last executing test programs: 30.181514059s ago: executing program 0 (id=201): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000050000220000000000000000850000002c000000950000000700000002f9d067a91cf8211565d09d6b10d0d367d5c2630489127e22b5c97ec378fd4cda746807213f6db0266969e813430818b4e483d2badf816c0a5894a5fd5c37c62beacfc271d81e00325d"], &(0x7f0000000380)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffda3, 0x45, &(0x7f0000000580)="6d0afd000b00008a0000c30cde4fff45020b0cfca1c9bc6087f081e231c05645567b00e0cb22671d6117050d2f120e0000000000000076b691596f6443070000006b4d268fc5e7d2940c84164a628d0efb01000000a0adfd6b39a8f66933dd2e884980515cfb9f", 0x0, 0x5, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffda3, 0x45, &(0x7f0000000580)="6d0afd000b00008a0000c30cde4fff45020b0cfca1c9bc6087f081e231c05645567b00e0cb22671d6117050d2f120e0000000000000076b691596f6443070000006b4d268fc5e7d2940c84164a628d0efb01000000a0adfd6b39a8f66933dd2e884980515cfb9f", 0x0, 0x5, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="6420ea928fcedd18f57ad9", @ANYRES32=r0, @ANYBLOB="3752a57f8f172aed525c95671c8fb1432d0410577af8c516fb42aa2f974694fb14a0cfc62327a508aae2fae0c67205511c0bc38c37675e9efc66dbc91f610dd1fa28148b03dab8a1b607fa86d7fd9c1a9cf3a237a4103332e532002e65998721f55d3ce35c25a428e7e6ed4e6fbb74cc65fa9676cb878a7907bbe9c345cfc9e0695ede8998ff6f38ece8bd56095cd073bb3e6730810e8188191367e3a173dcb942e19180998e3533a6d6bc946ea31f47ca1e3350a2b5c7e8f3d05c987a4c7d28ad5bff26e81938b0c96173e590546cce82c576dc60e458ca44259e73da5fd02f8806752334855a1db61ab7f8de11830987d93c17dba6ea0d03d6e6e864bac98d8cb56f2ebb873897132485b7f94f8ce068bdd914f22df27bb26d25ce250f9482a4e3f09ad1b2c65f8261aef16225333889e088c847d6676178ed3c15043277ce17ab7287f125b655cd0333f9003da19d75a4cda126245b1f7394b08dcab373c81f6b83f0c740299f8cba4467929f5b776035781a9766620e34f3e31adb129da4f3fa6a8f75e8d11e45a985a623cdc051c29a1e348a79cb919f0a4ad55b178ce3fb21bd54c0058c22ffd0a5c05306b71df10209fdcdc01dfbfa91abc3e308a8e7d24b506a7289885cf578e7a7fb075a79df7e11bec69617a4e97158dd196e83f4170317d2d7ff8ebefdd0bb105e046e7e3e7121cab5d795a074325839dd3a7049b36d5c73cef17d88b347f7f825bf2aa3ae0eb2412d0dd2a55475d56f05ca627111d95fb421dc030989a0569afa3936449b8b18704a4299961774f6ccd2544dbf74a80b13ff6ef2345356175c98109698b8a93a40650a1a302ee9a66201cda2d9f01a245cb95011ad7c08fccc1d7cf6a0cc30c2fde98d5625e137e9dbad269a6f1730fc9c413c6f0cf02fd4a98ce163baafb786a2f7d386ce852172a407309fba79d726220f431a8199999022d2f73129d79e596264f337725400fe0a5ada27ad7b2de5652272e805e1e8e01a7e58d40de168c11cf1fc038f17de3b2d77c4e7c3d7be08aabd36ce038da6c7623aeae13e327e3398e05988a8d164b45c843abdb160cff1ba59ea0a3b7630c6c7ddfc813b68e6bdfe2896da70590fdf7145a3e8d7feae359a5b66bd9c07c85b65c37198e53788b5bf9979a7482e271431faca68bf4a11af4df5a5604fb1cf6cd4de555dd599b1bfe6b9e97bf60b393e7b16629e234d28d8f5c79ea12e55b4a0a0b18eae0b96ca2f178aacccc31ba1d621dcb1fe9a84bdca94b0b0ecd8878f294c01e15e23509ff94472a89ee8f92d44d9db04af7a65213f78c7ad2954d2b91b72e2a9ce145f47794c466a628e1649265bd546c050945a8e20a28e93c42c986790a9b55288e2f3477ccc84801df8c402bb2c1cfcc8084bf73604c31b48389c855ffb3716aa5ef6f3922388c86d0ed77c2279c7cddd5ff0d2f39e6d7b8878762507633b57afb369ccbf7a77e505cd21f4aacf85e45386b8513088b1f2cfe840b6da78a01cc755106cfb30720ba70d5fa575d34765afe84e5a8cbf2737a419ea3873356849a6306cdb64258a45d58109084a0f4f9f1142f6248ed836712f3d0332633b40054c32ff6a05039a43f5a32a23a66a1400c0e4f67e50f38eb55564713cd15a12f69a269d2d15d74946034d7d5cfba04fa1d3cc5bb3f8b265ddf23e1189dce9729c6824a061a582e2de573d791b1c408582bf2f84a4329d5818df96121643d7cce78c81575878adf9b374fc167414b7442569b8de8f89b93b91714ccd6e8f9c90d6ac7f8eeeee0a8b92a16aab418d909af28f81841802d53e0a61079ffa4f1aaaf0a47bb85237e7d5e0cf8877817fe28ae8d3dd99cfef31637cc7edad3c7302a393c5bc47d4422d8b410aae246e2e9e6063f4855dba2932fe76984dd5c1e05fb585982e1ce73be547d00909ce47bcadf31aaa762127354f2fc6bb0648d0e546908a07f800f54d24b3a7ca3e1c747807231803fb6799c56cc1364bbdff8fe71703fa374899b617ca9bd6e47d79a2369bc3d140abd5eb23bb3899f7d3ba523a51fe243a858c426ce12e5be92c7c8da03e8895e991fc9529432410330cde19cdabee9019895e9b2ede691b34816d34f2f5d6676c494beb08289ad23b04256275f616677509b123023258248b9e90a649934c0a3ccdbf07b59c33df645a851e24365eaf51d7fad15f6d38cc20ab2efacf95dbfb84ff0ad8f5c67a9a0c68ef082a343412cbc625169b73b281758cf069698ffe6b9b11b47ed90648d479a733836965b40bc2ea78f0deb2fa6c8470caf83ba72d92e488011085a861cf497f2ed6aaf705a2cd1443e0a2ac353593ddfaf2a06b2ae411bf49307dfe17828f0bf5f6ed1823ea6e146763ca37776843ab6374632e7db3e285a226753f0140f0ceb5ecd89fe56a02ad873a10ae000d1b00dc046189f00f6731a91b1ba3535d99ec5fe0c8e144d5c8e9fb0299c3871ab45e2f8484e2abaf740f07af8fbc94bf80a6bd3e8f05eb708d0a7761c3526e9e1fb8612103c497ea34d0bca9d568104a629c286d8fbc30b52fdd2f6489977a8b1dde76a25fa9b81dded57b2d6eb785186333c171d29b7d687cdc578286ee7aef9623dc04c06f5a9ecaaa56aed0d70524cd42fa8005f966aaeb2affa2886499e93e25e9c0130457448c46037ac61cbc5c73236a1913e598d20d9ddb38f75b883157c000adb834e0d87f67e332120529fc22411a6df444fef0a059948c5e093f2231b37923954d7c1770ccce9195c8ad0fb5196c44d418b315e1ff6ddd0cbc100a49be15719acbb98fe024d4bc894074bc1363d1c14af214f8076726f740ce4b1d9cb561d7e8ecf948d02f82c16e5af9d3d8b3ed179c87dce2f70ec51f792b93783cf949f4da52d72c1c63f59a1cfbec6671d90b9c7201e8d26fc013298b04c3f977de2ac9ac17511a462c7358a8aea7ae97fcf7434d4e3ad1a73d71aa0cd7d3ba99d067b467a802e9b2c8c75faa20c0b5f4bb8651fad6d6cfa77bcd59e028fb90c35ee844145204a378ab31b53fbb44fe44c4430df772b3a91c871762e8ffe9dd08a11e39afeee11dd11776d0ff72f5959946c92be2ed46ab9fa47d7fa6c4869e8913aa84fdf3af9a0254d76d92a6ddb9c96437e3894a583e02e8bcad439035327f8011a8ec02aa989ee20ff2866d8b598a7894bf689f6d87a323047669bf7508990d56722d75d726b75098a4f55750da2991ac4eef0bd6685c37934cf8e5c23d7e3c2851451a3abf6899353a5f7b6b8447f1e62194c0bcd9d9a39d06481c0907664ddd6d2563114f0319dc2ecdde615de6d6bff3aaf0ec1903422e0c1c30c85c0cc7817b25f9fdaee1afed0067a0965460570ff7b9521990f3292a8bb219bee06e55dd891692c10ba06425a2c2f1735e2deccb780044073481a710bb4db94661dcba66a2b7af90927e98b5851a6d174c10ca13f0d52c565ef9299afcbe79628bb9764b899a3c8b1155f6534d57abe954e18394b07e649e9bc402f760d22c901cdeb3254be7e18fe585056382ca00eda855ea99248d84d5b836791b064d0e9fe31a8b254df44878edee8755167c92bc984ab37b4bb62c66787f4cddf6ad357a818ea2b5419c6b2347342bc92915a6f57857eb80fc69f92f1cbed57741f76f86b5425d6280ec4e4f9dfdae602747bdd91c6b380f285f3a5b18b72a101cfc18fcfd1247ada7dfa438bd4986039c671603a10ffade1d0202dbf4bda6ce662bfb19d34da94ce949907f36f3e9c446879e8030ba79f14f8bfe6430ccb38db1a685eaea3d57b57790525e4e60f400b969f467de5ed3feb4f0f18137d0f042c15ded27b01d787e7a99d8150827c189451d7f2e56473fc7455f710c328d23503476533bacb2cac7a80382081646f5b7371c172ad4e022c11cbd9b8aab6d9c684b82b3ddf54a732448136fa1a6d0ac491b7943a4392ae3b7083a3bf417916c06fcdb033145acf438793e65c668cd57ba709d8bee44e6c6853f8cf5a9262ff0d80db94ad875f868936cff1492ceffcdc8fdaf83c8102dd61dcb205ad6f3c00225c9e6bdc5722ac2aa3c9e3760136950ce06734df3258fbe959cb3b60d94f5dcd2fc82295482dd374b23373dc1448ef2e12ee1977f60c434cae1a9066a59d990f00c6390a6e67d97e617b39c4e684aa8e25b8f08e2d0c1fc4a60677d6c62908e011de9325074a5df4e24adeda062e6bdf0a962f44188082c6f38cdb3690932514c3b5fdc5f9dac24c9ded8207dac96b3c61225e9b168987d42c7ed0ab689be57b004f06379068f47c578cc4d2e0944232282b99900eebf5e64fa746acd9bd06ba90894dbce5daf756c5244c54d4a0ee4ba5da7c55712c840a5b6dedc018a6ac5b88d9c2ea8cdf70c116d201cdb2e2c9373a20da6f32e5f918d21f1d4ccc8471bd3160c4e66e29c532311149847c57a1619a25ca2560f26a60d606804afe05f47477c3beecf82c844003208d7fd41bfbe06e8a278a1ab6d5d34b41d675a7f190534d89d684cc1bd27b4b72ff9a368073ab737c93cac121f8dc046520fb506935bc4df738c06f5186ea42905a03ab5e8932b6833edd3606e83fc512689e25d08b5241ba47bc78f315416b9c94de95cf2f697d3d9df0c19169e7454dc3c51496024646d9810d4eec04df5d3194c58167dbf101af95841d7d98dfcb66a4d85fef986e48070e1491e663ed8fdd28a72f45c59b0c687c332169d77bbcbc450f7da6d5e1930b0e27109dc8fe8a838e6f2488022fcd4a4c60289f0b829ce08abc848cb94def556eb9c3da284daa190937b9d7491364d59b18790c5535b5d4c08b0d9318112f5a58de802045e1f4bc62f6c7c381ab7e5082a32b6484d848d27b1fd2c3298cbbf337bed9a1400ca34c9af355a4ce203e45b66797a98daf2d51105ec646a2d049ef58fafd6d4caca5e7eb3221f576161382d67b195b4ad0b57e012342f92ba8fae91876fb198b9a7348fe7cd7050eae306b323dc8cc4fb35c0c034a6c3ede203fb6380c68ab1fdb528f02ba59cf2437ff4757be095ea0aae5d5085aee8a57edcfa4d4acde6b628b1a9a40baf6bbcea304774b269524ad676a6b03c93a546a8940fa2e760de3b665593ec41fd8e8d34713e1a624b0a871f57d6b3ef6fb19f3127ed381dcd91d0b531f51c36b40c6bee17988f56d95b9b067e4f0b5e2e4b081e9acb28280e370632a69f239a53bebeebdfbabafda0b042aa14fd28c7bad741f1a75313b0f829c359bba4a902e029bfa63ad96626a94d2ca221bb0895787d7620f81033c24915cdbcec076d59ca677b83cf60404b9ed57de12a33622d9482669ede9d26fde97adab5df132fdd53f4ed98a332263333dc0ecd6ec49bea67e77684c2816effe59ab379b365b9649caefda51acc381092e51771440737a53138f7b622f3807b70f9048e34b3fd8a3b967cd0e610e721aa3b6ab37ad8338669b821e105d4c33c419aa6619040f49a99869bde7c6eeeaf01777cafba31d03e8b5db2f2a1094eef500b587df270220c06ed70af4c20467af4a71fcd6b9b43a135ae92506e8779d974409a740351da7e538aa5b8e4228e5a3eabaec2fd6af01b74c11dd71c909c2b077d402b534de31a103bf93dc64b1a153ae8e1ec28c44f714babbe9e9c90c402644bd10643b14e8333ed0ead6d51c1ba520f69281a390f1d32fce88d7975ee294da2349c2df162cfaacc9c1d83e7c758b431c75e4207c42c0a858cb958d7ae13cd47dcd9013774d145b4c979681ee7e7797d75a64ec46ba6c907dc02430f5be7e766b0e2d0c2bb5ac4889a", @ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="258cbfaa332949573586e7ab735ca83c5af51dff4a70da"], 0x0, 0xd378, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x611c}]}) futex(&(0x7f0000000140), 0x100, 0x1, 0x0, 0x0, 0x1000008) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "52af8f860849f2fd", "d4c94578ae3adb9cf7c76e5f81b1d20f", "ac490aa0", "84b8c0ebe5926975"}, 0x28) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000540)={0x0, 0x4, 0x3}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000540)={0x0, 0x4, 0x3}) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000340)=@ethtool_rxfh={0x47, 0x8, 0xdd2d, 0xfffffffe, 0x2, "9c0900", 0x4, [0x7f, 0x8, 0x7, 0x0, 0x9, 0x5]}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000340)=@ethtool_rxfh={0x47, 0x8, 0xdd2d, 0xfffffffe, 0x2, "9c0900", 0x4, [0x7f, 0x8, 0x7, 0x0, 0x9, 0x5]}}) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffff802, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3019, &(0x7f0000000740), 0x0, 0xbaf, &(0x7f0000000a40)="$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") socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x5, 0xffe5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(r6, &(0x7f00000002c0)='0', 0x1) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) 29.265038812s ago: executing program 0 (id=209): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x90408, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x22, 0x548, &(0x7f00000011c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340)}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r1, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x44, 0x5a, 0x80, 0x0, 0x1, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x6, 0x91}, 0x8088, 0x9, 0x6, 0x9, 0x5, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3d45}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x4}, 0x838, 0x0, 0x3, 0x0, 0x40000000008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0, 0x100000000000001, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000007000000010001000900000005000000", @ANYBLOB="00000000000001150000", @ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8486, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffe, r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x3ff, 0x3, 0x1}) getpid() unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file1'}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 28.486239421s ago: executing program 0 (id=217): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0x5411, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) r2 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_writev(r2, &(0x7f0000001700)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0xed6, 0x15) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000180000"], 0x14}}, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5, 0x0, r0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xa1, 0x100000001}, 0x1008d9, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) 27.893016666s ago: executing program 0 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x57) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) 26.837641073s ago: executing program 0 (id=229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") 26.163567939s ago: executing program 0 (id=236): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x62) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0) write(r0, &(0x7f00000001c0)='2', 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x9, 0xe1, 0x0, 0x5, 0x208a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x2, @perf_bp={0x0, 0x9}, 0x106414, 0x108, 0x11000, 0x5, 0x2, 0x90000011, 0x40, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="48010000100001002cbc700000000000ff0200000000004947b1d740994c8239000000000000000001ac1e01010000000000000000000000000000ecdf000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141433000000000000000000000000000000023200000064010100000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000ffffffffffffffff0408400000000000090000000000000092020000000000000000b01c00000000feffffff00000000000000000a0004002800000000000000580002006362632863616d656c6c69612900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x148}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x3}, 0xe) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0x0, 0x20, @scatter={0x5, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000640)=""/203, 0xcb}]}, 0x0, 0x0, 0x4e20, 0x0, 0x1, 0x0}) 26.12168608s ago: executing program 32 (id=236): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x62) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0) write(r0, &(0x7f00000001c0)='2', 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x9, 0xe1, 0x0, 0x5, 0x208a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x2, @perf_bp={0x0, 0x9}, 0x106414, 0x108, 0x11000, 0x5, 0x2, 0x90000011, 0x40, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="48010000100001002cbc700000000000ff0200000000004947b1d740994c8239000000000000000001ac1e01010000000000000000000000000000ecdf000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141433000000000000000000000000000000023200000064010100000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000ffffffffffffffff0408400000000000090000000000000092020000000000000000b01c00000000feffffff00000000000000000a0004002800000000000000580002006362632863616d656c6c69612900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x148}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x3}, 0xe) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0x0, 0x20, @scatter={0x5, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000640)=""/203, 0xcb}]}, 0x0, 0x0, 0x4e20, 0x0, 0x1, 0x0}) 4.939527137s ago: executing program 5 (id=396): r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x1104800, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC=r0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)={0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="5800b4601400a6d427323bc6e020631af87c2729e74a75754be5472545b45602117fffffff81", 0x26}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$inet6(r4, &(0x7f00000008c0)={&(0x7f0000000140)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000001c0)="0a81", 0x2}, {&(0x7f0000000380)="75695a0bf23e7c50a95fa730c0e7494328c1192a6a73daa9740d2d26de2d8477d963838b32975218d66dde0d73f93279211abaa1c2eac69925433d172396e2b967d70b31e2e0aacf56cc05ba1cb11f7657f12cbd7429a811d424563ae5722f9769c8dc083c629f868121c3c31719c3f7312186f99959c90e290f2f65b30ae5b71b95896907453d3a3cf9a2d5d128aaabea3b33830a80bdcd16f75d0abaf0802dfa42117f4e6f0750", 0xa8}, {&(0x7f00000004c0)="a6bbbff1f621e2c7dab7d01ae14e435295a47dd02e058ef56a58deb91b441228cdabf40d5efb0240", 0x28}, {&(0x7f0000000500)="6f5be344df46e095107ac5935cb202defc36f7318c81e2bada284d636a8416c0d7fa1e95cb172c58e7d41f58695b7c85eee0ff50e0f25d3904965ef7753642749b8528d2eddce134b7ee00bd45fe98d1dc023d340d207ee8b8ae02858531795b87041d0d6e4a395bd0a9d7db01cc137c3c6dc40d5e6fd5e672bc8511d3bbe0330541e973c95523555a9195376d208b5246475acf6a8546b47e33f50cca9b22415551f65252f90269039dc5ea1a25250b36b8a739a7d76d87530b54fe89281e004766ae746466834a114d5c79b4050a8b81741adfaf152dcce22947d40ca7c6e177ba8f66041a9b2199", 0xe9}, {&(0x7f0000000600)="d1a45f93a9867bb7ec2d83d43433cd596cb1b72aeb84902b902cce624181864ea31115", 0x23}, {&(0x7f0000000640)="9948681be711ee489d2a180479fd13e667b8167d431a8584bfaebfdbb141a0baa8f593309189c2266b912c3c1aa814c9750869f5a36acae1953485468fb8002583d739e6d96e3f9ed5e3dad989964dd86757d05f6757efc5c213c74520af5826a5dafc9b0494da8cdf76ca98918794d9d7c617e0b58e8fe825e01cc6fa5c84aea090a3893d6d988352af61d79365fbba5488f548b2cb2c58977897fc3275592bbe", 0xa1}], 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x140}, 0x40000) r7 = gettid() r8 = socket$inet6(0xa, 0xa, 0x100) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x2, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) fcntl$setpipe(r10, 0x407, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x2, 0xffffffffffffffff, 0x800009, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)=r3) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x0) pipe(&(0x7f00000000c0)) 4.179495256s ago: executing program 2 (id=401): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x4000, 0x0, 0x0, 0xf, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x499ab632b05070f6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1000000000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x7a184, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x250a, 0x0, 0x7, 0x4, 0x6, 0x4, 0x3}, 0xffffffffffffffff, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) close(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000002d80)=ANY=[], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}, {r2, 0x1010}], 0x2, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 4.085944028s ago: executing program 5 (id=403): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES32], 0x64}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x84042, 0x14b) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = semget$private(0x0, 0x1, 0x3) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000140)=[0x7]) semtimedop(r9, &(0x7f00000002c0)=[{0x0, 0x1, 0x1800}, {0x3, 0x9, 0x800}], 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x1a0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x108, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x0, [0x5, 0x5, 0x6, 0x4, 0x0, 0x2], 0x3, 0x4}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4a) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, 0x8, 0x0) 3.083558864s ago: executing program 5 (id=409): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) unshare(0x2a020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x20, 0x20, 0x3, 0x3}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r2, 0x8a, "e3daa579969c82200260c430789a643d851d748e575fc390770aeeb5e0300c16c34527a6988a41c3f68bdfcded51a87e541b1e1666e38fb3695d76fcecea9deed28769c5e75c2b30984e3968a08689defd946c94ee526825cc8949101a886ec0858cdea921c3315912cb7c1f9446b1e48f9d857a895fc9ab040af7d0bc6f6806fcd166ebbcc0a4a7f714"}, &(0x7f00000003c0)=0x92) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x3010}], 0x1, 0x0, 0x0, 0xfffffffffffffed9) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000001c0)='key_or_keyring:\xd8Ou\xed\xd7\x92\x83\f\xb9\r\xa8N\v\xeayK>\xe4r\xd3H\xf7\xda_\xaf\xb6K\xa0\xb6j\xb0Pc\xfd\x04\xf0\xc1\xf2\xc5\xf6\xe7~:X\xbb65\xa0\xa8\xe7\x01\x15\xe9<8+\xcf\xadF~\xc3o\x04\xf6<6-A\x9a1\xa3le\xafuU\x96?\xee-\x89Oq\x131j\x8f\xa4\x982\t\xe8\xb4\xea\xe1\x84Fk\xa4\x86~&Q\xda\xf6\x04\x1b\f\x90+\xff\xcf\x05u&>/]o\x9e\x91S\x85Nq:\xbc\x16>M\xd2_r\xeenTf\xde\x98\xb5\xe9<\x8f;\t\xf9=\x91\x14\x95\x97\xcdmG%\xed\t\xa7N\xb4\x85@\xe9\xeb,\"\xd1R\xcb\x03\xc0\xbe\xe2\x14\xe3\x84\xf3\xa2>Z\xa6\xc4\xfb2\xd2\xaa\x89\x12\xc3)m\xc5j\xaf\xe5n|\xfcD\xfc\xb5R\x1d\x87\xcfW5\xc7!\\\x11\x88\xa5\a\x0f\xcf\xa2q\x8eC') clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6b, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0xfe, 0x0, 0x8000, 0x9, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x1000, 0x2000000000008, 0x9, 0x1000000003, 0x8000000000005a, 0x7}) 2.999352386s ago: executing program 1 (id=410): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x90408, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x22, 0x548, &(0x7f00000011c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340)}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r1, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x44, 0x5a, 0x80, 0x0, 0x1, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x6, 0x91}, 0x8088, 0x9, 0x6, 0x9, 0x5, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3d45}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x4}, 0x838, 0x0, 0x3, 0x0, 0x40000000008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0, 0x100000000000001, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000007000000010001000900000005000000", @ANYBLOB="00000000000001150000", @ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8486, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffe, r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x3ff, 0x3, 0x1}) getpid() unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file1'}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.976616086s ago: executing program 4 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000280)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) (async) unshare(0x8040480) r1 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, r1, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd17ad0fd6d8d6b96, @perf_config_ext={0x8, 0x8}, 0x2, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6836}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9b, 0x7, 0x2, 0xe0, 0x0, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x91d, 0x5}, 0x9359423ad6c21d12, 0x4, 0x25f, 0x2, 0x8000000000000001, 0x80000001, 0x7e, 0x0, 0xfff, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) (async) mmap$xdp(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x100010, r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e0001000000"], 0x28}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) 2.793977241s ago: executing program 4 (id=412): openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) 2.744741352s ago: executing program 3 (id=413): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000140003050abd7178fddbdf21021f51ff", @ANYRES32=r2, @ANYBLOB="080002007f000001080008008003"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfcbff, {0x60, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x4008000) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2, 0x8000, 0x2}, 0x20) sendto$inet_nvme_of_msg(r3, &(0x7f0000000640)={@cmd={{0x4, 0x2, 0x48, 0x41}, {@format={0x80, 0x81, 0x1, 0x96, '\x00', 0x7}}}, @void}, 0x80, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES16], 0x1, 0x272, &(0x7f0000000380)="$eJzs3cFqE10UB/CTNk1CN1/XHy4G3LgK6sptkAhiQIhkoSsj1U0rwnQT3TiP4TP4SD5GV92N2IlNWmOtdto7bX4/CHPIPzc5l0AugXuT13fe7+1+OHhXfvsSvV4W7YiiLCN2YiM2o9KaXzeO604sK34GAMCNMR5PB6l74Grl+WC6FRHdX5LJ1yQNAQAAAAAAAAAAcGmr9v/H0Tn7/1unxxcXeI030au7bQDgEv5t//9FVn2aIs8H0+2VxzTt/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSOSrL/8pzbqn7AwDqZ/0HgPXz1+t/+TlJnwBAfXz/B4D18+Llq2eD0Wg4zrJexGExm8wm1bXKnzwdDe9nx3YWow5ns8nmSf6gyrPT+VZsz/OHK/NO3Ltb5T+yx89HZ/Ju7F799AEAAAAAAAAAAAAAAAAAAKAR+tmJlef7+/3f5VW19PsAZ87vt+P/9rVNAwAAAAAAAAAAAAAAAAAAAG60g4+f9qb7+2/zW1r0ohFtXGsRj/78mO78/W9KzzUUETU8T2vYlOmkLhJ/MAEAAAAAAAAAAAAAAAAAwBpaHPpN3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLP4//9ai87yPRFRlJXU0wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuse8BAAD///Lxl9s=") setgroups(0x1, &(0x7f0000000040)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000049c0)='./file1\x00', &(0x7f0000004a00), 0x1000) gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000480)={[{@data_journal}, {@resuid={'resuid', 0x3d, r7}}, {@data_ordered}, {@nombcache}, {@delalloc}, {@quota}], [{@permit_directio}, {@appraise_type}, {@hash}, {@subj_role={'subj_role', 0x3d, 'resuid'}}, {@fowner_lt={'fowner<', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x64, 0x32, 0x66, 0x4, 0x37, 0x30], 0x2d, [0x34, 0x37, 0x38, 0x62], 0x2d, [0x38, 0x39, 0x31, 0x61], 0x2d, [0x61, 0x36, 0x61, 0x64], 0x2d, [0x38, 0x62, 0x65, 0xa0, 0x63, 0x32, 0x52, 0x38]}}}]}, 0x7f, 0x469, &(0x7f0000000580)="$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") lstat(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x0, 0x4, r2, 0x7}, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000600)=0xdf8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000010000000000000003000000bc000800000000009599cfffff000002b2aa633b00000000000000e67a00aa73dbfb72986936a2f496ddd21c57c6c59a42325ad6a490505c905295a0e9bba93d33fb63dc7b176bf6f80c8201b282282102fb1f340c35be0a"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.675886663s ago: executing program 1 (id=414): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "aa2a079ff8bbc68fb71ec3383b8ee97e"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001300)={0x0, 0x2, 0x4, 0x1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x1, 0x2794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x7, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/26, 0xfdef, 0x97) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001200010a00000000000000070000"], 0x14}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x82) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/devices\x00', 0x280980, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b87af) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000001bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001700)={0x13, 0x1, {0x5, @struct={0x200, 0x7ff}, 0x0, 0x8000, 0x1, 0x7, 0x9, 0x7f, 0x0, @struct={0x9, 0x7}, 0x100000, 0x8, [0x7cd0, 0x5, 0x5, 0xfffffffffffffff9, 0xf52, 0x730]}, {0x6, @struct={0x8, 0xb041}, r1, 0x3, 0x2, 0x1, 0x5, 0x9, 0x3, @usage=0xffffffffffffffff, 0xff, 0xffffffff, [0x4, 0x9, 0x9, 0x0, 0x1, 0x6e8e]}, {0xfffffffffffffffa, @usage=0x3, r2, 0x7, 0xa2c, 0x7fffffffffffffff, 0x3, 0x7, 0x64, @usage=0xd, 0x118e, 0xf, [0xb44, 0x7, 0xfffffffffffffffe, 0xee, 0x5, 0x9]}, {0x3, 0x67b5}}) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) 2.467690809s ago: executing program 4 (id=415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r2 = dup(r1) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/30, 0x1e}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.467256639s ago: executing program 2 (id=416): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x1) 2.451244539s ago: executing program 2 (id=417): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x0, 0x800b, 0xfffffff0, 0x8, 0x6, 0x9, 0x81, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x10000, @loopback, 0x8}}}, 0x84) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x22, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000380)={{0x5, 0xff}, {0x2, 0x1}, 0x953, 0x4, 0x4}) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/231, 0xe7}, 0xcb}], 0x1, 0x10002, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe000, 0x0, &(0x7f0000ff2000/0xe000)=nil) sendto(r0, &(0x7f0000000400)="fcbf352e855e30540df05b73c58eda93bc6e2ac1112e97af8576bda69810be751816391f1512e475980d20e7e6f1c1f24e81dda5d7baee16d212fc6447ebc4e6243a6d726da3fded56935baaae306f594868c6f1535d34a863c54c3cc697fd04e55548bfebdeff7111ab442ed9e06703bbc74bbc3bddd0e56e56b90934fcdcaf58c34abdcd89ebe0b4b8ea05e111e9948119c1c17feccef7130583472313f3912675f69b567db8", 0xa7, 0x48001, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000008e07ab9700"], 0x48) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 2.42095979s ago: executing program 4 (id=418): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) (fail_nth: 1) 2.196787016s ago: executing program 4 (id=419): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x3, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000004000000002bcfea8fe93b3b3600"], 0x0, 0x26, 0x0, 0x3}, 0x28) fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xffffc000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x80) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) write(r2, &(0x7f00000006c0)="00ecfd8a6dd337", 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000540)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@errors_remount}, {@nodiscard}, {@nobarrier}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xd, {0x3, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xf, 0xfff9}, {0x6, 0x5, 0x1, 0x48, 0x2}]}) 2.196549586s ago: executing program 2 (id=420): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='active', 0x6) syz_emit_ethernet(0xeb, &(0x7f0000000000)={@broadcast, @empty, @void, {@x25={0x805, {0x1, 0x3, 0x0, "9c50e236e60363968d20bd0df20f8b420d1c3ade80c64c7bf8fcf40735b53b94a8bf408e1a1373e130f5467c13611460134277e7384fa9ae7ee2f20fa28430b841751015834c08af06c5a32f68d85ecf5de800ecb4de75861fd6318ec725bd8ea0b264b4b91d9a566f4ba778f9e7507568969f83838db1017765f51e8a4364988e1ebcf3cca9ec10beb2bdf7cefaeaeb75f3ff83fa393771c9b9a61bdb3eb82a097dfd3244279a28500175fddf816fb6fb6b263ff8c98af760bfb305277ae058459ae05fecdede5da953ae3cc2f3a2c3595a5561e3f0ec0118e4"}}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.143970967s ago: executing program 1 (id=421): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x400, 0x5, 0x7, 0x7ffc0001}]}) r1 = syz_clone(0x26941680, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f000003e000/0x4000)=nil, 0x4000, 0x2000004, 0x10010, r3, 0x64d66000) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000040)=0x9) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ptrace$setopts(0x4206, r1, 0x1, 0x100010) unshare(0x24140000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x200001d, 0x2}, &(0x7f0000000200)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000340)={0x13, 0x4, {0x4, @struct={0x80000002, 0x9}, 0x0, 0x8001, 0x0, 0x3ff, 0x88c7, 0x4, 0x62, @usage=0xbca6, 0x1, 0x100007, [0x5, 0x3, 0xa, 0xd, 0x28000000000000, 0x1000]}, {0x6c1, @struct={0x5, 0x6}, 0x0, 0x9, 0x3, 0x2, 0x400, 0x5, 0x0, @struct={0x3, 0x81}, 0xffffffb7, 0xc2d, [0x2, 0xfffffffffffffe00, 0x9, 0x8000008, 0x4, 0x1]}, {0xa0a, @struct={0xa, 0x57}, 0x0, 0x5, 0x7, 0x800000, 0x8, 0x61a, 0x10, @struct={0x7, 0xfffffb3b}, 0x5, 0x7fff, [0x2c6, 0x0, 0x7fffffffffffffff, 0xc, 0x2, 0x9]}, {0x3, 0x6, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000740)={r6, 0x9, 0x4b, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf0fbf910ff710be7, 0x110, r3, 0xec776000) setreuid(0x0, 0x0) r7 = getpid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, r7, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000004) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x480000f, 0x2010, r5, 0xee80000) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r8, &(0x7f0000001f80)=""/4098, 0x1002) 2.072689339s ago: executing program 5 (id=422): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.891212113s ago: executing program 1 (id=423): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x5, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff81000000000000020000000008", 0x1d) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000004c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) setgroups(0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 1.877970233s ago: executing program 3 (id=424): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x90408, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x22, 0x548, &(0x7f00000011c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340)}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r1, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x44, 0x5a, 0x80, 0x0, 0x1, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x6, 0x91}, 0x8088, 0x9, 0x6, 0x9, 0x5, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3d45}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x4}, 0x838, 0x0, 0x3, 0x0, 0x40000000008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0, 0x100000000000001, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000007000000010001000900000005000000", @ANYBLOB="00000000000001150000", @ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8486, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffe, r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x3ff, 0x3, 0x1}) getpid() unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file1'}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.471405813s ago: executing program 1 (id=425): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = memfd_secret(0x80000) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x204000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8=0x0, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x120b, &(0x7f0000002d00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7']) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) ftruncate(r3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@fwd={0x8}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x80}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000480)=""/42, 0x47, 0x2a, 0x1, 0x2, 0x10000, @value=r2}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r4}, 0x38) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000380)=0x2, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, 0x0, 0x10044890) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001d80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80049000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "644a9c8e58f1731d2b25bd307c1522c2"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc417a6d3be582570316cda8e"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040800) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r7, 0x0, 0x810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) 1.394177086s ago: executing program 5 (id=426): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100918, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x547052430a225ce3) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d500000000000009500000000000000dad0ae437202fe29729e5361e283f4c4ddf4f91558ee5ce40394c5f0063281d106d9692809f9019b91aa47941e12669ec84cb12e51a175b929b9eb3ed662fd9448d2cf8c101279664c6e0e70869cd88420cb289b7fdbd62b760fd36c31a0919c482808100058572aea56c1b636001f34db40ee898d88ee30e8942a975c7806f0cfb12f6127edd280f96e41d54100b2ced86c59bb6524d0d985c6eaef2ea15d1ceadcf5cdde89b6c76ea58af225f8a9c763767491566c6a3627011463fb7267715090bc94407ad0962476b14a851594175b41576cbd060faa5ae19d1d433bad4e5aa7f338f511028103bf634e003cce56be57cd177878f429"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x38000, &(0x7f0000000200)='/dev/net/tun\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206059b868a100000000000070000001c0007800800114000000000080012400000ffff08000640000100000500010006000000050005000200000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4004084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 1.177591471s ago: executing program 3 (id=427): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") creat(&(0x7f0000000140)='./file0\x00', 0x1) 1.010690345s ago: executing program 4 (id=428): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x22}}, {@data_journal}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000640)="$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") (fail_nth: 18) r3 = semget$private(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r7, 0x917}, 0x14}, 0x1, 0x620b}, 0x40000) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x8}], 0x1, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000400)=[0xb17]) r8 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1ff00}], 0x14, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_register(r9, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8000, 0x3a, 'exp4\x00', 0x3a, 'syz3', 0x3a, './mnt/trace_marker'}, 0xffffff34) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300), 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 912.196607ms ago: executing program 5 (id=429): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r1, &(0x7f0000000380)=""/170, 0xaa, 0x40002021, &(0x7f0000000500)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37"], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) poll(&(0x7f0000000040)=[{r1, 0x1000}, {r0, 0x100}], 0x2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) unshare(0xa000400) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 911.393647ms ago: executing program 3 (id=430): r0 = socket$kcm(0x11, 0x4, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"ec66e53819bb6ebd9314c0072142ef5c", 0x0, 0x0, {0x5, 0x972}, {0x4c5, 0x5}, 0x5, [0x9, 0x80, 0x7fffffffffffffff, 0x1b, 0x23e, 0x9, 0x4, 0x1, 0x58, 0x8, 0xd, 0x7, 0x1, 0x81, 0xfffffffffffffffc, 0xb344]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000400)=r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r4, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000000000001000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2) 627.388884ms ago: executing program 3 (id=431): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "aa2a079ff8bbc68fb71ec3383b8ee97e"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001300)={0x0, 0x2, 0x4, 0x1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x1, 0x2794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x7, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/26, 0xfdef, 0x97) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001200010a00000000000000070000"], 0x14}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x82) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/devices\x00', 0x280980, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b87af) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000001bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001700)={0x13, 0x1, {0x5, @struct={0x200, 0x7ff}, 0x0, 0x8000, 0x1, 0x7, 0x9, 0x7f, 0x0, @struct={0x9, 0x7}, 0x100000, 0x8, [0x7cd0, 0x5, 0x5, 0xfffffffffffffff9, 0xf52, 0x730]}, {0x6, @struct={0x8, 0xb041}, r1, 0x3, 0x2, 0x1, 0x5, 0x9, 0x3, @usage=0xffffffffffffffff, 0xff, 0xffffffff, [0x4, 0x9, 0x9, 0x0, 0x1, 0x6e8e]}, {0xfffffffffffffffa, @usage=0x3, r2, 0x7, 0xa2c, 0x7fffffffffffffff, 0x3, 0x7, 0x64, @usage=0xd, 0x118e, 0xf, [0xb44, 0x7, 0xfffffffffffffffe, 0xee, 0x5, 0x9]}, {0x3, 0x67b5}}) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) 397.22959ms ago: executing program 2 (id=432): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x10702, 0x35, 0x6, 0x8, 0x7, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x114c2, 0x9, 0x0, 0x9, 0x800000, 0x44, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x6ab3, &(0x7f0000000180)={0x0, 0x6a1e, 0x800, 0x0, 0x3a7, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x10, r1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r5 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000844000480180001800800000c00028008006654b112cef12001400000000428000180080001006e6174001c000280080001400000000008000340cf421f08ef4500000014080002400000000208000a40000000010900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setuid(0xee01) setfsuid(0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0xffeb}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x6020400) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 208.717315ms ago: executing program 1 (id=433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x200000, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 53.684579ms ago: executing program 2 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1000) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41) (async, rerun: 64) timer_create(0x0, &(0x7f0000000b00)={0x0, 0x37, 0x2, @thr={&(0x7f0000000240)="a2430017839ad22ed69cdbb48f4c032564576a837e1e93dc40736a22cf609293a69bded5ea170f5a032702f16214930b26d7e8d3ff7000bcf85f00edcdb0dcdf0596115433b1c5fa4a5f5367e360d7237d8088027178fe8f", &(0x7f00000002c0)="b04639109a0d7b3374d474bde402c2b23654df0c26c3fa"}}, &(0x7f0000000b40)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) readv(r4, &(0x7f0000001740)=[{&(0x7f0000000040)=""/34, 0x32}], 0x128) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000340)="$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") (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x800) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) (async, rerun: 32) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2c, r5, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000004) 0s ago: executing program 3 (id=435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)) (async) r0 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_setup(0x239f, &(0x7f0000000380)=0x0) (async, rerun: 32) r3 = eventfd2(0x2, 0x80800) (rerun: 32) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0, 0x0, 0x800002, 0x0, 0x0, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x9841, r3, 0x0, 0x0, 0x5, 0x0, 0x1, r3}]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e06030014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028008000200", @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x1, 0x6, 0x8001, 0x7fff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'tunl0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x6}, 0x11641c, 0x8001, 0x10ffe, 0x5, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x3) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffff3, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a89a46ea1d93705b7c398f79662ef5650bcf35176cc3570642ceae1bf3b27c584d04e4f0bcc1df8ce4985d179e4ac86882b5838df6471b78472a02771fb9916b85d7b909da79"], 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r8 = socket(0x10, 0x3, 0xa) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r8, r9, 0x0, 0x7fffffffffffffff) setuid(0xee01) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, 0x0) kernel console output (not intermixed with test programs): 1 - 0 [ 36.784093][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.784270][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.784317][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.789536][ T3300] veth0_macvtap: entered promiscuous mode [ 36.819489][ T3300] veth1_macvtap: entered promiscuous mode [ 36.858454][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.876092][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.877133][ T3303] veth0_vlan: entered promiscuous mode [ 36.892757][ T3303] veth1_vlan: entered promiscuous mode [ 36.943654][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.943750][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.943876][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.943922][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.997864][ T3303] veth0_macvtap: entered promiscuous mode [ 37.030885][ T3303] veth1_macvtap: entered promiscuous mode [ 37.062217][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.073494][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.115430][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.115567][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.115617][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.115708][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.379015][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 37.379085][ T29] audit: type=1400 audit(1788455242.740:175): avc: denied { create } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.413995][ T29] audit: type=1400 audit(1788455242.780:176): avc: denied { create } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.420509][ T3513] loop1: detected capacity change from 0 to 512 [ 37.509463][ T29] audit: type=1400 audit(1788455242.870:177): avc: denied { map_read map_write } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.519596][ T3513] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 37.533110][ T3513] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.542667][ T3513] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.543359][ T3513] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.2: Block bitmap for bg 0 marked uninitialized [ 37.567356][ T29] audit: type=1400 audit(1788455242.930:178): avc: denied { read write } for pid=3520 comm="syz.4.5" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.567401][ T29] audit: type=1400 audit(1788455242.930:179): avc: denied { open } for pid=3520 comm="syz.4.5" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.570104][ T3513] loop1: lost filesystem error report for type 5 error -117 [ 37.573652][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 37.573743][ C0] EXT4-fs (loop1): initial error at time 1788455242: ext4_read_block_bitmap_nowait:521 [ 37.573815][ C0] EXT4-fs (loop1): last error at time 1788455242: ext4_read_block_bitmap_nowait:521 [ 37.576046][ T3513] EXT4-fs (loop1): Remounting filesystem read-only [ 37.576327][ T3513] EXT4-fs (loop1): 1 orphan inode deleted [ 37.593970][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.635268][ T29] audit: type=1400 audit(1788455242.970:180): avc: denied { mount } for pid=3511 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.635364][ T29] audit: type=1400 audit(1788455242.970:181): avc: denied { prog_run } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.732733][ T29] audit: type=1400 audit(1788455243.090:182): avc: denied { create } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.752912][ T29] audit: type=1400 audit(1788455243.110:183): avc: denied { write } for pid=3511 comm="syz.1.2" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.795395][ T29] audit: type=1400 audit(1788455243.110:184): avc: denied { open } for pid=3511 comm="syz.1.2" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.838692][ T3513] syz.1.2 (3513) used greatest stack depth: 10816 bytes left [ 37.859805][ T3526] tipc: Started in network mode [ 37.859909][ T3526] tipc: Node identity d27fd79fa9df, cluster identity 4711 [ 37.860435][ T3526] tipc: Enabled bearer , priority 0 [ 37.909006][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.911169][ T3526] syzkaller0: entered promiscuous mode [ 37.911229][ T3526] syzkaller0: entered allmulticast mode [ 37.960285][ T3531] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8'. [ 37.970423][ T3531] PM: suspend entry (deep) [ 38.064012][ T3528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.075751][ T3530] loop2: detected capacity change from 0 to 128 [ 38.087641][ T3530] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.100540][ T3530] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.218917][ T3530] tipc: Resetting bearer [ 38.263086][ T3533] loop1: detected capacity change from 0 to 1024 [ 38.285002][ T3525] tipc: Resetting bearer [ 38.293800][ T3525] tipc: Disabling bearer [ 38.302668][ T281] Filesystems sync: 0.332 seconds [ 38.416174][ T3531] Freezing user space processes [ 39.157586][ T3528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.227867][ T3528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.278135][ T3528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.363397][ T3531] Freezing user space processes completed (elapsed 0.947 seconds) [ 39.363455][ T3531] OOM killer disabled. [ 39.363466][ T3531] Freezing remaining freezable tasks [ 39.365019][ T3531] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 39.365120][ T3531] printk: Suspending console(s) (use no_console_suspend to debug) [ 39.373972][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.374094][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383758][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383951][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.445160][ T3531] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 39.445211][ T3531] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 39.445323][ T3531] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 39.445385][ T3531] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 39.445513][ T3531] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 39.445594][ T3531] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 39.445628][ T3531] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 39.445744][ T3531] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 39.446631][ T3531] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 39.446675][ T3531] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 39.446830][ T3531] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 39.446940][ T3531] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 39.447000][ T3531] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 39.447080][ T3531] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 39.447118][ T3531] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 39.447162][ T3531] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 39.485146][ T345] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 40.138815][ T3531] ACPI: PM: Preparing to enter system sleep state S3 [ 40.138946][ T3531] ACPI: PM: Saving platform NVS memory [ 40.139072][ T3531] Disabling non-boot CPUs ... [ 40.147556][ T3531] smpboot: CPU 1 is now offline [ 40.152657][ T3531] ACPI: PM: Low-level resume complete [ 40.152803][ T3531] ACPI: PM: Restoring platform NVS memory [ 40.168102][ T3531] Enabling non-boot CPUs ... [ 40.168342][ T3531] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 40.172688][ T3531] CPU1 is up [ 40.172898][ T3531] ACPI: PM: Waking up from system sleep state S3 [ 40.198757][ T3541] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 40.402009][ T3531] OOM killer enabled. [ 40.402028][ T3531] Restarting tasks: Starting [ 40.448980][ T3531] Restarting tasks: Done [ 40.449048][ T3531] random: crng reseeded on system resumption [ 40.465266][ T3531] PM: suspend exit [ 40.468627][ T3533] ======================================================= [ 40.468627][ T3533] WARNING: The mand mount option has been deprecated and [ 40.468627][ T3533] and is ignored by this kernel. Remove the mand [ 40.468627][ T3533] option from the mount to silence this warning. [ 40.468627][ T3533] ======================================================= [ 40.471384][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.642121][ T3538] loop3: detected capacity change from 0 to 512 [ 40.668122][ T3528] syz.0.7 (3528) used greatest stack depth: 10624 bytes left [ 40.699495][ T3533] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 3314649325744685060)! [ 40.741709][ T3641] loop0: detected capacity change from 0 to 1024 [ 40.746105][ T3641] EXT4-fs: Ignoring removed orlov option [ 40.772778][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.774889][ T3533] EXT4-fs (loop1): group descriptors corrupted! [ 40.788626][ T3538] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 41.149814][ T3538] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.192636][ T3538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.219716][ T3538] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.10: Block bitmap for bg 0 marked uninitialized [ 41.219750][ T3538] loop3: lost filesystem error report for type 5 error -117 [ 41.220552][ T3538] EXT4-fs (loop3): Remounting filesystem read-only [ 41.220735][ T3538] EXT4-fs (loop3): 1 orphan inode deleted [ 41.223002][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.276210][ T3651] netlink: 'syz.1.14': attribute type 21 has an invalid length. [ 41.276240][ T3651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.278696][ T3651] netlink: 'syz.1.14': attribute type 5 has an invalid length. [ 41.278831][ T3651] netlink: 'syz.1.14': attribute type 6 has an invalid length. [ 41.278883][ T3651] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.290966][ T3651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.344503][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.133472][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.223721][ T3666] loop3: detected capacity change from 0 to 512 [ 42.228502][ T3666] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 42.231372][ T3666] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.231576][ T3666] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.235339][ T3666] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.17: Block bitmap for bg 0 marked uninitialized [ 42.235393][ T3666] loop3: lost filesystem error report for type 5 error -117 [ 42.237844][ T3666] EXT4-fs (loop3): Remounting filesystem read-only [ 42.237895][ T3666] EXT4-fs (loop3): 1 orphan inode deleted [ 42.248864][ T3666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.253551][ T3637] loop2: detected capacity change from 0 to 1764 [ 42.290799][ T3637] iso9660: Unknown parameter '…‚' [ 42.343536][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.418260][ T3651] syz.1.14 (3651) used greatest stack depth: 10304 bytes left [ 42.444761][ T3675] loop1: detected capacity change from 0 to 512 [ 42.595824][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 42.595851][ T29] audit: type=1400 audit(1788455247.953:213): avc: denied { create } for pid=3636 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.614819][ T3681] Zero length message leads to an empty skb [ 42.631962][ T29] audit: type=1400 audit(1788455248.043:214): avc: denied { create } for pid=3674 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.642519][ T29] audit: type=1400 audit(1788455248.053:215): avc: denied { bind } for pid=3674 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.673806][ T29] audit: type=1400 audit(1788455248.063:216): avc: denied { write } for pid=3674 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.970688][ T29] audit: type=1400 audit(1788455248.363:217): avc: denied { name_connect } for pid=3636 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 43.304947][ T3672] loop3: detected capacity change from 0 to 512 [ 43.388130][ T3672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 43.391930][ T29] audit: type=1400 audit(1788455248.803:218): avc: denied { create } for pid=3716 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.397112][ T3672] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.397376][ T3672] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.398643][ T3672] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.20: Block bitmap for bg 0 marked uninitialized [ 43.398719][ T3672] loop3: lost filesystem error report for type 5 error -117 [ 43.399105][ T3672] EXT4-fs (loop3): Remounting filesystem read-only [ 43.399161][ T3672] EXT4-fs (loop3): 1 orphan inode deleted [ 43.404558][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.407911][ T29] audit: type=1400 audit(1788455248.803:219): avc: denied { create } for pid=3716 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.441734][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.477123][ T29] audit: type=1400 audit(1788455248.883:220): avc: denied { create } for pid=3722 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.477163][ T29] audit: type=1400 audit(1788455248.883:221): avc: denied { bind } for pid=3722 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.580106][ T29] audit: type=1400 audit(1788455248.983:222): avc: denied { create } for pid=3716 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 43.756230][ T3734] loop4: detected capacity change from 0 to 512 [ 43.781218][ T3734] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 43.782349][ T3734] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.782701][ T3734] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.788367][ T3734] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.32: Block bitmap for bg 0 marked uninitialized [ 43.788416][ T3734] loop4: lost filesystem error report for type 5 error -117 [ 43.789695][ T3734] EXT4-fs (loop4): Remounting filesystem read-only [ 43.789885][ T3734] EXT4-fs (loop4): 1 orphan inode deleted [ 43.790938][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.843259][ T3741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 43.843288][ T3741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 43.843345][ T3741] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 43.843368][ T3741] iwpm_hello_cb: Unable to parse nlmsg [ 44.050567][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.072719][ T3723] __vm_enough_memory: pid: 3723, comm: syz.3.31, bytes: 4503599627366400 not enough memory for the allocation [ 44.398081][ T3763] loop3: detected capacity change from 0 to 128 [ 44.424078][ T3756] loop4: detected capacity change from 0 to 128 [ 44.440384][ T3763] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.440652][ T3763] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.459250][ T3756] FAT-fs (loop4): bogus sectors per cluster 7 [ 44.459337][ T3756] FAT-fs (loop4): Can't find a valid FAT filesystem [ 44.523561][ T3762] loop2: detected capacity change from 0 to 128 [ 44.852991][ T3762] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.863903][ T3777] loop4: detected capacity change from 0 to 512 [ 44.864305][ T3762] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.936552][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.936636][ T3777] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.980028][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.192169][ T3760] syz.3.40 (3760) used greatest stack depth: 9344 bytes left [ 45.211640][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.240204][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.451241][ T3808] loop0: detected capacity change from 0 to 512 [ 45.479545][ T3808] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 45.483047][ T3808] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.483143][ T3808] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.483571][ T3808] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.53: Block bitmap for bg 0 marked uninitialized [ 45.483694][ T3808] loop0: lost filesystem error report for type 5 error -117 [ 45.484088][ T3808] EXT4-fs (loop0): Remounting filesystem read-only [ 45.484246][ T3808] EXT4-fs (loop0): 1 orphan inode deleted [ 45.485453][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.531896][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.940739][ T3800] __vm_enough_memory: pid: 3800, comm: syz.3.52, bytes: 4503599627366400 not enough memory for the allocation [ 46.071016][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.072984][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.097801][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 46.294274][ T3848] loop1: detected capacity change from 0 to 1024 [ 46.431406][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.458406][ T3857] loop3: detected capacity change from 0 to 512 [ 46.470395][ T3848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.478456][ T3857] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 46.483513][ T3857] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.483671][ T3857] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.486199][ T3857] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.71: Block bitmap for bg 0 marked uninitialized [ 46.486232][ T3857] loop3: lost filesystem error report for type 5 error -117 [ 46.488380][ T3857] EXT4-fs (loop3): Remounting filesystem read-only [ 46.488431][ T3857] EXT4-fs (loop3): 1 orphan inode deleted [ 46.489044][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.621363][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.820844][ T3869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.864592][ T3869] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.74: Failed to acquire dquot type 1 [ 46.864697][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 46.870072][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.74: corrupted inode contents [ 46.871642][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.871665][ C1] EXT4-fs (loop2): initial error at time 1788455252: ext4_acquire_dquot:7069 [ 46.871696][ C1] EXT4-fs (loop2): last error at time 1788455252: ext4_acquire_dquot:7069 [ 46.878741][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.880016][ T3869] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #16: comm syz.2.74: mark_inode_dirty error [ 46.883867][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.884835][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.74: corrupted inode contents [ 46.888522][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.889593][ T3869] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.74: mark_inode_dirty error [ 46.889741][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.891994][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.74: corrupted inode contents [ 46.892050][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.894020][ T3869] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 46.894161][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 46.894493][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.74: corrupted inode contents [ 46.894517][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.896378][ T3869] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.74: mark_inode_dirty error [ 46.896473][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.898887][ T3869] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 46.898906][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 46.912482][ T3869] EXT4-fs (loop2): 1 truncate cleaned up [ 46.934083][ T3848] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET) [ 46.940005][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.944104][ T3869] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.951017][ T3870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.015893][ T3869] bridge0: port 2(bridge_slave_1) entered listening state [ 47.040576][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.117749][ T3621] IPVS: starting estimator thread 0... [ 47.187130][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.202734][ T3884] IPVS: using max 2160 ests per chain, 108000 per kthread [ 47.252540][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.378673][ T3896] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 47.381273][ T3896] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.381561][ T3896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.383343][ T3896] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:521: comm syz.2.78: Block bitmap for bg 0 marked uninitialized [ 47.383377][ T3896] loop2: lost filesystem error report for type 5 error -117 [ 47.386855][ T3896] EXT4-fs (loop2): Remounting filesystem read-only [ 47.386910][ T3896] EXT4-fs (loop2): 1 orphan inode deleted [ 47.426663][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.551166][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.683183][ T3911] set_capacity_and_notify: 3 callbacks suppressed [ 47.683214][ T3911] loop1: detected capacity change from 0 to 1024 [ 47.723357][ T3911] EXT4-fs: Ignoring removed orlov option [ 47.739224][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.845823][ T3893] loop3: detected capacity change from 0 to 512 [ 48.007930][ T3893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 48.185355][ T3893] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.202467][ T3893] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.213388][ T3893] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.81: Block bitmap for bg 0 marked uninitialized [ 48.216927][ T3893] loop3: lost filesystem error report for type 5 error -117 [ 48.220976][ T3893] EXT4-fs (loop3): Remounting filesystem read-only [ 48.222360][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 48.222383][ C1] EXT4-fs (loop3): initial error at time 1788455253: ext4_read_block_bitmap_nowait:521 [ 48.222410][ C1] EXT4-fs (loop3): last error at time 1788455253: ext4_read_block_bitmap_nowait:521 [ 48.232611][ T3893] EXT4-fs (loop3): 1 orphan inode deleted [ 48.290732][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.388878][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.483062][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 48.483097][ T29] audit: type=1400 audit(1788455253.863:260): avc: denied { create } for pid=3930 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.483176][ T29] audit: type=1400 audit(1788455253.873:261): avc: denied { read } for pid=3930 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.483207][ T29] audit: type=1400 audit(1788455253.873:262): avc: denied { write } for pid=3930 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.529505][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.541603][ T3934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.596014][ T3934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.662957][ T3945] tipc: Started in network mode [ 48.663003][ T3945] tipc: Node identity 3e621f492c, cluster identity 4711 [ 48.663054][ T3945] tipc: Enabled bearer , priority 0 [ 48.663723][ T3945] syzkaller0: entered promiscuous mode [ 48.663741][ T3945] syzkaller0: entered allmulticast mode [ 48.688705][ T3934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.717063][ T3934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.790874][ T3947] loop4: detected capacity change from 0 to 128 [ 48.801516][ T3618] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.804475][ T3947] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.809926][ T3947] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.837723][ T3618] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.868067][ T3620] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.901486][ T3620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.977919][ T3945] tipc: Resetting bearer [ 48.991999][ T3944] tipc: Resetting bearer [ 48.994151][ T3944] tipc: Disabling bearer [ 49.046206][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.118212][ T29] audit: type=1400 audit(1788455254.523:263): avc: denied { read } for pid=3963 comm="syz.0.98" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.118303][ T29] audit: type=1400 audit(1788455254.523:264): avc: denied { open } for pid=3963 comm="syz.0.98" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.151091][ T29] audit: type=1400 audit(1788455254.553:265): avc: denied { connect } for pid=3963 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.152219][ T29] audit: type=1400 audit(1788455254.553:266): avc: denied { write } for pid=3963 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.197318][ T29] audit: type=1400 audit(1788455254.603:267): avc: denied { execute } for pid=3963 comm="syz.0.98" path="/21/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.198596][ T29] audit: type=1400 audit(1788455254.603:268): avc: denied { mount } for pid=3963 comm="syz.0.98" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.215792][ T29] audit: type=1400 audit(1788455254.623:269): avc: denied { search } for pid=3963 comm="syz.0.98" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.288130][ T3950] loop1: detected capacity change from 0 to 512 [ 49.321247][ T3950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 49.340954][ T3950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.354552][ T3950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.360135][ T3950] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.94: Block bitmap for bg 0 marked uninitialized [ 49.360882][ T3950] loop1: lost filesystem error report for type 5 error -117 [ 49.363088][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 49.363111][ C1] EXT4-fs (loop1): initial error at time 1788455254: ext4_read_block_bitmap_nowait:521 [ 49.363149][ C1] EXT4-fs (loop1): last error at time 1788455254: ext4_read_block_bitmap_nowait:521 [ 49.371512][ T3950] EXT4-fs (loop1): Remounting filesystem read-only [ 49.374834][ T3950] EXT4-fs (loop1): 1 orphan inode deleted [ 49.394481][ T3950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.447368][ T3979] loop0: detected capacity change from 0 to 512 [ 49.485109][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.504238][ T3979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.504349][ T3979] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.543566][ T3986] loop4: detected capacity change from 0 to 512 [ 49.559655][ T3987] FAULT_INJECTION: forcing a failure. [ 49.559655][ T3987] name failslab, interval 1, probability 0, space 0, times 1 [ 49.559709][ T3987] CPU: 1 UID: 0 PID: 3987 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.559743][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.559768][ T3987] Call Trace: [ 49.559813][ T3987] [ 49.559824][ T3987] __dump_stack+0x1d/0x30 [ 49.559856][ T3987] dump_stack_lvl+0x95/0xd0 [ 49.559887][ T3987] dump_stack+0x15/0x1b [ 49.559958][ T3987] should_fail_ex+0x262/0x280 [ 49.559986][ T3987] ? resv_map_alloc+0x32/0x190 [ 49.560030][ T3987] should_failslab+0x8c/0xb0 [ 49.560069][ T3987] __kmalloc_cache_noprof+0x7a/0x400 [ 49.560114][ T3987] ? resv_map_alloc+0x32/0x190 [ 49.560221][ T3987] resv_map_alloc+0x32/0x190 [ 49.560265][ T3987] hugetlbfs_get_inode+0x67/0x330 [ 49.560312][ T3987] ? mutex_unlock+0x4e/0x90 [ 49.560353][ T3987] hugetlb_file_setup+0x192/0x3d0 [ 49.560406][ T3987] ksys_mmap_pgoff+0x13f/0x310 [ 49.560451][ T3987] x64_sys_call+0x23b3/0x2550 [ 49.560536][ T3987] do_syscall_64+0x112/0x360 [ 49.560572][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.560602][ T3987] RIP: 0033:0x7fedabe4e159 [ 49.560673][ T3987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.560746][ T3987] RSP: 002b:00007fedaa8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 49.560774][ T3987] RAX: ffffffffffffffda RBX: 00007fedac0d5fa0 RCX: 00007fedabe4e159 [ 49.560794][ T3987] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 49.560812][ T3987] RBP: 00007fedaa8a7090 R08: ffffffffffffffff R09: 0000000000000000 [ 49.560831][ T3987] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 49.560854][ T3987] R13: 00007fedac0d6038 R14: 00007fedac0d5fa0 R15: 00007ffdd4ee9108 [ 49.560932][ T3987] [ 49.603443][ T3986] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 49.603472][ T3986] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e04ce128, mo2=0002] [ 49.603528][ T3986] System zones: 0-1, 15-15, 18-18, 34-34 [ 49.603707][ T3986] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.604883][ T3986] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.105: bg 0: block 15: invalid block bitmap [ 49.604979][ T3986] loop4: lost filesystem error report for type 5 error -117 [ 49.605306][ T3986] EXT4-fs (loop4): Remounting filesystem read-only [ 49.605665][ T3986] EXT4-fs (loop4): 1 truncate cleaned up [ 49.606763][ T3986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.646769][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 49.728783][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.784518][ T4006] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 49.844313][ T3999] bond1: option resend_igmp: invalid value (18446744073709551615) [ 49.844453][ T3999] bond1: option resend_igmp: allowed values 0 - 255 [ 49.852184][ T3999] bond1 (unregistering): Released all slaves [ 49.914099][ T4015] loop3: detected capacity change from 0 to 7 [ 49.916707][ T4015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 49.916766][ T4015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 49.917034][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.917618][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.917912][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.918317][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.918440][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.955886][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.955993][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.956122][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.958686][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 49.958908][ T3292] Buffer I/O error on dev loop3, logical block 0, async page read [ 50.031041][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 50.031093][ T4026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.118'. [ 50.145862][ T4034] loop1: detected capacity change from 0 to 512 [ 50.154603][ T4034] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.155134][ T4034] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.120: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 50.155166][ T4034] loop1: lost filesystem error report for type 5 error -117 [ 50.156012][ T4034] EXT4-fs (loop1): 1 orphan inode deleted [ 50.157016][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.194842][ T4036] loop4: detected capacity change from 0 to 512 [ 50.209475][ T4036] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 50.212997][ T4036] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.213157][ T4036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.215795][ T4036] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.116: Block bitmap for bg 0 marked uninitialized [ 50.215831][ T4036] loop4: lost filesystem error report for type 5 error -117 [ 50.218002][ T4036] EXT4-fs (loop4): Remounting filesystem read-only [ 50.218118][ T4036] EXT4-fs (loop4): 1 orphan inode deleted [ 50.218621][ T4036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.243842][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.286392][ T4041] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 50.286425][ T4041] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 50.286447][ T4041] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.121'. [ 50.287846][ T4041] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 50.287865][ T4041] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 50.287922][ T4041] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.121'. [ 50.311169][ T4028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.119'. [ 50.330853][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.739001][ T4068] loop0: detected capacity change from 0 to 2048 [ 50.763516][ T4068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.878733][ T4068] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #12: block 2: comm syz.0.129: lblock 0 mapped to illegal pblock 2 (length 1) [ 50.881562][ T4079] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #12: block 2: comm syz.0.129: lblock 0 mapped to illegal pblock 2 (length 1) [ 50.887595][ T4082] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #12: block 2: comm syz.0.129: lblock 0 mapped to illegal pblock 2 (length 1) [ 50.939211][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.102100][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.110859][ T4087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.110944][ T4087] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.137372][ T4092] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 51.137401][ T4092] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 51.137424][ T4092] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.132'. [ 51.141970][ T4092] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 51.142039][ T4092] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 51.142060][ T4092] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.132'. [ 51.684267][ T4109] FAULT_INJECTION: forcing a failure. [ 51.684267][ T4109] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.684314][ T4109] CPU: 1 UID: 0 PID: 4109 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.684364][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.684380][ T4109] Call Trace: [ 51.684390][ T4109] [ 51.684401][ T4109] __dump_stack+0x1d/0x30 [ 51.684437][ T4109] dump_stack_lvl+0x95/0xd0 [ 51.684464][ T4109] dump_stack+0x15/0x1b [ 51.684565][ T4109] should_fail_ex+0x262/0x280 [ 51.684612][ T4109] should_fail+0xb/0x20 [ 51.684648][ T4109] should_fail_usercopy+0x1a/0x20 [ 51.684682][ T4109] _copy_from_user+0x1c/0xb0 [ 51.684713][ T4109] ___sys_sendmsg+0xc1/0x1e0 [ 51.684832][ T4109] __x64_sys_sendmsg+0xd4/0x160 [ 51.684877][ T4109] x64_sys_call+0x22ab/0x2550 [ 51.684959][ T4109] do_syscall_64+0x112/0x360 [ 51.685001][ T4109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.685087][ T4109] RIP: 0033:0x7f59467ce159 [ 51.685112][ T4109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.685145][ T4109] RSP: 002b:00007f5945206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.685199][ T4109] RAX: ffffffffffffffda RBX: 00007f5946a56090 RCX: 00007f59467ce159 [ 51.685215][ T4109] RDX: 00000000200480a4 RSI: 00002000000006c0 RDI: 0000000000000008 [ 51.685232][ T4109] RBP: 00007f5945206090 R08: 0000000000000000 R09: 0000000000000000 [ 51.685252][ T4109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.685271][ T4109] R13: 00007f5946a56128 R14: 00007f5946a56090 R15: 00007fff7e1b44b8 [ 51.685302][ T4109] [ 51.867361][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.023350][ T4127] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 52.023400][ T4127] netlink: 'syz.1.143': attribute type 4 has an invalid length. [ 52.128263][ T4128] event trace: Could not enable event p [ 52.355933][ T4134] FAULT_INJECTION: forcing a failure. [ 52.355933][ T4134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.355979][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.356030][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.356047][ T4134] Call Trace: [ 52.356056][ T4134] [ 52.356066][ T4134] __dump_stack+0x1d/0x30 [ 52.356170][ T4134] dump_stack_lvl+0x95/0xd0 [ 52.356193][ T4134] dump_stack+0x15/0x1b [ 52.356214][ T4134] should_fail_ex+0x262/0x280 [ 52.356282][ T4134] should_fail+0xb/0x20 [ 52.356308][ T4134] should_fail_usercopy+0x1a/0x20 [ 52.356407][ T4134] _copy_from_user+0x1c/0xb0 [ 52.356439][ T4134] ___sys_sendmsg+0xc1/0x1e0 [ 52.356495][ T4134] __x64_sys_sendmsg+0xd4/0x160 [ 52.356543][ T4134] x64_sys_call+0x22ab/0x2550 [ 52.356704][ T4134] do_syscall_64+0x112/0x360 [ 52.356745][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.356775][ T4134] RIP: 0033:0x7f3bc049e159 [ 52.356843][ T4134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.356862][ T4134] RSP: 002b:00007f3bbeef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.356883][ T4134] RAX: ffffffffffffffda RBX: 00007f3bc0725fa0 RCX: 00007f3bc049e159 [ 52.356901][ T4134] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 52.356918][ T4134] RBP: 00007f3bbeef7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.356931][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.357021][ T4134] R13: 00007f3bc0726038 R14: 00007f3bc0725fa0 R15: 00007ffca762d168 [ 52.357051][ T4134] [ 52.610141][ T4146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.610270][ T4146] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.687465][ T4152] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.689963][ T4152] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.690093][ T4152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.693340][ T4152] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.148: Block bitmap for bg 0 marked uninitialized [ 52.693377][ T4152] loop1: lost filesystem error report for type 5 error -117 [ 52.695696][ T4152] EXT4-fs (loop1): Remounting filesystem read-only [ 52.695780][ T4152] EXT4-fs (loop1): 1 orphan inode deleted [ 52.696299][ T4152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.740246][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.972911][ T4160] set_capacity_and_notify: 13 callbacks suppressed [ 52.973000][ T4160] loop1: detected capacity change from 0 to 512 [ 52.976859][ T4160] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.980632][ T4160] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.980749][ T4160] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.986025][ T4160] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.151: Block bitmap for bg 0 marked uninitialized [ 52.986097][ T4160] loop1: lost filesystem error report for type 5 error -117 [ 52.992494][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.992565][ C1] EXT4-fs (loop1): initial error at time 1788455260: ext4_read_block_bitmap_nowait:521 [ 52.992936][ C1] EXT4-fs (loop1): last error at time 1788455260: ext4_read_block_bitmap_nowait:521 [ 52.999567][ T4160] EXT4-fs (loop1): Remounting filesystem read-only [ 52.999630][ T4160] EXT4-fs (loop1): 1 orphan inode deleted [ 53.000153][ T4160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.033050][ T4163] loop4: detected capacity change from 0 to 512 [ 53.036855][ T4163] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 53.041560][ T4163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 53.041747][ T4163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.042168][ T4163] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.150: Block bitmap for bg 0 marked uninitialized [ 53.042257][ T4163] loop4: lost filesystem error report for type 5 error -117 [ 53.042609][ T4163] EXT4-fs (loop4): Remounting filesystem read-only [ 53.042744][ T4163] EXT4-fs (loop4): 1 orphan inode deleted [ 53.043675][ T4163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.139812][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.178351][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.367687][ T4182] loop4: detected capacity change from 0 to 512 [ 53.376591][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.386825][ T4172] syzkaller0: entered promiscuous mode [ 53.386855][ T4172] syzkaller0: entered allmulticast mode [ 53.501482][ T4187] loop1: detected capacity change from 0 to 512 [ 53.510066][ T4187] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 53.628668][ T4192] capability: warning: `syz.2.163' uses deprecated v2 capabilities in a way that may be insecure [ 53.646304][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 53.646650][ T29] audit: type=1400 audit(1788455261.049:334): avc: denied { create } for pid=4191 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 53.740685][ T29] audit: type=1400 audit(1788455261.139:335): avc: denied { setopt } for pid=4195 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.826338][ T29] audit: type=1400 audit(1788455261.229:336): avc: denied { ioctl } for pid=4185 comm="syz.1.161" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 53.828189][ T29] audit: type=1400 audit(1788455261.229:337): avc: denied { bind } for pid=4195 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.238445][ T4215] loop4: detected capacity change from 0 to 512 [ 54.244914][ T4215] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 54.248296][ T4215] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.248731][ T4215] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.250668][ T4215] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.168: Block bitmap for bg 0 marked uninitialized [ 54.250821][ T4215] loop4: lost filesystem error report for type 5 error -117 [ 54.251371][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 54.251434][ C0] EXT4-fs (loop4): initial error at time 1788455261: ext4_read_block_bitmap_nowait:521 [ 54.251551][ C0] EXT4-fs (loop4): last error at time 1788455261: ext4_read_block_bitmap_nowait:521 [ 54.252391][ T4215] EXT4-fs (loop4): Remounting filesystem read-only [ 54.252547][ T4215] EXT4-fs (loop4): 1 orphan inode deleted [ 54.259715][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.429258][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.482281][ T29] audit: type=1400 audit(1788455261.889:338): avc: denied { create } for pid=4220 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.486371][ T4221] FAULT_INJECTION: forcing a failure. [ 54.486371][ T4221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.486526][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.486567][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.486585][ T4221] Call Trace: [ 54.486594][ T4221] [ 54.486604][ T4221] __dump_stack+0x1d/0x30 [ 54.486675][ T4221] dump_stack_lvl+0x95/0xd0 [ 54.486703][ T4221] dump_stack+0x15/0x1b [ 54.486732][ T4221] should_fail_ex+0x262/0x280 [ 54.486762][ T4221] should_fail+0xb/0x20 [ 54.486781][ T4221] should_fail_usercopy+0x1a/0x20 [ 54.486805][ T4221] _copy_from_iter+0xcc/0xe70 [ 54.486898][ T4221] ? __alloc_skb+0x516/0x6f0 [ 54.487025][ T4221] ? __alloc_skb+0x209/0x6f0 [ 54.487185][ T4221] netlink_sendmsg+0x4a4/0x6f0 [ 54.487310][ T4221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.487495][ T4221] ____sys_sendmsg+0x532/0x580 [ 54.487634][ T4221] ___sys_sendmsg+0x195/0x1e0 [ 54.487916][ T4221] __x64_sys_sendmsg+0xd4/0x160 [ 54.488044][ T4221] x64_sys_call+0x22ab/0x2550 [ 54.488156][ T4221] do_syscall_64+0x112/0x360 [ 54.488324][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.488417][ T4221] RIP: 0033:0x7f59467ce159 [ 54.488482][ T4221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.488555][ T4221] RSP: 002b:00007f5945227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.488643][ T4221] RAX: ffffffffffffffda RBX: 00007f5946a55fa0 RCX: 00007f59467ce159 [ 54.488700][ T4221] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000f [ 54.488772][ T4221] RBP: 00007f5945227090 R08: 0000000000000000 R09: 0000000000000000 [ 54.488863][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.488917][ T4221] R13: 00007f5946a56038 R14: 00007f5946a55fa0 R15: 00007fff7e1b44b8 [ 54.488965][ T4221] [ 54.577585][ T4232] loop2: detected capacity change from 0 to 512 [ 54.653337][ T4237] loop3: detected capacity change from 0 to 512 [ 54.660156][ T4237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.660284][ T4237] EXT4-fs: Ignoring removed i_version option [ 54.698359][ T4237] EXT4-fs (loop3): 1 orphan inode deleted [ 54.698901][ T4237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.723786][ T4235] loop4: detected capacity change from 0 to 512 [ 54.738846][ T4237] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.176: Directory hole found for htree leaf block 0 [ 54.739906][ T29] audit: type=1400 audit(1788455262.139:339): avc: denied { write } for pid=4236 comm="syz.3.176" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.740007][ T29] audit: type=1400 audit(1788455262.139:340): avc: denied { create } for pid=4236 comm="syz.3.176" name="sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.797873][ T4235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.798144][ T4235] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.861413][ T29] audit: type=1400 audit(1788455262.239:341): avc: denied { create } for pid=4239 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.996964][ T4237] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.176: Directory hole found for htree leaf block 0 [ 54.997233][ T29] audit: type=1400 audit(1788455262.399:342): avc: denied { write } for pid=4236 comm="syz.3.176" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.272941][ T4256] loop1: detected capacity change from 0 to 512 [ 55.291429][ T4256] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 55.304895][ T4256] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.305081][ T4256] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.330234][ T4256] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.181: Block bitmap for bg 0 marked uninitialized [ 55.330277][ T4256] loop1: lost filesystem error report for type 5 error -117 [ 55.343837][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.343862][ C1] EXT4-fs (loop1): initial error at time 1788455262: ext4_read_block_bitmap_nowait:521 [ 55.343894][ C1] EXT4-fs (loop1): last error at time 1788455262: ext4_read_block_bitmap_nowait:521 [ 55.379379][ T4256] EXT4-fs (loop1): Remounting filesystem read-only [ 55.379513][ T4256] EXT4-fs (loop1): 1 orphan inode deleted [ 55.380026][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.422652][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.529283][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.590591][ T4263] loop4: detected capacity change from 0 to 1024 [ 55.600633][ T4263] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 55.619969][ T4263] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 55.640962][ T29] audit: type=1400 audit(1788455263.039:343): avc: denied { write } for pid=4262 comm="syz.4.184" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.747487][ T3134] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x1 [ 55.750837][ T3134] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 55.751010][ T3134] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 55.755979][ T3134] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 55.791717][ T4268] syz_tun: entered allmulticast mode [ 55.799417][ T4270] validate_nla: 6 callbacks suppressed [ 55.799560][ T4270] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 55.845812][ T4276] fido_id[4276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.089233][ T4290] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.123687][ T4294] FAULT_INJECTION: forcing a failure. [ 56.123687][ T4294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.123789][ T4294] CPU: 1 UID: 0 PID: 4294 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.123815][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.123828][ T4294] Call Trace: [ 56.123900][ T4294] [ 56.123911][ T4294] __dump_stack+0x1d/0x30 [ 56.123946][ T4294] dump_stack_lvl+0x95/0xd0 [ 56.123976][ T4294] dump_stack+0x15/0x1b [ 56.124000][ T4294] should_fail_ex+0x262/0x280 [ 56.124055][ T4294] should_fail+0xb/0x20 [ 56.124119][ T4294] should_fail_usercopy+0x1a/0x20 [ 56.124143][ T4294] _copy_from_user+0x1c/0xb0 [ 56.124244][ T4294] vt_ioctl+0xf65/0x1910 [ 56.124275][ T4294] ? tty_jobctrl_ioctl+0x294/0x800 [ 56.124415][ T4294] tty_ioctl+0x7d7/0xb80 [ 56.124488][ T4294] ? __pfx_tty_ioctl+0x10/0x10 [ 56.124525][ T4294] __se_sys_ioctl+0xce/0x140 [ 56.124569][ T4294] __x64_sys_ioctl+0x43/0x50 [ 56.124608][ T4294] x64_sys_call+0x239d/0x2550 [ 56.124645][ T4294] do_syscall_64+0x112/0x360 [ 56.124704][ T4294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.124733][ T4294] RIP: 0033:0x7f59467ce159 [ 56.124750][ T4294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.124855][ T4294] RSP: 002b:00007f5945227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.124883][ T4294] RAX: ffffffffffffffda RBX: 00007f5946a55fa0 RCX: 00007f59467ce159 [ 56.124898][ T4294] RDX: 0000200000000040 RSI: 0000000000004b66 RDI: 0000000000000009 [ 56.124917][ T4294] RBP: 00007f5945227090 R08: 0000000000000000 R09: 0000000000000000 [ 56.124935][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.124953][ T4294] R13: 00007f5946a56038 R14: 00007f5946a55fa0 R15: 00007fff7e1b44b8 [ 56.125010][ T4294] [ 56.357122][ T4303] __nla_validate_parse: 7 callbacks suppressed [ 56.357149][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 56.373528][ T4300] netlink: 'syz.0.196': attribute type 5 has an invalid length. [ 56.387346][ T4301] netlink: 'syz.0.196': attribute type 5 has an invalid length. [ 56.427548][ T4308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 56.427585][ T4308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.427634][ T4308] vhci_hcd vhci_hcd.0: Device attached [ 56.546310][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.605462][ T4309] vhci_hcd: connection closed [ 56.605777][ T3621] vhci_hcd vhci_hcd.2: stop threads [ 56.605883][ T3621] vhci_hcd vhci_hcd.2: release socket [ 56.605913][ T3621] vhci_hcd vhci_hcd.2: disconnect device [ 56.616098][ T3414] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 56.693620][ T4323] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 56.715141][ T3621] IPVS: starting estimator thread 0... [ 56.807258][ T4324] IPVS: using max 1920 ests per chain, 96000 per kthread [ 56.893435][ T4326] process 'syz.4.203' launched './file0' with NULL argv: empty string added [ 57.056163][ T3134] Process accounting resumed [ 57.155393][ T4338] ip6t_frag: unknown flags 4 [ 57.651405][ T4351] netlink: 'syz.4.211': attribute type 14 has an invalid length. [ 57.651541][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 57.651749][ T4351] bond0: option xmit_hash_policy: invalid value (48) [ 58.003562][ T4354] set_capacity_and_notify: 4 callbacks suppressed [ 58.003596][ T4354] loop2: detected capacity change from 0 to 512 [ 58.108675][ T4354] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.229571][ T4364] loop4: detected capacity change from 0 to 2048 [ 58.293257][ T4364] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #12: block 2: comm syz.4.216: lblock 0 mapped to illegal pblock 2 (length 1) [ 58.612065][ T4376] loop2: detected capacity change from 0 to 512 [ 58.633350][ T4376] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.714460][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 59.531548][ T4414] loop3: detected capacity change from 0 to 512 [ 59.545678][ T4411] can: request_module (can-proto-0) failed. [ 59.553004][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 59.553036][ T29] audit: type=1400 audit(1788455266.959:372): avc: denied { mount } for pid=4410 comm="syz.4.226" name="/" dev="ramfs" ino=7998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.652798][ T29] audit: type=1400 audit(1788455267.059:373): avc: denied { connect } for pid=4410 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.652840][ T29] audit: type=1400 audit(1788455267.059:374): avc: denied { write } for pid=4410 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.697456][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.697640][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.721714][ T4411] bridge0: entered allmulticast mode [ 59.856362][ T29] audit: type=1400 audit(1788455267.259:376): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.861649][ T4421] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 59.861748][ T29] audit: type=1400 audit(1788455267.269:377): avc: denied { mounton } for pid=4419 comm="syz.1.228" path="/48/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 59.868804][ T29] audit: type=1400 audit(1788455267.239:375): avc: denied { read write } for pid=4419 comm="syz.1.228" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.868903][ T29] audit: type=1400 audit(1788455267.269:378): avc: denied { open } for pid=4419 comm="syz.1.228" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.037025][ T4427] loop4: detected capacity change from 0 to 512 [ 60.043104][ T4427] ext2: Unknown parameter 'abort.nouser_xattr' [ 60.192722][ T4431] loop1: detected capacity change from 0 to 512 [ 60.212064][ T4431] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 60.222045][ T4431] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.222235][ T4431] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.222335][ T4431] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.231: Block bitmap for bg 0 marked uninitialized [ 60.222405][ T4431] loop1: lost filesystem error report for type 5 error -117 [ 60.227554][ T4431] EXT4-fs (loop1): Remounting filesystem read-only [ 60.227625][ T4431] EXT4-fs (loop1): 1 orphan inode deleted [ 60.397717][ T4435] loop7: detected capacity change from 0 to 7 [ 60.512894][ T3292] buffer_io_error: 5 callbacks suppressed [ 60.513178][ T3292] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.706720][ T29] audit: type=1400 audit(1788455268.109:379): avc: denied { remount } for pid=4443 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.728023][ T3619] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.863090][ T4462] loop3: detected capacity change from 0 to 512 [ 61.031990][ T4466] loop4: detected capacity change from 0 to 512 [ 61.038188][ T3619] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.048076][ T29] audit: type=1400 audit(1788455268.449:380): avc: denied { getopt } for pid=4463 comm="syz.3.241" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.096171][ T4466] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.109247][ T4470] loop2: detected capacity change from 0 to 512 [ 61.117867][ T4470] ext2: Unknown parameter 'abort.nouser_xattr' [ 61.129046][ T29] audit: type=1400 audit(1788455268.529:381): avc: denied { setattr } for pid=4465 comm="syz.4.242" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.406145][ T3619] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.639541][ T3619] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.872215][ T4473] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.906526][ T3619] bridge_slave_1: left allmulticast mode [ 61.906560][ T3619] bridge_slave_1: left promiscuous mode [ 61.906916][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.923116][ T3619] bridge_slave_0: left allmulticast mode [ 61.923190][ T3619] bridge_slave_0: left promiscuous mode [ 61.923546][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.132361][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.147634][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.151126][ T3619] bond0 (unregistering): Released all slaves [ 62.230579][ T4503] FAT-fs (loop4): bogus sectors per cluster 7 [ 62.230617][ T4503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 62.338353][ T3619] hsr_slave_0: left promiscuous mode [ 62.345480][ T3619] hsr_slave_1: left promiscuous mode [ 62.355301][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.355328][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.381445][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.381824][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.438235][ T4520] ext2: Unknown parameter 'abort.nouser_xattr' [ 62.542923][ T3619] veth1_macvtap: left promiscuous mode [ 62.549100][ T3619] veth0_macvtap: left promiscuous mode [ 62.549987][ T3619] veth1_vlan: left promiscuous mode [ 62.563649][ T3619] veth0_vlan: left promiscuous mode [ 62.656888][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.657025][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.723136][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 62.778895][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 62.788660][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 62.863125][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.876841][ T4531] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 62.887432][ T4531] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.887622][ T4531] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.902613][ T4531] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.257: Block bitmap for bg 0 marked uninitialized [ 62.902649][ T4531] loop3: lost filesystem error report for type 5 error -117 [ 62.915837][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 62.915861][ C1] EXT4-fs (loop3): initial error at time 1788455270: ext4_read_block_bitmap_nowait:521 [ 62.915902][ C1] EXT4-fs (loop3): last error at time 1788455270: ext4_read_block_bitmap_nowait:521 [ 62.941500][ T4531] EXT4-fs (loop3): Remounting filesystem read-only [ 62.941563][ T4531] EXT4-fs (loop3): 1 orphan inode deleted [ 63.046590][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.046637][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.046711][ T4445] bridge_slave_0: entered allmulticast mode [ 63.047309][ T4445] bridge_slave_0: entered promiscuous mode [ 63.075909][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.075958][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.076027][ T4445] bridge_slave_1: entered allmulticast mode [ 63.097380][ T4445] bridge_slave_1: entered promiscuous mode [ 63.131865][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.154366][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.192681][ T4445] team0: Port device team_slave_0 added [ 63.199979][ T4445] team0: Port device team_slave_1 added [ 63.383616][ T4552] netlink: 'syz.3.262': attribute type 14 has an invalid length. [ 63.383677][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 63.601454][ T4552] bond0: option xmit_hash_policy: invalid value (48) [ 63.636880][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.636905][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.636937][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.690213][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.690239][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.690299][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.748992][ T3619] IPVS: stop unused estimator thread 0... [ 63.781454][ T3617] IPVS: starting estimator thread 0... [ 63.826115][ T4562] set_capacity_and_notify: 5 callbacks suppressed [ 63.826150][ T4562] loop3: detected capacity change from 0 to 512 [ 63.872170][ T4563] IPVS: using max 2208 ests per chain, 110400 per kthread [ 63.934323][ T4445] hsr_slave_0: entered promiscuous mode [ 63.940594][ T4561] loop2: detected capacity change from 0 to 2048 [ 63.960297][ T4445] hsr_slave_1: entered promiscuous mode [ 64.074771][ T4561] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #12: block 2: comm syz.2.264: lblock 0 mapped to illegal pblock 2 (length 1) [ 64.206797][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.346933][ T4588] loop4: detected capacity change from 0 to 512 [ 64.372521][ T4588] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 64.383870][ T4588] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.384017][ T4588] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.399413][ T4588] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.268: Block bitmap for bg 0 marked uninitialized [ 64.399444][ T4588] loop4: lost filesystem error report for type 5 error -117 [ 64.412667][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 64.412710][ C1] EXT4-fs (loop4): initial error at time 1788455271: ext4_read_block_bitmap_nowait:521 [ 64.412745][ C1] EXT4-fs (loop4): last error at time 1788455271: ext4_read_block_bitmap_nowait:521 [ 64.521060][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 64.579214][ T4588] EXT4-fs (loop4): Remounting filesystem read-only [ 64.579277][ T4588] EXT4-fs (loop4): 1 orphan inode deleted [ 64.605754][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 64.605784][ T29] audit: type=1326 audit(1788455272.009:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59467ce159 code=0x7ffc0000 [ 64.605875][ T29] audit: type=1326 audit(1788455272.009:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59467cdec2 code=0x7ffc0000 [ 64.605963][ T29] audit: type=1326 audit(1788455272.009:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f59467cdf57 code=0x7ffc0000 [ 64.606138][ T29] audit: type=1326 audit(1788455272.009:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f594678ae51 code=0x7ffc0000 [ 64.606178][ T29] audit: type=1326 audit(1788455272.009:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f59467cef49 code=0x7ffc0000 [ 64.606227][ T29] audit: type=1326 audit(1788455272.009:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f594678aebb code=0x7ffc0000 [ 64.606262][ T29] audit: type=1326 audit(1788455272.009:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59467ce159 code=0x7ffc0000 [ 64.606301][ T29] audit: type=1326 audit(1788455272.009:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59467ce159 code=0x7ffc0000 [ 64.666421][ T29] audit: type=1326 audit(1788455272.049:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f594678a5ac code=0x7ffc0000 [ 64.666470][ T29] audit: type=1326 audit(1788455272.059:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.2.266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f594678a60e code=0x7ffc0000 [ 65.802492][ T4445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.834110][ T4445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.843616][ T4445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.856502][ T4445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.866412][ T4445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.878919][ T4445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.888224][ T4445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.906117][ T4445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.939539][ T4606] loop3: detected capacity change from 0 to 512 [ 66.064528][ T4625] loop2: detected capacity change from 0 to 1024 [ 66.148291][ T4625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.148376][ T4625] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 66.156238][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.174074][ T4625] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.273: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.174234][ T4625] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.181469][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.181537][ C0] EXT4-fs (loop2): initial error at time 1788455273: ext4_map_blocks:832: inode 3: block 1 [ 66.181643][ C0] EXT4-fs (loop2): last error at time 1788455273: ext4_map_blocks:832: inode 3: block 1 [ 66.186676][ T4625] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.273: Failed to acquire dquot type 0 [ 66.186830][ T4625] loop2: lost filesystem error report for type 5 error -117 [ 66.190938][ T4625] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.273: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.191024][ T4625] loop2: lost filesystem error report for type 5 error -117 [ 66.199148][ T4625] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.273: Invalid inode bitmap blk 0 in block_group 0 [ 66.199253][ T4625] loop2: lost filesystem error report for type 5 error -117 [ 66.201427][ T4625] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 66.201451][ T4625] loop2: lost filesystem error report for type 5 error -117 [ 66.208082][ T4625] EXT4-fs (loop2): 1 orphan inode deleted [ 66.212694][ T3618] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:86: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.216733][ T3618] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:86: Failed to release dquot type 0 [ 66.361598][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.462309][ T4646] loop4: detected capacity change from 0 to 1164 [ 66.470549][ T4646] iso9660: Bad value for 'mode' [ 66.483516][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.508242][ T4606] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.524157][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.524205][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.591071][ T4649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4649 comm=syz.2.277 [ 66.613496][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.613609][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.741067][ T4651] loop1: detected capacity change from 0 to 512 [ 67.004264][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.137236][ T4683] FAULT_INJECTION: forcing a failure. [ 67.137236][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.137452][ T4683] CPU: 0 UID: 0 PID: 4683 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.137545][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.137591][ T4683] Call Trace: [ 67.137619][ T4683] [ 67.137642][ T4683] __dump_stack+0x1d/0x30 [ 67.137737][ T4683] dump_stack_lvl+0x95/0xd0 [ 67.137818][ T4683] dump_stack+0x15/0x1b [ 67.137977][ T4683] should_fail_ex+0x262/0x280 [ 67.138050][ T4683] should_fail+0xb/0x20 [ 67.138113][ T4683] should_fail_usercopy+0x1a/0x20 [ 67.138265][ T4683] _copy_from_user+0x1c/0xb0 [ 67.138410][ T4683] ___sys_sendmsg+0xc1/0x1e0 [ 67.138561][ T4683] __x64_sys_sendmsg+0xd4/0x160 [ 67.138679][ T4683] x64_sys_call+0x22ab/0x2550 [ 67.138762][ T4683] do_syscall_64+0x112/0x360 [ 67.138946][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.139064][ T4683] RIP: 0033:0x7f59467ce159 [ 67.139186][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.139249][ T4683] RSP: 002b:00007f5945206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.139321][ T4683] RAX: ffffffffffffffda RBX: 00007f5946a56090 RCX: 00007f59467ce159 [ 67.139371][ T4683] RDX: 0000000000000040 RSI: 00002000000038c0 RDI: 0000000000000008 [ 67.139429][ T4683] RBP: 00007f5945206090 R08: 0000000000000000 R09: 0000000000000000 [ 67.139472][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.139609][ T4683] R13: 00007f5946a56128 R14: 00007f5946a56090 R15: 00007fff7e1b44b8 [ 67.139740][ T4683] [ 67.350531][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 67.410894][ T4695] netlink: 'syz.1.282': attribute type 11 has an invalid length. [ 67.548998][ T4703] loop1: detected capacity change from 0 to 512 [ 67.579158][ T4703] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.731934][ T4445] veth0_vlan: entered promiscuous mode [ 67.744322][ T4445] veth1_vlan: entered promiscuous mode [ 67.868688][ T4445] veth0_macvtap: entered promiscuous mode [ 67.884843][ T4445] veth1_macvtap: entered promiscuous mode [ 67.898103][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.920404][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.951476][ T3616] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951529][ T3616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951588][ T3616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951635][ T3616] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.007136][ T4718] loop4: detected capacity change from 0 to 2048 [ 68.033010][ T4720] loop3: detected capacity change from 0 to 2048 [ 68.055350][ T4718] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #12: block 2: comm syz.4.286: lblock 0 mapped to illegal pblock 2 (length 1) [ 68.241815][ T4720] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #12: block 2: comm syz.3.285: lblock 0 mapped to illegal pblock 2 (length 1) [ 68.370214][ T4733] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.674966][ T4734] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 68.731334][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 68.801958][ T4729] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 68.817867][ T4729] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.818327][ T4729] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.839122][ T4729] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.237: Block bitmap for bg 0 marked uninitialized [ 68.839437][ T4729] loop5: lost filesystem error report for type 5 error -117 [ 68.852898][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.852928][ C0] EXT4-fs (loop5): initial error at time 1788455276: ext4_read_block_bitmap_nowait:521 [ 68.852961][ C0] EXT4-fs (loop5): last error at time 1788455276: ext4_read_block_bitmap_nowait:521 [ 68.895270][ T4729] EXT4-fs (loop5): Remounting filesystem read-only [ 68.895347][ T4729] EXT4-fs (loop5): 1 orphan inode deleted [ 69.128815][ T4767] set_capacity_and_notify: 3 callbacks suppressed [ 69.129001][ T4767] loop5: detected capacity change from 0 to 512 [ 69.171166][ T4767] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.186353][ T4740] bond1 (unregistering): Released all slaves [ 69.237476][ T4766] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 69.298473][ T4734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.446197][ T4773] loop1: detected capacity change from 0 to 128 [ 69.457720][ T4773] FAT-fs (loop1): data area starts beyond volume (1024 > 255) [ 69.457875][ T4773] FAT-fs (loop1): Can't find a valid FAT filesystem [ 69.477392][ T4773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4773 comm=syz.1.296 [ 69.834362][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 70.682086][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 70.682132][ T29] audit: type=1400 audit(1788455278.089:946): avc: denied { read } for pid=4784 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.511765][ T4752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.599442][ T4445] EXT4-fs unmount: 38 callbacks suppressed [ 71.599679][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.729110][ T4794] loop4: detected capacity change from 0 to 128 [ 71.771164][ T4794] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.792157][ T4794] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.806226][ T29] audit: type=1400 audit(1788455279.219:947): avc: denied { write } for pid=4793 comm="syz.4.305" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.807161][ T4797] can: request_module (can-proto-0) failed. [ 71.828633][ T4797] bridge0: entered allmulticast mode [ 71.847147][ T29] audit: type=1400 audit(1788455279.259:948): avc: denied { read } for pid=4793 comm="syz.4.305" path="/69/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.848742][ T29] audit: type=1400 audit(1788455279.259:949): avc: denied { read } for pid=4789 comm="syz.1.303" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.850904][ T29] audit: type=1400 audit(1788455279.259:950): avc: denied { open } for pid=4789 comm="syz.1.303" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.859106][ T29] audit: type=1400 audit(1788455279.259:951): avc: denied { ioctl } for pid=4789 comm="syz.1.303" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.911398][ T29] audit: type=1400 audit(1788455279.309:952): avc: denied { map } for pid=4793 comm="syz.4.305" path="/69/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.911586][ T29] audit: type=1400 audit(1788455279.309:953): avc: denied { execute } for pid=4793 comm="syz.4.305" path="/69/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.024972][ T29] audit: type=1400 audit(1788455279.429:954): avc: denied { ioctl } for pid=4793 comm="syz.4.305" path="/69/file1/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.310962][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.311067][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.327346][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 72.469157][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.520879][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 72.531974][ T29] audit: type=1400 audit(1788455279.939:955): avc: denied { listen } for pid=4826 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.680930][ T4832] loop5: detected capacity change from 0 to 512 [ 72.754884][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.754920][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.760608][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.760667][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.098498][ T4856] capability: warning: `syz.5.322' uses 32-bit capabilities (legacy support in use) [ 73.116831][ T4854] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.133370][ T4854] loop1: detected capacity change from 0 to 128 [ 73.231792][ T4854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.245777][ T4854] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.511067][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.624236][ T4866] loop5: detected capacity change from 0 to 512 [ 73.629430][ T4866] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 73.638018][ T4866] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.638256][ T4866] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.638825][ T4866] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.324: Block bitmap for bg 0 marked uninitialized [ 73.638927][ T4866] loop5: lost filesystem error report for type 5 error -117 [ 73.647165][ T4866] EXT4-fs (loop5): Remounting filesystem read-only [ 73.647303][ T4866] EXT4-fs (loop5): 1 orphan inode deleted [ 73.651362][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 73.651444][ C1] EXT4-fs (loop5): initial error at time 1788455281: ext4_read_block_bitmap_nowait:521 [ 73.651545][ C1] EXT4-fs (loop5): last error at time 1788455281: ext4_read_block_bitmap_nowait:521 [ 73.694979][ T4866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.957740][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.194366][ T4884] netlink: 32 bytes leftover after parsing attributes in process `syz.5.329'. [ 74.259211][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.259316][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.335446][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 74.411819][ T4896] loop5: detected capacity change from 0 to 512 [ 74.820004][ T4900] loop7: detected capacity change from 0 to 7 [ 74.999690][ T4902] FAULT_INJECTION: forcing a failure. [ 74.999690][ T4902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.999736][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.5.333 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.999807][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.999826][ T4902] Call Trace: [ 74.999835][ T4902] [ 74.999845][ T4902] __dump_stack+0x1d/0x30 [ 74.999880][ T4902] dump_stack_lvl+0x95/0xd0 [ 74.999992][ T4902] dump_stack+0x15/0x1b [ 75.000018][ T4902] should_fail_ex+0x262/0x280 [ 75.000111][ T4902] should_fail+0xb/0x20 [ 75.000137][ T4902] should_fail_usercopy+0x1a/0x20 [ 75.000168][ T4902] _copy_from_user+0x1c/0xb0 [ 75.000210][ T4902] perf_copy_attr+0x141/0x600 [ 75.000298][ T4902] __se_sys_perf_event_open+0x67/0x1280 [ 75.000440][ T4902] ? do_futex+0x391/0x460 [ 75.000542][ T4902] ? _raw_spin_lock+0x53/0xa0 [ 75.000666][ T4902] __x64_sys_perf_event_open+0x67/0x80 [ 75.000859][ T4902] x64_sys_call+0x1f25/0x2550 [ 75.000943][ T4902] do_syscall_64+0x112/0x360 [ 75.001183][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.001258][ T4902] RIP: 0033:0x7f5e5614e159 [ 75.001318][ T4902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.001381][ T4902] RSP: 002b:00007f5e54b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 75.001514][ T4902] RAX: ffffffffffffffda RBX: 00007f5e563d6090 RCX: 00007f5e5614e159 [ 75.001564][ T4902] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 75.001613][ T4902] RBP: 00007f5e561e5024 R08: 0000000000000001 R09: 0000000000000000 [ 75.001656][ T4902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 75.001698][ T4902] R13: 00007f5e563d6128 R14: 00007f5e563d6090 R15: 00007fff1f709aa8 [ 75.001836][ T4902] [ 75.064548][ T4902] netlink: 96 bytes leftover after parsing attributes in process `syz.5.333'. [ 75.239672][ T4839] Set syz1 is full, maxelem 65536 reached [ 76.039951][ T4932] loop2: detected capacity change from 0 to 512 [ 76.661089][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 76.661302][ T29] audit: type=1400 audit(1788455284.059:1024): avc: denied { write } for pid=4935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.734977][ T29] audit: type=1400 audit(1788455284.139:1025): avc: denied { ioctl } for pid=4953 comm="syz.5.347" path="socket:[8700]" dev="sockfs" ino=8700 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.736446][ T4952] FAULT_INJECTION: forcing a failure. [ 76.736446][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.736473][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.736520][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.736562][ T4952] Call Trace: [ 76.736593][ T4952] [ 76.736616][ T4952] __dump_stack+0x1d/0x30 [ 76.736717][ T4952] dump_stack_lvl+0x95/0xd0 [ 76.736806][ T4952] dump_stack+0x15/0x1b [ 76.736895][ T4952] should_fail_ex+0x262/0x280 [ 76.736968][ T4952] should_fail+0xb/0x20 [ 76.737110][ T4952] should_fail_usercopy+0x1a/0x20 [ 76.737219][ T4952] _copy_from_user+0x1c/0xb0 [ 76.737392][ T4952] ___sys_sendmsg+0xc1/0x1e0 [ 76.737538][ T4952] __sys_sendmmsg+0x185/0x320 [ 76.737704][ T4952] __x64_sys_sendmmsg+0x57/0x70 [ 76.737816][ T4952] x64_sys_call+0x1fb4/0x2550 [ 76.737997][ T4952] do_syscall_64+0x112/0x360 [ 76.738180][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.738254][ T4952] RIP: 0033:0x7f4f85dbe159 [ 76.738313][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.738353][ T4952] RSP: 002b:00007f4f84817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.738375][ T4952] RAX: ffffffffffffffda RBX: 00007f4f86045fa0 RCX: 00007f4f85dbe159 [ 76.738459][ T4952] RDX: 0000000000000002 RSI: 0000200000002180 RDI: 0000000000000003 [ 76.738501][ T4952] RBP: 00007f4f84817090 R08: 0000000000000000 R09: 0000000000000000 [ 76.738545][ T4952] R10: 0000000004000080 R11: 0000000000000246 R12: 0000000000000001 [ 76.738594][ T4952] R13: 00007f4f86046038 R14: 00007f4f86045fa0 R15: 00007fff43855b98 [ 76.738651][ T4952] [ 76.818453][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.822018][ T4954] syzkaller0: entered promiscuous mode [ 76.822103][ T4954] syzkaller0: entered allmulticast mode [ 76.826008][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.970858][ T29] audit: type=1400 audit(1788455284.369:1026): avc: denied { write } for pid=4957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.012984][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 77.124619][ T29] audit: type=1400 audit(1788455284.529:1027): avc: denied { create } for pid=4968 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.133160][ T4969] loop3: detected capacity change from 0 to 256 [ 77.162786][ T29] audit: type=1400 audit(1788455284.569:1028): avc: denied { mount } for pid=4960 comm="syz.3.348" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.190191][ T4972] loop4: detected capacity change from 0 to 512 [ 77.207068][ T4972] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.207748][ T4972] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.207888][ T4972] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.210290][ T4972] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.344: Block bitmap for bg 0 marked uninitialized [ 77.210366][ T4972] loop4: lost filesystem error report for type 5 error -117 [ 77.211598][ T4972] EXT4-fs (loop4): Remounting filesystem read-only [ 77.211715][ T4972] EXT4-fs (loop4): 1 orphan inode deleted [ 77.212616][ T4972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.462000][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.514137][ T29] audit: type=1400 audit(1788455284.919:1029): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.625469][ T4976] loop5: detected capacity change from 0 to 512 [ 77.634750][ T4979] tipc: Started in network mode [ 77.634871][ T4979] tipc: Node identity 8a4a53d7bf33, cluster identity 4711 [ 77.634932][ T4979] tipc: Enabled bearer , priority 0 [ 77.659611][ T4976] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.660272][ T4976] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 77.660439][ T4976] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.660948][ T4976] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.351: Block bitmap for bg 0 marked uninitialized [ 77.661080][ T4976] loop5: lost filesystem error report for type 5 error -117 [ 77.665468][ T4976] EXT4-fs (loop5): Remounting filesystem read-only [ 77.665863][ T4976] EXT4-fs (loop5): 1 orphan inode deleted [ 77.667169][ T4976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.797118][ T4990] netlink: 'syz.4.355': attribute type 13 has an invalid length. [ 77.797157][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 77.816498][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.828917][ T4979] tipc: Disabling bearer [ 77.952446][ T4990] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 78.002360][ T4992] netlink: 144 bytes leftover after parsing attributes in process `syz.5.356'. [ 78.031309][ T29] audit: type=1326 audit(1788455285.429:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedabe4e159 code=0x7ffc0000 [ 78.031508][ T29] audit: type=1326 audit(1788455285.429:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedabe4e159 code=0x7ffc0000 [ 78.031687][ T29] audit: type=1326 audit(1788455285.429:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedabe4e159 code=0x7ffc0000 [ 78.031926][ T29] audit: type=1326 audit(1788455285.429:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedabe4e159 code=0x7ffc0000 [ 78.086602][ T5000] FAULT_INJECTION: forcing a failure. [ 78.086602][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.086755][ T5000] CPU: 1 UID: 0 PID: 5000 Comm: syz.4.358 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.086900][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.086963][ T5000] Call Trace: [ 78.086992][ T5000] [ 78.087015][ T5000] __dump_stack+0x1d/0x30 [ 78.087101][ T5000] dump_stack_lvl+0x95/0xd0 [ 78.087180][ T5000] dump_stack+0x15/0x1b [ 78.087255][ T5000] should_fail_ex+0x262/0x280 [ 78.087327][ T5000] should_fail+0xb/0x20 [ 78.087390][ T5000] should_fail_usercopy+0x1a/0x20 [ 78.087478][ T5000] _copy_from_user+0x1c/0xb0 [ 78.087627][ T5000] ___sys_sendmsg+0xc1/0x1e0 [ 78.087773][ T5000] __x64_sys_sendmsg+0xd4/0x160 [ 78.087894][ T5000] x64_sys_call+0x22ab/0x2550 [ 78.087988][ T5000] do_syscall_64+0x112/0x360 [ 78.088090][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.088217][ T5000] RIP: 0033:0x7f3bc049e159 [ 78.088276][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.088337][ T5000] RSP: 002b:00007f3bbeef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.088455][ T5000] RAX: ffffffffffffffda RBX: 00007f3bc0725fa0 RCX: 00007f3bc049e159 [ 78.088564][ T5000] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 78.088612][ T5000] RBP: 00007f3bbeef7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.088654][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.088695][ T5000] R13: 00007f3bc0726038 R14: 00007f3bc0725fa0 R15: 00007ffca762d168 [ 78.088767][ T5000] [ 78.251570][ T5003] loop2: detected capacity change from 0 to 512 [ 78.378122][ T5007] loop5: detected capacity change from 0 to 128 [ 78.390214][ T5007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.403040][ T5007] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.485663][ T5015] loop1: detected capacity change from 0 to 512 [ 78.524267][ T5015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.524477][ T5015] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.553336][ T5015] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.362: corrupted xattr block 33: invalid checksum [ 78.567148][ T5015] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 78.567369][ T5015] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.362: corrupted xattr block 33: invalid checksum [ 78.590228][ T5015] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 78.606499][ T5015] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.362: corrupted xattr block 33: invalid checksum [ 78.606558][ T5015] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 78.620716][ T5015] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -74) [ 78.624247][ T5023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 78.663820][ T4445] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.807589][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.867377][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.873262][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.027638][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 79.332410][ T5071] loop4: detected capacity change from 0 to 164 [ 79.351845][ T5071] rock: directory entry would overflow storage [ 79.351865][ T5071] rock: sig=0x5252, size=5, remaining=3 [ 79.463878][ T5056] loop5: detected capacity change from 0 to 512 [ 79.547072][ T5083] loop4: detected capacity change from 0 to 512 [ 79.569009][ T5056] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.569040][ T5056] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 79.615633][ T5056] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.630401][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 79.630426][ C1] EXT4-fs (loop5): initial error at time 1788455287: ext4_mb_generate_buddy:1317 [ 79.630457][ C1] EXT4-fs (loop5): last error at time 1788455287: ext4_mb_generate_buddy:1317 [ 79.665278][ T5056] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.368: attempt to clear invalid blocks 33619980 len 1 [ 79.665328][ T5056] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.729624][ T5056] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.368: invalid indirect mapped block 1819239214 (level 0) [ 79.729671][ T5056] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.843845][ T5056] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.368: invalid indirect mapped block 1819239214 (level 1) [ 79.843976][ T5056] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.103572][ T5122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.153265][ T5122] FAULT_INJECTION: forcing a failure. [ 80.153265][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 80.153325][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.4.377 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.153355][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.153373][ T5122] Call Trace: [ 80.153383][ T5122] [ 80.153394][ T5122] __dump_stack+0x1d/0x30 [ 80.153427][ T5122] dump_stack_lvl+0x95/0xd0 [ 80.153499][ T5122] dump_stack+0x15/0x1b [ 80.153528][ T5122] should_fail_ex+0x262/0x280 [ 80.153558][ T5122] ? __send_signal_locked+0x14d/0x750 [ 80.153615][ T5122] should_failslab+0x8c/0xb0 [ 80.153721][ T5122] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 80.153756][ T5122] ? __send_signal_locked+0x14d/0x750 [ 80.153837][ T5122] __send_signal_locked+0x14d/0x750 [ 80.153943][ T5122] ? __rcu_read_unlock+0x33/0x70 [ 80.153987][ T5122] do_notify_parent+0x55f/0x600 [ 80.154116][ T5122] release_task+0xa92/0xb40 [ 80.154202][ T5122] do_exit+0xd79/0x1510 [ 80.154246][ T5122] do_group_exit+0xfe/0x140 [ 80.154292][ T5122] ? get_signal+0xe00/0xf10 [ 80.154361][ T5122] get_signal+0xe07/0xf10 [ 80.154414][ T5122] arch_do_signal_or_restart+0x96/0x480 [ 80.154461][ T5122] exit_to_user_mode_loop+0x15d/0x8c0 [ 80.154510][ T5122] do_syscall_64+0x212/0x360 [ 80.154610][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.154642][ T5122] RIP: 0033:0x7f3bc049e159 [ 80.154664][ T5122] Code: Unable to access opcode bytes at 0x7f3bc049e12f. [ 80.154679][ T5122] RSP: 002b:00007f3bbeef70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.154732][ T5122] RAX: fffffffffffffe00 RBX: 00007f3bc0725fa8 RCX: 00007f3bc049e159 [ 80.154751][ T5122] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3bc0725fa8 [ 80.154841][ T5122] RBP: 00007f3bc0725fa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.154859][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.154877][ T5122] R13: 00007f3bc0726038 R14: 00007ffca762d080 R15: 00007ffca762d168 [ 80.154905][ T5122] [ 80.187342][ T5056] EXT4-fs (loop5): 1 truncate cleaned up [ 80.237403][ T5056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.446537][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.550048][ T5143] loop4: detected capacity change from 0 to 512 [ 80.590714][ T5143] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.616804][ T5143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 80.616946][ T5143] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.636372][ T5143] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.381: Allocating blocks 42-43 which overlap fs metadata [ 80.636548][ T5143] loop4: lost filesystem error report for type 5 error -117 [ 80.643736][ T5145] syzkaller0: entered promiscuous mode [ 80.643797][ T5145] syzkaller0: entered allmulticast mode [ 80.650384][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 80.650410][ C0] EXT4-fs (loop4): initial error at time 1788455288: ext4_mb_mark_diskspace_used:4223 [ 80.650452][ C0] EXT4-fs (loop4): last error at time 1788455288: ext4_mb_mark_diskspace_used:4223 [ 80.682607][ T5143] EXT4-fs (loop4): Remounting filesystem read-only [ 80.682945][ T5143] EXT4-fs (loop4): 1 truncate cleaned up [ 80.689071][ T5143] EXT4-fs (loop4): pa ffff888105d54310: logic 1, phys. 41, len 23 [ 80.690461][ T5143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.805667][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.936820][ T5152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.937003][ T5152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.962775][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 81.117255][ T5156] loop4: detected capacity change from 0 to 512 [ 81.510299][ T5174] loop2: detected capacity change from 0 to 2048 [ 81.528550][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.530118][ T5174] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #12: block 2: comm syz.2.393: lblock 0 mapped to illegal pblock 2 (length 1) [ 81.568127][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.617037][ T5179] netlink: 27 bytes leftover after parsing attributes in process `syz.5.380'. [ 81.772966][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 81.772996][ T29] audit: type=1400 audit(1788455289.179:1130): avc: denied { write } for pid=5180 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.778191][ T29] audit: type=1400 audit(1788455289.179:1131): avc: denied { mount } for pid=5180 comm="syz.4.395" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 81.833743][ T5192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.395'. [ 81.870183][ T29] audit: type=1326 audit(1788455289.269:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.870472][ T29] audit: type=1326 audit(1788455289.269:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.870594][ T29] audit: type=1326 audit(1788455289.269:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.870949][ T29] audit: type=1326 audit(1788455289.269:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.872466][ T29] audit: type=1326 audit(1788455289.269:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.873743][ T29] audit: type=1326 audit(1788455289.269:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.875830][ T29] audit: type=1326 audit(1788455289.269:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 81.876358][ T29] audit: type=1326 audit(1788455289.269:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc049e159 code=0x7ffc0000 [ 82.123197][ T5204] loop3: detected capacity change from 0 to 512 [ 82.149445][ T5204] FAT-fs (loop3): bogus number of FAT sectors [ 82.149528][ T5204] FAT-fs (loop3): Can't find a valid FAT filesystem [ 82.189191][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 82.208037][ T5206] loop4: detected capacity change from 0 to 512 [ 82.647178][ T5219] loop5: detected capacity change from 0 to 1024 [ 82.668696][ T5219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.689760][ T5219] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.712486][ T5220] mmap: syz.2.401 (5220) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.726871][ T5219] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.727024][ T5219] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.727024][ T5219] [ 82.727178][ T5219] EXT4-fs (loop5): Total free blocks count 0 [ 82.727322][ T5219] EXT4-fs (loop5): Free/Dirty block details [ 82.727462][ T5219] EXT4-fs (loop5): free_blocks=68451041280 [ 82.727583][ T5219] EXT4-fs (loop5): dirty_blocks=80 [ 82.727718][ T5219] EXT4-fs (loop5): Block reservation details [ 82.727844][ T5219] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 82.796944][ T5219] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 83.030845][ T5229] Cannot find set identified by id 0 to match [ 83.275455][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.275656][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.355378][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 83.371146][ T5243] loop4: detected capacity change from 0 to 512 [ 83.377717][ T5243] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 83.385122][ T5243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.385405][ T5243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.386005][ T5243] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.402: Block bitmap for bg 0 marked uninitialized [ 83.386100][ T5243] loop4: lost filesystem error report for type 5 error -117 [ 83.386464][ T5243] EXT4-fs (loop4): Remounting filesystem read-only [ 83.386679][ T5243] EXT4-fs (loop4): 1 orphan inode deleted [ 83.387691][ T5243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.589624][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.723524][ T5250] loop1: detected capacity change from 0 to 512 [ 83.783717][ T5252] EXT4-fs: Ignoring removed bh option [ 83.796326][ T5252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.888388][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.341494][ T5279] FAULT_INJECTION: forcing a failure. [ 84.341494][ T5279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.341684][ T5279] CPU: 0 UID: 0 PID: 5279 Comm: syz.4.418 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.341720][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.341736][ T5279] Call Trace: [ 84.341746][ T5279] [ 84.341757][ T5279] __dump_stack+0x1d/0x30 [ 84.341790][ T5279] dump_stack_lvl+0x95/0xd0 [ 84.341829][ T5279] dump_stack+0x15/0x1b [ 84.341864][ T5279] should_fail_ex+0x262/0x280 [ 84.341888][ T5279] should_fail+0xb/0x20 [ 84.341906][ T5279] should_fail_usercopy+0x1a/0x20 [ 84.341930][ T5279] _copy_to_user+0x20/0xa0 [ 84.342065][ T5279] snd_timer_user_read+0x4c6/0x640 [ 84.342108][ T5279] ? __pfx_default_wake_function+0x10/0x10 [ 84.342186][ T5279] ? __pfx_snd_timer_user_read+0x10/0x10 [ 84.342235][ T5279] vfs_readv+0x417/0x6d0 [ 84.342279][ T5279] ? __pfx_snd_timer_user_read+0x10/0x10 [ 84.342351][ T5279] do_readv+0xe9/0x210 [ 84.342467][ T5279] __x64_sys_readv+0x45/0x50 [ 84.342507][ T5279] x64_sys_call+0x1b4b/0x2550 [ 84.342545][ T5279] do_syscall_64+0x112/0x360 [ 84.342585][ T5279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.342679][ T5279] RIP: 0033:0x7f3bc049e159 [ 84.342756][ T5279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.342782][ T5279] RSP: 002b:00007f3bbeef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 84.342818][ T5279] RAX: ffffffffffffffda RBX: 00007f3bc0725fa0 RCX: 00007f3bc049e159 [ 84.342838][ T5279] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 84.342853][ T5279] RBP: 00007f3bbeef7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.342950][ T5279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.342968][ T5279] R13: 00007f3bc0726038 R14: 00007f3bc0725fa0 R15: 00007ffca762d168 [ 84.343000][ T5279] [ 84.662627][ T5288] set_capacity_and_notify: 2 callbacks suppressed [ 84.662665][ T5288] loop5: detected capacity change from 0 to 1024 [ 84.676830][ T5288] EXT4-fs: Ignoring removed orlov option [ 84.695194][ T5288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.075002][ T5297] loop3: detected capacity change from 0 to 512 [ 85.120825][ T5298] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.120986][ T5298] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.301003][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.385723][ T5300] loop1: detected capacity change from 0 to 8192 [ 85.387197][ T5283] loop4: detected capacity change from 0 to 512 [ 85.408562][ T5300] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.408691][ T5300] FAT-fs (loop1): Filesystem has been set read-only [ 85.409149][ T5300] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.409357][ T5300] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.428500][ T5283] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 85.435590][ T5283] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.435992][ T5283] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.436726][ T5283] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.419: Block bitmap for bg 0 marked uninitialized [ 85.436982][ T5283] loop4: lost filesystem error report for type 5 error -117 [ 85.437409][ T5283] EXT4-fs (loop4): Remounting filesystem read-only [ 85.437584][ T5283] EXT4-fs (loop4): 1 orphan inode deleted [ 85.441197][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.658019][ T5307] loop3: detected capacity change from 0 to 2048 [ 85.667399][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.696924][ T5307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.723955][ T5307] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #12: block 2: comm syz.3.427: lblock 0 mapped to illegal pblock 2 (length 1) [ 85.783082][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.011710][ T5312] FAULT_INJECTION: forcing a failure. [ 86.011710][ T5312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.011803][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.4.428 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.011843][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.011863][ T5312] Call Trace: [ 86.011873][ T5312] [ 86.011886][ T5312] __dump_stack+0x1d/0x30 [ 86.011923][ T5312] dump_stack_lvl+0x95/0xd0 [ 86.011958][ T5312] dump_stack+0x15/0x1b [ 86.011989][ T5312] should_fail_ex+0x262/0x280 [ 86.012023][ T5312] should_fail_alloc_page+0xf2/0x100 [ 86.012094][ T5312] __alloc_frozen_pages_noprof+0x157/0x400 [ 86.012148][ T5312] alloc_pages_mpol+0xaf/0x1d0 [ 86.012178][ T5312] vma_alloc_folio_noprof+0x1b3/0x300 [ 86.012320][ T5312] do_wp_page+0x64d/0x1ed0 [ 86.012420][ T5312] ? _raw_spin_lock+0x53/0xa0 [ 86.012567][ T5312] ? __rcu_read_lock+0x36/0x50 [ 86.012696][ T5312] handle_mm_fault+0xe29/0x3bb0 [ 86.012805][ T5312] do_user_addr_fault+0x636/0x1060 [ 86.012931][ T5312] ? ksys_mmap_pgoff+0xc1/0x310 [ 86.013047][ T5312] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 86.013326][ T5312] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 86.013462][ T5312] ? trace_page_fault_user+0x1f/0xa0 [ 86.013580][ T5312] exc_page_fault+0x62/0xa0 [ 86.013685][ T5312] asm_exc_page_fault+0x26/0x30 [ 86.013779][ T5312] RIP: 0033:0x7f3bc0355258 [ 86.013838][ T5312] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 86.013941][ T5312] RSP: 002b:00007f3bbeef6470 EFLAGS: 00010202 [ 86.014010][ T5312] RAX: 0000000000005005 RBX: 00007f3bbeef6530 RCX: 0000000000000004 [ 86.014066][ T5312] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f3bbeef65d0 [ 86.014121][ T5312] RBP: 0000000000000005 R08: 00007f3bb6ad7000 R09: 0000000000000004 [ 86.014212][ T5312] R10: 0000200000000642 R11: 0000000000000443 R12: 0000000000000301 [ 86.014270][ T5312] R13: 00007f3bc0555000 R14: 0000000000000013 R15: 00007f3bbeef65d0 [ 86.014350][ T5312] [ 86.058515][ T5312] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.147958][ T5312] loop4: detected capacity change from 0 to 512 [ 86.176222][ T5312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.203882][ T5312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.235312][ T5312] EXT4-fs (loop4): mount failed [ 86.540969][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 86.718989][ T5330] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.774837][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 86.878709][ T5330] loop2: detected capacity change from 0 to 2048 [ 86.888629][ T5330] ext3: Unknown parameter '' [ 86.925823][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 86.925927][ T29] audit: type=1400 audit(1788455294.329:1242): avc: denied { bind } for pid=5311 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.954225][ T29] audit: type=1400 audit(1788455294.359:1243): avc: denied { node_bind } for pid=5311 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 87.265240][ T5332] __vm_enough_memory: pid: 5332, comm: syz.5.429, bytes: 4503599627366400 not enough memory for the allocation [ 87.336571][ T29] audit: type=1400 audit(1788455294.739:1244): avc: denied { create } for pid=5345 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.339605][ T5349] loop3: detected capacity change from 0 to 512 [ 87.369514][ T5346] ================================================================== [ 87.369549][ T5346] BUG: KCSAN: data-race in init_file / prepare_creds [ 87.369581][ T5346] [ 87.369589][ T5346] write to 0xffff8881016743a8 of 4 bytes by task 5347 on cpu 0: [ 87.369612][ T5346] init_file+0x2d/0x1b0 [ 87.369635][ T5346] alloc_empty_file+0x85/0x1e0 [ 87.369660][ T5346] alloc_file_pseudo+0x92/0x120 [ 87.369686][ T5346] sock_alloc_file+0x9c/0x1e0 [ 87.369713][ T5346] __sys_socket+0x118/0x180 [ 87.369743][ T5346] __x64_sys_socket+0x3f/0x50 [ 87.369767][ T5346] x64_sys_call+0x246e/0x2550 [ 87.369803][ T5346] do_syscall_64+0x112/0x360 [ 87.369839][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.369867][ T5346] [ 87.369873][ T5346] read to 0xffff888101674300 of 184 bytes by task 5346 on cpu 1: [ 87.369896][ T5346] prepare_creds+0x71/0x550 [ 87.369932][ T5346] __sys_setuid+0x65/0x300 [ 87.369974][ T5346] __x64_sys_setuid+0x1e/0x30 [ 87.370016][ T5346] x64_sys_call+0x1e96/0x2550 [ 87.370050][ T5346] do_syscall_64+0x112/0x360 [ 87.370083][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.370111][ T5346] [ 87.370115][ T5346] Reported by Kernel Concurrency Sanitizer on: [ 87.370129][ T5346] CPU: 1 UID: 0 PID: 5346 Comm: syz.3.435 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.370162][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.370179][ T5346] ================================================================== [ 87.546528][ T5339] syz.1.433 (5339) used greatest stack depth: 9280 bytes left [ 87.570922][ T5353] loop2: detected capacity change from 0 to 512 [ 87.625924][ T5353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.626367][ T5353] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.667590][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.