155][ T4470] __x64_sys_sendmsg+0xd4/0x160 [ 62.319269][ T4470] x64_sys_call+0x22ab/0x2550 [ 62.319306][ T4470] do_syscall_64+0x112/0x360 [ 62.319335][ T4470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.319437][ T4470] RIP: 0033:0x7ff83922fb19 [ 62.319454][ T4470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.319474][ T4470] RSP: 002b:00007ff837c7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.319497][ T4470] RAX: ffffffffffffffda RBX: 00007ff8394b5fa0 RCX: 00007ff83922fb19 [ 62.319514][ T4470] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 62.319529][ T4470] RBP: 00007ff8392c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 62.319626][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.319643][ T4470] R13: 00007ff8394b6038 R14: 00007ff8394b5fa0 R15: 00007ffdd50ae278 [ 62.319669][ T4470] [ 62.368757][ T4469] futex_wake_op: syz.5.221 tries to shift op by 144; fix this program [ 63.082030][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 63.082054][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 63.270180][ T4514] loop0: detected capacity change from 0 to 1024 [ 63.302057][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 63.302076][ T30] audit: type=1400 audit(1794158620.146:794): avc: denied { getopt } for pid=4505 comm="syz.0.234" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.302315][ T4514] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 63.318674][ T30] audit: type=1400 audit(1794158620.166:795): avc: denied { write } for pid=4505 comm="syz.0.234" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.321075][ T30] audit: type=1400 audit(1794158620.166:796): avc: denied { read write } for pid=4505 comm="syz.0.234" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.325899][ T30] audit: type=1400 audit(1794158620.166:797): avc: denied { open } for pid=4505 comm="syz.0.234" path="/36/file1/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.328214][ T4514] zero sized request [ 63.328256][ T30] audit: type=1400 audit(1794158620.176:798): avc: denied { ioctl } for pid=4505 comm="syz.0.234" path="/36/file1/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x400c4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.568361][ T30] audit: type=1400 audit(1794158620.396:799): avc: denied { create } for pid=4522 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.568445][ T30] audit: type=1400 audit(1794158620.406:800): avc: denied { write } for pid=4522 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.633743][ T4526] loop4: detected capacity change from 0 to 512 [ 63.654500][ T4526] ext4: Unknown parameter 'dont_appraise' [ 63.797233][ T30] audit: type=1400 audit(1794158620.636:801): avc: denied { write } for pid=3293 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.797272][ T30] audit: type=1400 audit(1794158620.636:802): avc: denied { rmdir } for pid=3293 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.860061][ T3293] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 63.861585][ T3293] EXT4-fs (loop0): Remounting filesystem read-only [ 63.884213][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 63.884284][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 63.926902][ T4536] loop3: detected capacity change from 0 to 128 [ 63.936189][ T30] audit: type=1400 audit(1794158620.776:803): avc: denied { write } for pid=3293 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.194238][ T4553] futex_wake_op: syz.0.245 tries to shift op by 144; fix this program [ 64.331913][ T4559] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 64.781129][ T4536] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.809116][ T4548] loop1: detected capacity change from 0 to 1024 [ 64.809475][ T4548] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.866711][ T4548] EXT4-fs: Ignoring removed bh option [ 65.043231][ T4570] random: crng reseeded on system resumption [ 65.053012][ T4548] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.306538][ T4567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.306560][ T4567] block device autoloading is deprecated and will be removed. [ 65.479368][ T4584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.596705][ T4548] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.247: lblock 3 mapped to illegal pblock 3 (length 3) [ 65.597059][ T4548] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 65.597091][ T4548] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.597091][ T4548] [ 65.663978][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.664245][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.664443][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.664608][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.664833][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.665000][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.665172][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.665343][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 65.665548][ T4545] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 4: comm syz.1.247: lblock 4 mapped to illegal pblock 4 (length 2) [ 66.044297][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 66.044322][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 66.088682][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 66.088840][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.088840][ T33] [ 66.273747][ T4607] loop1: detected capacity change from 0 to 1024 [ 66.275688][ T4607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.084877][ T4618] futex_wake_op: syz.5.264 tries to shift op by 144; fix this program [ 67.172180][ T3392] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 67.486809][ T4634] loop3: detected capacity change from 0 to 1024 [ 67.533434][ T4634] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.559428][ T4642] loop0: detected capacity change from 0 to 512 [ 67.561393][ T4642] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.583263][ T4642] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 67.583817][ T4642] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.583900][ T4642] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.584297][ T4642] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.271: Invalid block bitmap block 0 in block_group 0 [ 67.584333][ T4642] loop0: lost filesystem error report for type 5 error -117 [ 67.584565][ T4642] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.271: Invalid block bitmap block 0 in block_group 0 [ 67.584628][ T4642] loop0: lost filesystem error report for type 5 error -117 [ 67.584770][ T4642] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.271: Invalid block bitmap block 0 in block_group 0 [ 67.584803][ T4642] loop0: lost filesystem error report for type 5 error -117 [ 67.585044][ T4642] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.271: Failed to acquire dquot type 1 [ 67.585105][ T4642] loop0: lost filesystem error report for type 5 error -28 [ 67.585432][ T4642] EXT4-fs (loop0): 1 orphan inode deleted [ 67.589303][ T13] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 67.589386][ T13] loop0: lost filesystem error report for type 5 error -117 [ 67.596747][ C1] EXT4-fs (loop0): error count since last fsck: 5 [ 67.596802][ C1] EXT4-fs (loop0): last error at time 1794158624: ext4_release_dquot:7156 [ 67.643987][ T4629] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: comm syz.3.268: lblock 0 mapped to illegal pblock 0 (length 6) [ 67.647530][ T4629] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 67.647667][ T4629] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.647667][ T4629] [ 67.684156][ T4644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.684207][ T4644] block device autoloading is deprecated and will be removed. [ 67.788548][ T33] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 67.789023][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 67.789087][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.789087][ T33] [ 67.910754][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 67.910915][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 68.063966][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.064106][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.339075][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.343198][ T4678] loop3: detected capacity change from 0 to 512 [ 68.343644][ T4678] ext4: Unknown parameter 'fsname' [ 68.366883][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 68.366929][ T30] audit: type=1326 audit(1794158625.206:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 68.383944][ T30] audit: type=1326 audit(1794158625.226:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 68.384478][ T30] audit: type=1326 audit(1794158625.226:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 68.385827][ T4680] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (270347) [ 68.393172][ T30] audit: type=1326 audit(1794158625.236:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 68.439362][ T30] audit: type=1326 audit(1794158625.276:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 68.439527][ T30] audit: type=1326 audit(1794158625.276:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83922f882 code=0x7ffc0000 [ 68.441967][ T30] audit: type=1326 audit(1794158625.286:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff83922f917 code=0x7ffc0000 [ 68.442312][ T30] audit: type=1326 audit(1794158625.286:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff8391ec811 code=0x7ffc0000 [ 68.442420][ T30] audit: type=1326 audit(1794158625.286:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff839230909 code=0x7ffc0000 [ 68.442556][ T30] audit: type=1326 audit(1794158625.286:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.3.280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff8391ec87b code=0x7ffc0000 [ 68.458566][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.654175][ T4683] loop3: detected capacity change from 0 to 512 [ 68.656325][ T4683] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 68.746408][ T4680] ip_tables: iptables: counters copy to user failed while replacing table [ 68.879809][ T4686] loop0: detected capacity change from 0 to 128 [ 69.411728][ T4705] futex_wake_op: syz.1.285 tries to shift op by 144; fix this program [ 69.447525][ T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.447578][ T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.447624][ T53] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.447714][ T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.569701][ T4713] loop3: detected capacity change from 0 to 512 [ 69.579308][ T4713] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.581799][ T4713] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 69.587214][ T4713] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.587309][ T4713] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.587802][ T4713] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.291: Invalid block bitmap block 0 in block_group 0 [ 69.587837][ T4713] loop3: lost filesystem error report for type 5 error -117 [ 69.588113][ T4713] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.291: Invalid block bitmap block 0 in block_group 0 [ 69.588148][ T4713] loop3: lost filesystem error report for type 5 error -117 [ 69.588484][ T4713] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.291: Invalid block bitmap block 0 in block_group 0 [ 69.588513][ T4713] loop3: lost filesystem error report for type 5 error -117 [ 69.588714][ T4713] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.291: Failed to acquire dquot type 1 [ 69.588743][ T4713] loop3: lost filesystem error report for type 5 error -28 [ 69.589114][ T4713] EXT4-fs (loop3): 1 orphan inode deleted [ 69.589355][ T53] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 69.589385][ T53] loop3: lost filesystem error report for type 5 error -117 [ 69.997098][ T4721] loop5: detected capacity change from 0 to 512 [ 70.044652][ T4721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.045512][ T4721] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.056207][ T4721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002] [ 70.057038][ T4721] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.063732][ T4721] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.293: Allocating blocks 42-43 which overlap fs metadata [ 70.065520][ T4721] EXT4-fs (loop5): Remounting filesystem read-only [ 70.066726][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 70.066779][ C0] EXT4-fs (loop5): initial error at time 1794158626: ext4_mb_mark_diskspace_used:4221 [ 70.066853][ C0] EXT4-fs (loop5): last error at time 1794158626: ext4_mb_mark_diskspace_used:4221 [ 70.070551][ T4721] EXT4-fs (loop5): 1 truncate cleaned up [ 70.073802][ T4721] EXT4-fs (loop5): pa ffff888106e999a0: logic 1, phys. 41, len 23 [ 70.372524][ T4170] EXT4-fs unmount: 15 callbacks suppressed [ 70.372542][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.372752][ T4721] syz.5.293 (4721) used greatest stack depth: 9312 bytes left [ 70.415225][ T4736] loop1: detected capacity change from 0 to 128 [ 70.430691][ T4736] FAT-fs (loop1): Directory bread(block 1048) failed [ 70.430716][ T4736] FAT-fs (loop1): Directory bread(block 1049) failed [ 70.430829][ T4736] FAT-fs (loop1): Directory bread(block 1050) failed [ 70.430847][ T4736] FAT-fs (loop1): Directory bread(block 1051) failed [ 70.430864][ T4736] FAT-fs (loop1): Directory bread(block 1052) failed [ 70.431025][ T4736] FAT-fs (loop1): Directory bread(block 1053) failed [ 70.431248][ T4736] FAT-fs (loop1): Directory bread(block 1054) failed [ 70.431267][ T4736] FAT-fs (loop1): Directory bread(block 1055) failed [ 70.962943][ T4736] FAT-fs (loop1): FAT read failed (blocknr 128) [ 70.979634][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.012999][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 71.030499][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 71.258109][ T4765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.305'. [ 71.661072][ T4803] loop1: detected capacity change from 0 to 128 [ 71.674809][ T4803] FAT-fs (loop1): Directory bread(block 1048) failed [ 71.674851][ T4803] FAT-fs (loop1): Directory bread(block 1049) failed [ 71.674869][ T4803] FAT-fs (loop1): Directory bread(block 1050) failed [ 71.674890][ T4803] FAT-fs (loop1): Directory bread(block 1051) failed [ 71.674914][ T4803] FAT-fs (loop1): Directory bread(block 1052) failed [ 71.674938][ T4803] FAT-fs (loop1): Directory bread(block 1053) failed [ 71.674958][ T4803] FAT-fs (loop1): Directory bread(block 1054) failed [ 71.675054][ T4803] FAT-fs (loop1): Directory bread(block 1055) failed [ 71.760961][ T4803] FAT-fs (loop1): FAT read failed (blocknr 128) [ 71.781355][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 71.821565][ T4794] loop0: detected capacity change from 0 to 512 [ 71.925010][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.317'. [ 72.130835][ T4794] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.311: bad orphan inode 15 [ 72.137435][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 72.138781][ C0] EXT4-fs (loop0): initial error at time 1794158628: ext4_orphan_get:1430 [ 72.142054][ C0] EXT4-fs (loop0): last error at time 1794158628: ext4_orphan_get:1430 [ 72.150828][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'. [ 72.191767][ T4794] ext4_test_bit(bit=14, block=5) = 0 [ 72.276804][ T4794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.318119][ T4837] loop3: detected capacity change from 0 to 128 [ 72.333964][ T4837] FAT-fs (loop3): Directory bread(block 1048) failed [ 72.334039][ T4837] FAT-fs (loop3): Directory bread(block 1049) failed [ 72.334094][ T4837] FAT-fs (loop3): Directory bread(block 1050) failed [ 72.334156][ T4837] FAT-fs (loop3): Directory bread(block 1051) failed [ 72.334219][ T4837] FAT-fs (loop3): Directory bread(block 1052) failed [ 72.334320][ T4837] FAT-fs (loop3): Directory bread(block 1053) failed [ 72.334383][ T4837] FAT-fs (loop3): Directory bread(block 1054) failed [ 72.334444][ T4837] FAT-fs (loop3): Directory bread(block 1055) failed [ 72.417034][ T4794] lo: entered allmulticast mode [ 72.491942][ T4867] EXT4-fs error (device loop0): __ext4_new_inode:1083: comm syz.0.311: reserved inode found cleared - inode=1 [ 72.493206][ T4837] FAT-fs (loop3): FAT read failed (blocknr 128) [ 72.528324][ T4856] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.531134][ T4868] loop1: detected capacity change from 0 to 128 [ 72.551002][ T4868] FAT-fs (loop1): Directory bread(block 1048) failed [ 72.551027][ T4868] FAT-fs (loop1): Directory bread(block 1049) failed [ 72.551048][ T4868] FAT-fs (loop1): Directory bread(block 1050) failed [ 72.551072][ T4868] FAT-fs (loop1): Directory bread(block 1051) failed [ 72.551097][ T4868] FAT-fs (loop1): Directory bread(block 1052) failed [ 72.551135][ T4868] FAT-fs (loop1): Directory bread(block 1053) failed [ 72.551159][ T4868] FAT-fs (loop1): Directory bread(block 1054) failed [ 72.551181][ T4868] FAT-fs (loop1): Directory bread(block 1055) failed [ 72.624169][ T4868] FAT-fs (loop1): FAT read failed (blocknr 128) [ 73.840729][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.078146][ T4918] loop1: detected capacity change from 0 to 512 [ 74.085046][ T4918] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.097143][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 74.097197][ T30] audit: type=1400 audit(1794158630.936:1126): avc: denied { getopt } for pid=4913 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.127085][ T4918] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 74.131928][ T4918] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.132046][ T4918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.132575][ T4918] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.340: Invalid block bitmap block 0 in block_group 0 [ 74.132611][ T4918] fserror_report: 2 callbacks suppressed [ 74.132624][ T4918] loop1: lost filesystem error report for type 5 error -117 [ 74.132913][ T4918] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.340: Invalid block bitmap block 0 in block_group 0 [ 74.132938][ T4918] loop1: lost filesystem error report for type 5 error -117 [ 74.133087][ T4918] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.340: Invalid block bitmap block 0 in block_group 0 [ 74.133120][ T4918] loop1: lost filesystem error report for type 5 error -117 [ 74.133313][ T4918] Quota error (device loop1): write_blk: dquota write failed [ 74.133333][ T4918] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 74.133356][ T4918] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.340: Failed to acquire dquot type 1 [ 74.133465][ T4918] loop1: lost filesystem error report for type 5 error -28 [ 74.133796][ T4918] EXT4-fs (loop1): 1 orphan inode deleted [ 74.136833][ T355] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 74.136931][ T355] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 74.137004][ T355] loop1: lost filesystem error report for type 5 error -117 [ 74.138855][ T4918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.468376][ T4925] loop3: detected capacity change from 0 to 4096 [ 74.492490][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.521949][ T30] audit: type=1400 audit(1794158631.366:1127): avc: denied { write } for pid=4924 comm="syz.3.342" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.521983][ T30] audit: type=1400 audit(1794158631.366:1128): avc: denied { read write } for pid=4924 comm="syz.3.342" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.522035][ T30] audit: type=1400 audit(1794158631.366:1129): avc: denied { open } for pid=4924 comm="syz.3.342" path="/78/file3/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.595181][ T4925] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.342: corrupted inode contents [ 74.608740][ T30] audit: type=1400 audit(1794158631.446:1130): avc: denied { ioctl } for pid=4924 comm="syz.3.342" path="/78/file3/file1" dev="loop3" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.640468][ T4925] EXT4-fs error (device loop3): ext4_dirty_inode:7679: inode #15: comm syz.3.342: mark_inode_dirty error [ 74.642124][ T4925] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.342: corrupted inode contents [ 74.655812][ T4925] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.342: mark_inode_dirty error [ 74.657670][ T4925] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.342: corrupted inode contents [ 74.665687][ T4925] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.342: mark_inode_dirty error [ 74.672992][ T4925] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.342: corrupted inode contents [ 74.677734][ T4925] EXT4-fs error (device loop3): ext4_truncate:5538: inode #15: comm syz.3.342: mark_inode_dirty error [ 74.678450][ T4925] EXT4-fs error (device loop3) in ext4_setattr:7187: Corrupt filesystem [ 74.691407][ T4933] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.342: corrupted inode contents [ 74.692226][ T4933] EXT4-fs warning (device loop3): swap_inode_boot_loader:481: couldn't mark inode #15 dirty (err -117) [ 74.937408][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.119321][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.251603][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 75.321200][ T4927] loop0: detected capacity change from 0 to 512 [ 75.508003][ T4957] loop3: detected capacity change from 0 to 8192 [ 75.576345][ T30] audit: type=1326 audit(1794158632.416:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.0.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc655fb19 code=0x7ffc0000 [ 75.576406][ T30] audit: type=1326 audit(1794158632.416:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.0.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc655fb19 code=0x7ffc0000 [ 75.583282][ T4940] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 75.960194][ T4968] loop0: detected capacity change from 0 to 512 [ 76.000587][ T4971] loop3: detected capacity change from 0 to 512 [ 76.002475][ T4968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.002545][ T4968] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.015405][ T4971] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.023889][ T4971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.049821][ T4971] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.049909][ T4971] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.050243][ T4971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.359: Invalid block bitmap block 0 in block_group 0 [ 76.050277][ T4971] loop3: lost filesystem error report for type 5 error -117 [ 76.050503][ T4971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.359: Invalid block bitmap block 0 in block_group 0 [ 76.050538][ T4971] loop3: lost filesystem error report for type 5 error -117 [ 76.050756][ T4971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.359: Invalid block bitmap block 0 in block_group 0 [ 76.050787][ T4971] loop3: lost filesystem error report for type 5 error -117 [ 76.051044][ T4971] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.359: Failed to acquire dquot type 1 [ 76.051074][ T4971] loop3: lost filesystem error report for type 5 error -28 [ 76.051470][ T4971] EXT4-fs (loop3): 1 orphan inode deleted [ 76.051606][ T355] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 76.051636][ T355] loop3: lost filesystem error report for type 5 error -117 [ 76.054258][ T4971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.108918][ T4962] loop5: detected capacity change from 0 to 512 [ 76.165152][ T4962] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 76.165205][ T4962] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 76.513812][ T4980] loop1: detected capacity change from 0 to 4096 [ 76.529410][ T4980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.588812][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.607034][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.362'. [ 76.719371][ T4990] futex_wake_op: syz.1.363 tries to shift op by 144; fix this program [ 76.854729][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.115578][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.285420][ T5009] loop0: detected capacity change from 0 to 512 [ 77.300392][ T5009] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.300412][ T5009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.303131][ T5009] EXT4-fs (loop0): 1 truncate cleaned up [ 77.303824][ T5009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.313605][ T5009] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 77.314227][ T5009] EXT4-fs (loop0): Remounting filesystem read-only [ 77.314494][ T5009] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 77.328232][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 77.477013][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 77.544495][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.031041][ T5049] loop1: detected capacity change from 0 to 512 [ 78.031463][ T5049] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 78.042631][ T5049] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10870 sclass=netlink_xfrm_socket pid=5049 comm=syz.1.387 [ 78.129915][ T5051] futex_wake_op: syz.4.386 tries to shift op by 144; fix this program [ 78.180952][ T5059] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.180982][ T5059] SELinux: failed to load policy [ 78.215716][ T5061] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 78.215736][ T5061] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.219420][ T5061] EXT4-fs (loop5): 1 truncate cleaned up [ 78.221242][ T5061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.228609][ T5061] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 78.229187][ T5061] EXT4-fs (loop5): Remounting filesystem read-only [ 78.229352][ T5061] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 78.250583][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.390'. [ 78.424695][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.470916][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 79.538790][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 79.538809][ T30] audit: type=1326 audit(1794158636.386:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 79.538894][ T30] audit: type=1326 audit(1794158636.386:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f809588f882 code=0x7ffc0000 [ 79.538927][ T30] audit: type=1326 audit(1794158636.386:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f809588f917 code=0x7ffc0000 [ 79.539013][ T30] audit: type=1326 audit(1794158636.386:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f809584c811 code=0x7ffc0000 [ 79.539046][ T30] audit: type=1326 audit(1794158636.386:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8095890909 code=0x7ffc0000 [ 79.539111][ T30] audit: type=1326 audit(1794158636.386:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f809584c87b code=0x7ffc0000 [ 79.539206][ T30] audit: type=1326 audit(1794158636.386:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 79.539240][ T30] audit: type=1326 audit(1794158636.386:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 79.539272][ T30] audit: type=1326 audit(1794158636.386:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f809588f882 code=0x7ffc0000 [ 79.539373][ T30] audit: type=1326 audit(1794158636.386:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.1.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f809588f917 code=0x7ffc0000 [ 79.728407][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.732791][ T5084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.748194][ T5085] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 80.168480][ T5108] set_capacity_and_notify: 2 callbacks suppressed [ 80.168501][ T5108] loop5: detected capacity change from 0 to 1024 [ 80.173787][ T5108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.179835][ T5108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.214040][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 80.475344][ T5131] ./dev/sda1: Can't lookup blockdev [ 81.139138][ T5139] futex_wake_op: syz.4.413 tries to shift op by 144; fix this program [ 81.171313][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 81.196625][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.542975][ T5166] loop5: detected capacity change from 0 to 512 [ 81.553197][ T5166] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 81.553216][ T5166] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.567472][ T5170] ./dev/sda1: Can't lookup blockdev [ 81.589700][ T5166] EXT4-fs (loop5): 1 truncate cleaned up [ 81.590256][ T5166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.593751][ T5166] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 81.594001][ T5166] EXT4-fs (loop5): Remounting filesystem read-only [ 81.594058][ T5166] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 81.648619][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.421'. [ 81.748283][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.802743][ T5177] loop3: detected capacity change from 0 to 128 [ 81.814308][ T5177] FAT-fs (loop3): Directory bread(block 1048) failed [ 81.814339][ T5177] FAT-fs (loop3): Directory bread(block 1049) failed [ 81.814400][ T5177] FAT-fs (loop3): Directory bread(block 1050) failed [ 81.814423][ T5177] FAT-fs (loop3): Directory bread(block 1051) failed [ 81.814448][ T5177] FAT-fs (loop3): Directory bread(block 1052) failed [ 81.814542][ T5177] FAT-fs (loop3): Directory bread(block 1053) failed [ 81.814566][ T5177] FAT-fs (loop3): Directory bread(block 1054) failed [ 81.814590][ T5177] FAT-fs (loop3): Directory bread(block 1055) failed [ 81.957387][ T5175] FAT-fs (loop3): FAT read failed (blocknr 128) [ 82.095113][ T5179] loop0: detected capacity change from 0 to 128 [ 82.328812][ T5179] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.338986][ T5179] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.387086][ T5200] futex_wake_op: syz.5.431 tries to shift op by 144; fix this program [ 83.346032][ T5228] loop1: detected capacity change from 0 to 512 [ 83.349438][ T5228] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.351947][ T3293] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.422126][ T5228] EXT4-fs (loop1): 1 orphan inode deleted [ 83.423513][ T5228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.424010][ T5228] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.446326][ T53] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 83.570429][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.693580][ T5232] loop5: detected capacity change from 0 to 512 [ 83.715937][ T5232] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.730740][ T5232] EXT4-fs (loop5): 1 orphan inode deleted [ 83.731162][ T5232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.731349][ T5232] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.733089][ T5232] FAULT_INJECTION: forcing a failure. [ 83.733089][ T5232] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.733160][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.5.441 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.733193][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 83.733289][ T5232] Call Trace: [ 83.733298][ T5232] [ 83.733355][ T5232] __dump_stack+0x1d/0x30 [ 83.733389][ T5232] dump_stack_lvl+0x95/0xd0 [ 83.733418][ T5232] dump_stack+0x15/0x1b [ 83.733442][ T5232] should_fail_ex+0x259/0x270 [ 83.733557][ T5232] should_fail+0xb/0x20 [ 83.733591][ T5232] should_fail_usercopy+0x1a/0x20 [ 83.733634][ T5232] strncpy_from_user+0x27/0x250 [ 83.733784][ T5232] do_getname+0x59/0x1c0 [ 83.733810][ T5232] __se_sys_unlinkat+0x4c/0x140 [ 83.733840][ T5232] __x64_sys_unlinkat+0x43/0x50 [ 83.733868][ T5232] x64_sys_call+0x21a3/0x2550 [ 83.733904][ T5232] do_syscall_64+0x112/0x360 [ 83.733993][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.734016][ T5232] RIP: 0033:0x7f188bbdfb19 [ 83.734037][ T5232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.734061][ T5232] RSP: 002b:00007f188a637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 83.734088][ T5232] RAX: ffffffffffffffda RBX: 00007f188be65fa0 RCX: 00007f188bbdfb19 [ 83.734108][ T5232] RDX: 0000000000000000 RSI: 0000200000002680 RDI: ffffffffffffff9c [ 83.734152][ T5232] RBP: 00007f188a637090 R08: 0000000000000000 R09: 0000000000000000 [ 83.734171][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.734257][ T5232] R13: 00007f188be66038 R14: 00007f188be65fa0 R15: 00007ffc4b816668 [ 83.734280][ T5232] [ 83.899786][ T4170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.027790][ T5246] loop1: detected capacity change from 0 to 512 [ 84.291189][ T5258] loop1: detected capacity change from 0 to 1024 [ 84.300874][ T5258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.302969][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.550657][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 84.550676][ T30] audit: type=1400 audit(1794158641.396:1598): avc: denied { write } for pid=5264 comm="syz.0.450" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.694300][ T30] audit: type=1400 audit(1794158641.536:1599): avc: denied { write } for pid=5264 comm="syz.0.450" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.727616][ T5236] loop3: detected capacity change from 0 to 512 [ 84.921146][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.347642][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.356308][ T5236] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.434432][ T5286] futex_wake_op: syz.5.452 tries to shift op by 144; fix this program [ 85.476358][ T30] audit: type=1326 audit(1794158642.316:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.526696][ T30] audit: type=1326 audit(1794158642.316:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.526733][ T30] audit: type=1326 audit(1794158642.326:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.526829][ T30] audit: type=1326 audit(1794158642.326:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.526856][ T30] audit: type=1326 audit(1794158642.326:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.530090][ T30] audit: type=1326 audit(1794158642.376:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.549313][ T30] audit: type=1326 audit(1794158642.376:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.550560][ T30] audit: type=1326 audit(1794158642.396:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09ea3fb19 code=0x7ffc0000 [ 85.966961][ T5292] loop0: detected capacity change from 0 to 512 [ 85.996615][ T5292] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 85.997326][ T5292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.050719][ T5292] EXT4-fs (loop0): 1 truncate cleaned up [ 86.052515][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.094457][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 86.125947][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.286263][ T5300] loop3: detected capacity change from 0 to 128 [ 86.294133][ T5300] FAT-fs (loop3): Directory bread(block 1048) failed [ 86.294182][ T5300] FAT-fs (loop3): Directory bread(block 1049) failed [ 86.294205][ T5300] FAT-fs (loop3): Directory bread(block 1050) failed [ 86.294228][ T5300] FAT-fs (loop3): Directory bread(block 1051) failed [ 86.294324][ T5300] FAT-fs (loop3): Directory bread(block 1052) failed [ 86.294429][ T5300] FAT-fs (loop3): Directory bread(block 1053) failed [ 86.294452][ T5300] FAT-fs (loop3): Directory bread(block 1054) failed [ 86.294476][ T5300] FAT-fs (loop3): Directory bread(block 1055) failed [ 86.367833][ T5300] FAT-fs (loop3): FAT read failed (blocknr 128) [ 86.369804][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.424220][ T5306] loop0: detected capacity change from 0 to 1024 [ 86.426450][ T5306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.461010][ T5306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.915262][ T5320] loop1: detected capacity change from 0 to 128 [ 86.944703][ T5320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.945046][ T5320] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.034761][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.154889][ T5327] loop1: detected capacity change from 0 to 128 [ 87.190179][ T5327] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.190403][ T5327] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.292569][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.145449][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.192457][ T5354] loop1: detected capacity change from 0 to 512 [ 88.193523][ T5354] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 88.193540][ T5354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.198078][ T5354] EXT4-fs (loop1): 1 truncate cleaned up [ 88.199304][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.214240][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 88.290119][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.342856][ T5361] loop5: detected capacity change from 0 to 512 [ 88.958951][ T5379] loop1: detected capacity change from 0 to 512 [ 89.007376][ T5379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.007454][ T5379] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.831882][ T30] kauditd_printk_skb: 516 callbacks suppressed [ 89.831901][ T30] audit: type=1326 audit(1794158646.226:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.831947][ T30] audit: type=1326 audit(1794158646.226:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.831984][ T30] audit: type=1326 audit(1794158646.226:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832090][ T30] audit: type=1326 audit(1794158646.226:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832123][ T30] audit: type=1326 audit(1794158646.236:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832160][ T30] audit: type=1326 audit(1794158646.236:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832243][ T30] audit: type=1326 audit(1794158646.236:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832280][ T30] audit: type=1326 audit(1794158646.236:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832330][ T30] audit: type=1326 audit(1794158646.236:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.832379][ T30] audit: type=1326 audit(1794158646.236:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.3.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 89.887449][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.482'. [ 90.236477][ T5401] loop3: detected capacity change from 0 to 512 [ 90.382241][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.397220][ T5401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.397298][ T5401] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.921326][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 91.215096][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.446344][ T5462] ./dev/sda1: Can't lookup blockdev [ 93.755202][ T5492] loop3: detected capacity change from 0 to 512 [ 93.782824][ T5492] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.511: iget: bad i_size value: 38620345925642 [ 93.782897][ T5492] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.783048][ T5492] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.511: couldn't read orphan inode 15 (err -117) [ 93.783133][ T5492] loop3: lost filesystem error report for type 5 error -117 [ 93.783698][ T5492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.037889][ T5498] loop7: detected capacity change from 0 to 16384 [ 94.190265][ T5499] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 94.261911][ T5500] loop0: detected capacity change from 0 to 128 [ 94.468767][ T5505] loop1: detected capacity change from 0 to 1024 [ 94.493299][ T5505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.497536][ T5505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.537607][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.576475][ T5508] loop3: detected capacity change from 0 to 512 [ 94.583954][ T5508] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.584527][ T5508] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.586449][ T5508] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.586528][ T5508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.589511][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.515: Invalid block bitmap block 0 in block_group 0 [ 94.589596][ T5508] loop3: lost filesystem error report for type 5 error -117 [ 94.590385][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.515: Invalid block bitmap block 0 in block_group 0 [ 94.590525][ T5508] loop3: lost filesystem error report for type 5 error -117 [ 94.590849][ T5508] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.515: Invalid block bitmap block 0 in block_group 0 [ 94.590970][ T5508] loop3: lost filesystem error report for type 5 error -117 [ 94.591424][ T5508] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.515: Failed to acquire dquot type 1 [ 94.591491][ T5508] loop3: lost filesystem error report for type 5 error -28 [ 94.592234][ T5508] EXT4-fs (loop3): 1 orphan inode deleted [ 94.593494][ T72] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 94.593573][ T72] loop3: lost filesystem error report for type 5 error -117 [ 94.601322][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.001036][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 95.001054][ T30] audit: type=1400 audit(1794158651.846:2315): avc: denied { write } for pid=5511 comm="syz.5.516" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.107556][ T30] audit: type=1400 audit(1794158651.946:2316): avc: denied { write } for pid=5511 comm="syz.5.516" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.300161][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.871722][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.997067][ T30] audit: type=1326 audit(1794158652.846:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 95.998281][ T30] audit: type=1326 audit(1794158652.846:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 95.998443][ T30] audit: type=1326 audit(1794158652.846:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 95.998614][ T30] audit: type=1326 audit(1794158652.846:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 96.000116][ T30] audit: type=1326 audit(1794158652.846:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 96.001291][ T30] audit: type=1326 audit(1794158652.846:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 96.001452][ T30] audit: type=1326 audit(1794158652.846:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 96.003382][ T30] audit: type=1326 audit(1794158652.846:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.1.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 96.460089][ T5550] loop1: detected capacity change from 0 to 512 [ 96.491629][ T5550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.491759][ T5550] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.695129][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.168412][ T5658] futex_wake_op: syz.5.559 tries to shift op by 144; fix this program [ 99.541596][ T5668] loop0: detected capacity change from 0 to 512 [ 99.621439][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.621532][ T5668] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.669102][ T5674] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 99.682762][ T5676] netlink: 32 bytes leftover after parsing attributes in process `syz.5.565'. [ 99.855380][ T5682] loop5: detected capacity change from 0 to 128 [ 99.877700][ T5682] FAT-fs (loop5): Directory bread(block 1048) failed [ 99.877730][ T5682] FAT-fs (loop5): Directory bread(block 1049) failed [ 99.877799][ T5682] FAT-fs (loop5): Directory bread(block 1050) failed [ 99.877824][ T5682] FAT-fs (loop5): Directory bread(block 1051) failed [ 99.877848][ T5682] FAT-fs (loop5): Directory bread(block 1052) failed [ 99.877922][ T5682] FAT-fs (loop5): Directory bread(block 1053) failed [ 99.877946][ T5682] FAT-fs (loop5): Directory bread(block 1054) failed [ 99.877964][ T5682] FAT-fs (loop5): Directory bread(block 1055) failed [ 99.955195][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.010445][ T5682] FAT-fs (loop5): FAT read failed (blocknr 128) [ 100.110646][ T5693] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.476465][ T30] kauditd_printk_skb: 335 callbacks suppressed [ 100.476499][ T30] audit: type=1400 audit(1794158657.316:2660): avc: denied { write } for pid=5695 comm="syz.1.573" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.729643][ T5714] futex_wake_op: syz.4.576 tries to shift op by 144; fix this program [ 101.260956][ T5725] loop1: detected capacity change from 0 to 736 [ 101.347750][ T33] IPVS: starting estimator thread 0... [ 101.354167][ T5731] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.462348][ T5732] IPVS: using max 2208 ests per chain, 110400 per kthread [ 101.670210][ T5751] loop0: detected capacity change from 0 to 128 [ 101.671130][ T5751] FAT-fs (loop0): Directory bread(block 1048) failed [ 101.671158][ T5751] FAT-fs (loop0): Directory bread(block 1049) failed [ 101.671248][ T5751] FAT-fs (loop0): Directory bread(block 1050) failed [ 101.671266][ T5751] FAT-fs (loop0): Directory bread(block 1051) failed [ 101.671286][ T5751] FAT-fs (loop0): Directory bread(block 1052) failed [ 101.671310][ T5751] FAT-fs (loop0): Directory bread(block 1053) failed [ 101.671335][ T5751] FAT-fs (loop0): Directory bread(block 1054) failed [ 101.671357][ T5751] FAT-fs (loop0): Directory bread(block 1055) failed [ 101.750071][ T5751] FAT-fs (loop0): FAT read failed (blocknr 128) [ 101.837306][ T5761] loop1: detected capacity change from 0 to 512 [ 101.854928][ T5761] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.588: iget: bad i_size value: 38620345925642 [ 101.854971][ T5761] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.855323][ T5761] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.588: couldn't read orphan inode 15 (err -117) [ 101.855358][ T5761] loop1: lost filesystem error report for type 5 error -117 [ 101.856659][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 101.856691][ C1] EXT4-fs (loop1): initial error at time 1794158658: ext4_orphan_get:1404: inode 15 [ 101.856729][ C1] EXT4-fs (loop1): last error at time 1794158658: ext4_orphan_get:1409 [ 101.871400][ T30] audit: type=1400 audit(1794158658.706:2661): avc: denied { write } for pid=5745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.888885][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.909180][ T30] audit: type=1400 audit(1794158658.756:2662): avc: denied { write } for pid=5758 comm="syz.1.588" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.067589][ T30] audit: type=1326 audit(1794158658.906:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.067672][ T30] audit: type=1326 audit(1794158658.906:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.067706][ T30] audit: type=1326 audit(1794158658.906:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.067742][ T30] audit: type=1326 audit(1794158658.906:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.067796][ T30] audit: type=1326 audit(1794158658.906:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.067833][ T30] audit: type=1326 audit(1794158658.906:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.076340][ T30] audit: type=1326 audit(1794158658.916:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 102.592633][ T5778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.591'. [ 102.880272][ T160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 102.880643][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 102.880670][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.880670][ T160] [ 102.880682][ T160] EXT4-fs (loop1): Total free blocks count 0 [ 102.880694][ T160] EXT4-fs (loop1): Free/Dirty block details [ 102.880705][ T160] EXT4-fs (loop1): free_blocks=0 [ 102.880717][ T160] EXT4-fs (loop1): dirty_blocks=1 [ 102.880733][ T160] EXT4-fs (loop1): Block reservation details [ 102.880826][ T160] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 102.882430][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.114146][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 103.114245][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 103.206786][ T5800] futex_wake_op: syz.4.594 tries to shift op by 144; fix this program [ 103.568100][ T5819] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.836815][ T5767] loop3: detected capacity change from 0 to 512 [ 103.948153][ T5839] loop1: detected capacity change from 0 to 1024 [ 103.951218][ T5839] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.973164][ T5839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.352890][ T5856] loop0: detected capacity change from 0 to 512 [ 104.354587][ T5856] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.358153][ T5856] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 104.452036][ T5856] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.452699][ T5856] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.453837][ T5856] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.603: Invalid block bitmap block 0 in block_group 0 [ 104.453880][ T5856] loop0: lost filesystem error report for type 5 error -117 [ 104.454402][ T5856] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.603: Invalid block bitmap block 0 in block_group 0 [ 104.454447][ T5856] loop0: lost filesystem error report for type 5 error -117 [ 104.454926][ T5856] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.603: Invalid block bitmap block 0 in block_group 0 [ 104.454969][ T5856] loop0: lost filesystem error report for type 5 error -117 [ 104.455223][ T5856] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.603: Failed to acquire dquot type 1 [ 104.455281][ T5856] loop0: lost filesystem error report for type 5 error -28 [ 104.455935][ T5856] EXT4-fs (loop0): 1 orphan inode deleted [ 104.456665][ C1] EXT4-fs (loop0): error count since last fsck: 4 [ 104.456685][ C1] EXT4-fs (loop0): last error at time 1794158661: ext4_acquire_dquot:7120 [ 104.763694][ T160] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 104.763730][ T160] loop0: lost filesystem error report for type 5 error -117 [ 104.783983][ T5856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.876658][ T5767] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 104.876711][ T5767] EXT4-fs: failed to create workqueue [ 104.876724][ T5767] EXT4-fs (loop3): mount failed [ 105.275640][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.820385][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 105.858348][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 105.858368][ T30] audit: type=1400 audit(1794158662.706:2810): avc: denied { write } for pid=5873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.923915][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 105.989574][ T30] audit: type=1400 audit(1794158662.836:2811): avc: denied { write } for pid=5903 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.126002][ T5911] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.345118][ T30] audit: type=1400 audit(1794158663.186:2812): avc: denied { write } for pid=5915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.373491][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.432333][ T30] audit: type=1400 audit(1794158663.276:2813): avc: denied { write } for pid=5935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.433917][ T5931] futex_wake_op: syz.4.612 tries to shift op by 144; fix this program [ 106.705938][ T5956] loop5: detected capacity change from 0 to 512 [ 106.714539][ T5954] netlink: 'syz.5.618': attribute type 1 has an invalid length. [ 106.745290][ T5948] loop1: detected capacity change from 0 to 512 [ 106.750319][ T5948] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 106.750364][ T5948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.765854][ T5948] EXT4-fs (loop1): 1 truncate cleaned up [ 106.770622][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.811815][ T30] audit: type=1400 audit(1794158663.656:2814): avc: denied { write } for pid=5947 comm="syz.1.617" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.812006][ T30] audit: type=1400 audit(1794158663.656:2815): avc: denied { write } for pid=5947 comm="syz.1.617" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.814321][ T5948] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 106.814563][ T5948] EXT4-fs (loop1): Remounting filesystem read-only [ 106.814703][ T5948] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 106.906251][ T30] audit: type=1400 audit(1794158663.746:2816): avc: denied { write } for pid=5941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.915783][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 106.994032][ T30] audit: type=1400 audit(1794158663.836:2817): avc: denied { write } for pid=5972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.075107][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.136001][ T5977] loop1: detected capacity change from 0 to 512 [ 107.177881][ T5977] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 107.177900][ T5977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.183512][ T5977] EXT4-fs (loop1): 1 truncate cleaned up [ 107.184188][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.228214][ T30] audit: type=1400 audit(1794158664.076:2818): avc: denied { write } for pid=5976 comm="syz.1.622" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.228307][ T30] audit: type=1400 audit(1794158664.076:2819): avc: denied { write } for pid=5976 comm="syz.1.622" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.239438][ T5977] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 107.241563][ T5977] EXT4-fs (loop1): Remounting filesystem read-only [ 107.241714][ T5977] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 107.338401][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 107.375644][ T5987] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 107.469416][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.828093][ T6030] loop3: detected capacity change from 0 to 1024 [ 107.845693][ T6030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.862532][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.889126][ T6033] loop0: detected capacity change from 0 to 512 [ 108.075401][ T6046] futex_wake_op: syz.1.634 tries to shift op by 144; fix this program [ 108.105413][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.105492][ T6033] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.530919][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.599143][ T6092] loop3: detected capacity change from 0 to 512 [ 108.606044][ T6092] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 108.606098][ T6092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.613760][ T6092] EXT4-fs (loop3): 1 truncate cleaned up [ 108.614962][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.643782][ T6092] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 108.662162][ T6092] EXT4-fs (loop3): Remounting filesystem read-only [ 108.662281][ T6092] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 108.678722][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 108.768970][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.774980][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.850909][ T6097] loop3: detected capacity change from 0 to 512 [ 108.869986][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.641: iget: bad i_size value: 38620345925642 [ 108.870086][ T6097] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.871513][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.641: couldn't read orphan inode 15 (err -117) [ 108.871549][ T6097] loop3: lost filesystem error report for type 5 error -117 [ 108.872165][ T6097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.830859][ T13] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 109.831376][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 109.831431][ T13] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.831431][ T13] [ 109.831454][ T13] EXT4-fs (loop3): Total free blocks count 0 [ 109.831471][ T13] EXT4-fs (loop3): Free/Dirty block details [ 109.831491][ T13] EXT4-fs (loop3): free_blocks=0 [ 109.831508][ T13] EXT4-fs (loop3): dirty_blocks=1 [ 109.831524][ T13] EXT4-fs (loop3): Block reservation details [ 109.831539][ T13] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 109.832718][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.891665][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 110.849129][ T6149] loop3: detected capacity change from 0 to 128 [ 110.868544][ T6149] FAT-fs (loop3): Directory bread(block 1048) failed [ 110.868653][ T6149] FAT-fs (loop3): Directory bread(block 1049) failed [ 110.868687][ T6149] FAT-fs (loop3): Directory bread(block 1050) failed [ 110.868711][ T6149] FAT-fs (loop3): Directory bread(block 1051) failed [ 110.868766][ T6149] FAT-fs (loop3): Directory bread(block 1052) failed [ 110.868856][ T6149] FAT-fs (loop3): Directory bread(block 1053) failed [ 110.868889][ T6149] FAT-fs (loop3): Directory bread(block 1054) failed [ 110.868912][ T6149] FAT-fs (loop3): Directory bread(block 1055) failed [ 110.928099][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 110.928150][ T30] audit: type=1400 audit(1794158667.776:2833): avc: denied { write } for pid=6146 comm="syz.5.654" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 110.977971][ T6149] FAT-fs (loop3): FAT read failed (blocknr 128) [ 111.650599][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 112.616186][ T6186] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 112.820912][ T6200] loop0: detected capacity change from 0 to 512 [ 112.826469][ T6200] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.844300][ T6200] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 112.845577][ T6200] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 112.845661][ T6200] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.846093][ T6200] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.669: Invalid block bitmap block 0 in block_group 0 [ 112.846125][ T6200] loop0: lost filesystem error report for type 5 error -117 [ 112.846307][ T6200] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.669: Invalid block bitmap block 0 in block_group 0 [ 112.846366][ T6200] loop0: lost filesystem error report for type 5 error -117 [ 112.846663][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 112.846681][ C0] EXT4-fs (loop0): last error at time 1794158669: ext4_read_block_bitmap_nowait:487 [ 112.848171][ T6200] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.669: Invalid block bitmap block 0 in block_group 0 [ 112.848271][ T6200] loop0: lost filesystem error report for type 5 error -117 [ 112.850810][ T6200] Quota error (device loop0): write_blk: dquota write failed [ 112.850864][ T6200] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 112.850996][ T6200] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.669: Failed to acquire dquot type 1 [ 112.851062][ T6200] loop0: lost filesystem error report for type 5 error -28 [ 112.855575][ T6200] EXT4-fs (loop0): 1 orphan inode deleted [ 112.855888][ T13] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 112.855981][ T13] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 112.856046][ T13] loop0: lost filesystem error report for type 5 error -117 [ 112.859170][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.910540][ T6205] futex_wake_op: syz.1.666 tries to shift op by 144; fix this program [ 113.791779][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 113.959246][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.123595][ T6232] loop1: detected capacity change from 0 to 512 [ 114.133989][ T6232] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 114.134009][ T6232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.183606][ T6232] EXT4-fs (loop1): 1 truncate cleaned up [ 114.184291][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.193917][ T6231] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 114.197000][ T30] audit: type=1400 audit(1794158671.036:2834): avc: denied { write } for pid=6230 comm="syz.1.674" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.197091][ T30] audit: type=1400 audit(1794158671.036:2835): avc: denied { write } for pid=6230 comm="syz.1.674" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.206023][ T6231] EXT4-fs (loop1): Remounting filesystem read-only [ 114.206176][ T6231] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 114.428812][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 115.007023][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.090735][ T6252] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.378890][ T6267] loop3: detected capacity change from 0 to 128 [ 115.381192][ T6267] FAT-fs (loop3): Directory bread(block 1048) failed [ 115.381279][ T6267] FAT-fs (loop3): Directory bread(block 1049) failed [ 115.381298][ T6267] FAT-fs (loop3): Directory bread(block 1050) failed [ 115.381318][ T6267] FAT-fs (loop3): Directory bread(block 1051) failed [ 115.381335][ T6267] FAT-fs (loop3): Directory bread(block 1052) failed [ 115.381356][ T6267] FAT-fs (loop3): Directory bread(block 1053) failed [ 115.381421][ T6267] FAT-fs (loop3): Directory bread(block 1054) failed [ 115.381441][ T6267] FAT-fs (loop3): Directory bread(block 1055) failed [ 115.462948][ T6267] FAT-fs (loop3): FAT read failed (blocknr 128) [ 115.590154][ T6269] loop5: detected capacity change from 0 to 512 [ 115.962820][ T6272] loop1: detected capacity change from 0 to 128 [ 115.985594][ T6272] FAT-fs (loop1): Directory bread(block 1048) failed [ 115.985737][ T6272] FAT-fs (loop1): Directory bread(block 1049) failed [ 115.985851][ T6272] FAT-fs (loop1): Directory bread(block 1050) failed [ 115.986031][ T6272] FAT-fs (loop1): Directory bread(block 1051) failed [ 115.986112][ T6272] FAT-fs (loop1): Directory bread(block 1052) failed [ 115.986148][ T6272] FAT-fs (loop1): Directory bread(block 1053) failed [ 115.986364][ T6272] FAT-fs (loop1): Directory bread(block 1054) failed [ 115.986534][ T6272] FAT-fs (loop1): Directory bread(block 1055) failed [ 116.149557][ T6274] loop3: detected capacity change from 0 to 512 [ 116.150025][ T6274] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.172337][ T6272] FAT-fs (loop1): FAT read failed (blocknr 128) [ 116.232237][ T6274] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 116.233650][ T6274] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.233780][ T6274] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.234273][ T6274] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.683: Invalid block bitmap block 0 in block_group 0 [ 116.234304][ T6274] loop3: lost filesystem error report for type 5 error -117 [ 116.234559][ T6274] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.683: Invalid block bitmap block 0 in block_group 0 [ 116.234634][ T6274] loop3: lost filesystem error report for type 5 error -117 [ 116.236711][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 116.236766][ C0] EXT4-fs (loop3): last error at time 1794158673: ext4_read_block_bitmap_nowait:487 [ 116.237963][ T6274] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.683: Invalid block bitmap block 0 in block_group 0 [ 116.238110][ T6274] loop3: lost filesystem error report for type 5 error -117 [ 116.242892][ T6274] Quota error (device loop3): write_blk: dquota write failed [ 116.242945][ T6274] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 116.243007][ T6274] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.683: Failed to acquire dquot type 1 [ 116.243074][ T6274] loop3: lost filesystem error report for type 5 error -28 [ 116.245387][ T6274] EXT4-fs (loop3): 1 orphan inode deleted [ 116.245685][ T33] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 116.245759][ T33] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 1 [ 116.245831][ T33] loop3: lost filesystem error report for type 5 error -117 [ 116.304460][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.826732][ T30] audit: type=1400 audit(1794158673.646:2836): avc: denied { write } for pid=6275 comm="syz.1.685" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.852818][ T30] audit: type=1400 audit(1794158673.696:2837): avc: denied { write } for pid=6275 comm="syz.1.685" name="instances" dev="tracefs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 117.088101][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.593880][ T6308] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.860556][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 118.720224][ T6343] loop1: detected capacity change from 0 to 512 [ 118.728423][ T6343] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.729104][ T6343] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.730341][ T6343] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.730618][ T6343] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.731709][ T6343] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.700: Invalid block bitmap block 0 in block_group 0 [ 118.731888][ T6343] loop1: lost filesystem error report for type 5 error -117 [ 118.732537][ T6343] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.700: Invalid block bitmap block 0 in block_group 0 [ 118.732651][ T6343] loop1: lost filesystem error report for type 5 error -117 [ 118.733417][ T6343] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.700: Invalid block bitmap block 0 in block_group 0 [ 118.733488][ T6343] loop1: lost filesystem error report for type 5 error -117 [ 118.733893][ T6343] Quota error (device loop1): write_blk: dquota write failed [ 118.733940][ T6343] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 118.733979][ T6343] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.700: Failed to acquire dquot type 1 [ 118.733999][ T6343] loop1: lost filesystem error report for type 5 error -28 [ 118.734617][ T6343] EXT4-fs (loop1): 1 orphan inode deleted [ 118.736904][ T39] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 118.736998][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 118.737072][ T39] loop1: lost filesystem error report for type 5 error -117 [ 118.745902][ T6343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.613949][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.669266][ T30] audit: type=1326 audit(1794158676.516:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 119.669312][ T30] audit: type=1326 audit(1794158676.516:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809588fb19 code=0x7ffc0000 [ 120.425010][ T6347] syz.3.698 (6347) used greatest stack depth: 9000 bytes left [ 120.632659][ T6384] loop3: detected capacity change from 0 to 512 [ 120.635032][ T6384] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.661487][ T6384] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 120.675675][ T6384] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.675831][ T6384] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.676300][ T6384] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.713: Invalid block bitmap block 0 in block_group 0 [ 120.676534][ T6384] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.713: Invalid block bitmap block 0 in block_group 0 [ 120.676717][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 120.676805][ C1] EXT4-fs (loop3): last error at time 1794158677: ext4_read_block_bitmap_nowait:487 [ 120.685938][ T6384] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.713: Invalid block bitmap block 0 in block_group 0 [ 120.693356][ T6384] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.713: Failed to acquire dquot type 1 [ 120.707138][ T6384] EXT4-fs (loop3): 1 orphan inode deleted [ 120.721536][ T39] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 120.726247][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.806024][ T6390] futex_wake_op: syz.4.712 tries to shift op by 144; fix this program [ 120.825650][ T6395] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 121.188235][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 121.248246][ T30] kauditd_printk_skb: 504 callbacks suppressed [ 121.248289][ T30] audit: type=1326 audit(1794158678.086:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.248328][ T30] audit: type=1326 audit(1794158678.096:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.249886][ T30] audit: type=1326 audit(1794158678.096:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.251448][ T30] audit: type=1326 audit(1794158678.096:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.252944][ T30] audit: type=1326 audit(1794158678.096:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.254854][ T30] audit: type=1326 audit(1794158678.096:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.256018][ T30] audit: type=1326 audit(1794158678.096:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.257943][ T30] audit: type=1326 audit(1794158678.106:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.264378][ T30] audit: type=1326 audit(1794158678.106:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.264430][ T30] audit: type=1326 audit(1794158678.106:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfc652034e code=0x7ffc0000 [ 121.550729][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.290103][ T6464] loop3: detected capacity change from 0 to 512 [ 122.290537][ T6464] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.343740][ T6464] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 122.348498][ T6464] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.348807][ T6464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.353091][ T6464] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.730: Invalid block bitmap block 0 in block_group 0 [ 122.353188][ T6464] fserror_report: 5 callbacks suppressed [ 122.353261][ T6464] loop3: lost filesystem error report for type 5 error -117 [ 122.353759][ T6464] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.730: Invalid block bitmap block 0 in block_group 0 [ 122.353873][ T6464] loop3: lost filesystem error report for type 5 error -117 [ 122.354262][ T6464] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.730: Invalid block bitmap block 0 in block_group 0 [ 122.354350][ T6464] loop3: lost filesystem error report for type 5 error -117 [ 122.354804][ T6464] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.730: Failed to acquire dquot type 1 [ 122.354917][ T6464] loop3: lost filesystem error report for type 5 error -28 [ 122.355574][ T6464] EXT4-fs (loop3): 1 orphan inode deleted [ 122.357172][ T160] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 122.357211][ T160] loop3: lost filesystem error report for type 5 error -117 [ 122.366404][ T6464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.637907][ T6475] futex_wake_op: syz.0.729 tries to shift op by 144; fix this program [ 123.183860][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.305007][ T6531] loop3: detected capacity change from 0 to 512 [ 123.307340][ T6531] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 123.307417][ T6531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.345902][ T6531] EXT4-fs (loop3): 1 truncate cleaned up [ 123.346550][ T6531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.355453][ T6531] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 123.367004][ T6531] EXT4-fs (loop3): Remounting filesystem read-only [ 123.367352][ T6531] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 123.536831][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 123.962113][ T6570] loop1: detected capacity change from 0 to 512 [ 123.981327][ T6570] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.981807][ T6570] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 123.987132][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.125740][ T6570] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -ENXIO [ 124.339177][ T6570] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.760301][ T6601] FAULT_INJECTION: forcing a failure. [ 124.760301][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 124.760366][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.5.747 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.760445][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.760463][ T6601] Call Trace: [ 124.760482][ T6601] [ 124.760493][ T6601] __dump_stack+0x1d/0x30 [ 124.760538][ T6601] dump_stack_lvl+0x95/0xd0 [ 124.760604][ T6601] dump_stack+0x15/0x1b [ 124.760629][ T6601] should_fail_ex+0x259/0x270 [ 124.760660][ T6601] ? __alloc_skb+0x2e0/0x6f0 [ 124.760773][ T6601] should_failslab+0x8c/0xb0 [ 124.760888][ T6601] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 124.760928][ T6601] ? netlink_insert+0x7d5/0x950 [ 124.761005][ T6601] ? __alloc_skb+0x2e0/0x6f0 [ 124.761042][ T6601] __alloc_skb+0x2e0/0x6f0 [ 124.761098][ T6601] ? __alloc_skb+0x209/0x6f0 [ 124.761136][ T6601] netlink_alloc_large_skb+0xbf/0xf0 [ 124.761180][ T6601] netlink_sendmsg+0x434/0x740 [ 124.761262][ T6601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.761292][ T6601] ____sys_sendmsg+0x54a/0x590 [ 124.761325][ T6601] ___sys_sendmsg+0x195/0x1e0 [ 124.761372][ T6601] __x64_sys_sendmsg+0xd4/0x160 [ 124.761410][ T6601] x64_sys_call+0x22ab/0x2550 [ 124.761444][ T6601] do_syscall_64+0x112/0x360 [ 124.761544][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.761570][ T6601] RIP: 0033:0x7f188bbdfb19 [ 124.761600][ T6601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.761626][ T6601] RSP: 002b:00007f188a637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.761653][ T6601] RAX: ffffffffffffffda RBX: 00007f188be65fa0 RCX: 00007f188bbdfb19 [ 124.761714][ T6601] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 124.761787][ T6601] RBP: 00007f188a637090 R08: 0000000000000000 R09: 0000000000000000 [ 124.761801][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.761816][ T6601] R13: 00007f188be66038 R14: 00007f188be65fa0 R15: 00007ffc4b816668 [ 124.761843][ T6601] [ 125.061028][ T6609] loop3: detected capacity change from 0 to 512 [ 125.061412][ T6609] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.069206][ T6609] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 125.075022][ T6609] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.075335][ T6609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.083972][ T6609] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.749: Invalid block bitmap block 0 in block_group 0 [ 125.084094][ T6609] loop3: lost filesystem error report for type 5 error -117 [ 125.086129][ T6609] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.749: Invalid block bitmap block 0 in block_group 0 [ 125.086245][ T6609] loop3: lost filesystem error report for type 5 error -117 [ 125.087057][ T6609] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.749: Invalid block bitmap block 0 in block_group 0 [ 125.087163][ T6609] loop3: lost filesystem error report for type 5 error -117 [ 125.088617][ T6609] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.749: Failed to acquire dquot type 1 [ 125.088693][ T6609] loop3: lost filesystem error report for type 5 error -28 [ 125.089406][ T6609] EXT4-fs (loop3): 1 orphan inode deleted [ 125.096693][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 125.096792][ C1] EXT4-fs (loop3): last error at time 1794158681: ext4_acquire_dquot:7120 [ 125.130693][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 125.130778][ T13] loop3: lost filesystem error report for type 5 error -117 [ 125.132665][ T6609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.144729][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.5.748'. [ 125.320053][ T6606] hsr_slave_1 (unregistering): left promiscuous mode [ 125.847773][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 126.034765][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.330145][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 126.330219][ T30] audit: type=1326 audit(1794158683.176:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.330326][ T30] audit: type=1326 audit(1794158683.176:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.388430][ T30] audit: type=1326 audit(1794158683.236:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.390010][ T30] audit: type=1326 audit(1794158683.236:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.393448][ T30] audit: type=1326 audit(1794158683.236:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.454965][ T30] audit: type=1326 audit(1794158683.296:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83922fb19 code=0x7ffc0000 [ 126.455406][ T30] audit: type=1326 audit(1794158683.296:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83922f882 code=0x7ffc0000 [ 126.455837][ T30] audit: type=1326 audit(1794158683.296:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff83922f917 code=0x7ffc0000 [ 126.477160][ T30] audit: type=1326 audit(1794158683.296:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff8391ec811 code=0x7ffc0000 [ 126.477308][ T30] audit: type=1326 audit(1794158683.316:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff839230909 code=0x7ffc0000 [ 127.088695][ T6688] ip_tables: iptables: counters copy to user failed while replacing table [ 128.048086][ T6717] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 128.048114][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 128.803846][ T6735] loop3: detected capacity change from 0 to 128 [ 128.804222][ T6735] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 128.810893][ T6735] EXT4-fs: error: could not find journal device path [ 128.978084][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 129.250947][ T6763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 129.250982][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.251015][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 129.291011][ T6765] vhci_hcd: cannot find the pending unlink 1023 [ 129.517724][ T4672] usb 4-1: SetAddress Request (2) to port 0 [ 129.517761][ T4672] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.700218][ T6796] syzkaller0: entered promiscuous mode [ 129.700244][ T6796] syzkaller0: entered allmulticast mode [ 129.727699][ T6771] ================================================================== [ 129.727750][ T6771] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 129.727802][ T6771] [ 129.727810][ T6771] read-write to 0xffffc9000bd17cc0 of 8 bytes by task 6795 on cpu 1: [ 129.727832][ T6771] shmem_writeout+0x2db/0x970 [ 129.727858][ T6771] shrink_folio_list+0x1a81/0x2720 [ 129.727886][ T6771] evict_folios+0x1dac/0x2980 [ 129.727905][ T6771] try_to_shrink_lruvec+0x833/0x9a0 [ 129.727933][ T6771] shrink_node+0x943/0x3a90 [ 129.727960][ T6771] do_try_to_free_pages+0x310/0xb70 [ 129.727997][ T6771] try_to_free_mem_cgroup_pages+0x201/0x420 [ 129.728039][ T6771] mem_cgroup_resize_max+0x13d/0x2d0 [ 129.728078][ T6771] mem_cgroup_write+0x132/0x1c0 [ 129.728113][ T6771] cgroup_file_write+0x197/0x350 [ 129.728137][ T6771] kernfs_fop_write_iter+0x1d2/0x2e0 [ 129.728165][ T6771] vfs_write+0x57a/0x990 [ 129.728195][ T6771] ksys_write+0xdc/0x1a0 [ 129.728243][ T6771] __x64_sys_write+0x40/0x50 [ 129.728284][ T6771] x64_sys_call+0x154e/0x2550 [ 129.728320][ T6771] do_syscall_64+0x112/0x360 [ 129.728340][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.728360][ T6771] [ 129.728365][ T6771] read to 0xffffc9000bd17cc0 of 8 bytes by task 6771 on cpu 0: [ 129.728381][ T6771] shmem_fallocate+0x5e2/0x8f0 [ 129.728419][ T6771] vfs_fallocate+0x3ac/0x400 [ 129.728442][ T6771] file_ioctl+0x4e1/0x5b0 [ 129.728464][ T6771] do_vfs_ioctl+0x7c4/0xe50 [ 129.728500][ T6771] __se_sys_ioctl+0x82/0x140 [ 129.728541][ T6771] __x64_sys_ioctl+0x43/0x50 [ 129.728577][ T6771] x64_sys_call+0x239d/0x2550 [ 129.728601][ T6771] do_syscall_64+0x112/0x360 [ 129.728618][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.728640][ T6771] [ 129.728645][ T6771] value changed: 0x00000000000005bd -> 0x00000000000005c2 [ 129.728660][ T6771] [ 129.728665][ T6771] Reported by Kernel Concurrency Sanitizer on: [ 129.728679][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.3.775 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.728703][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 129.728720][ T6771] ================================================================== [ 130.068128][ T6765] vhci_hcd: connection reset by peer [ 130.069837][ T3434] vhci_hcd vhci_hcd.1: stop threads [ 130.069860][ T3434] vhci_hcd vhci_hcd.1: release socket [ 130.069885][ T3434] vhci_hcd vhci_hcd.1: disconnect device [ 134.616819][ T4672] usb 4-1: device descriptor read/8, error -110 [ 134.726771][ T4672] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 134.746727][ T4672] usb 4-1: enqueue for inactive port 0 [ 134.746761][ T4672] usb 4-1: enqueue for inactive port 0 [ 134.746847][ T4672] usb 4-1: enqueue for inactive port 0 [ 135.776973][ T4672] usb usb4-port1: attempt power cycle [ 137.607092][ T4672] usb usb4-port1: unable to enumerate USB device