last executing test programs: 8.872669134s ago: executing program 0 (id=366): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x86, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4906, 0xfc, 0x6, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xe, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x1160b0, 0xa7, 0x2, 0x0, 0xa9, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3, 0x0, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8000000000000001) 8.274913908s ago: executing program 1 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4000, 0x0, 0x6) sendmsg$NFT_BATCH(r1, 0x0, 0x4) fcntl$lock(r1, 0x25, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x240408d4) syz_emit_ethernet(0x2a, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r5, 0x301}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x64}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getpid() mkdir(0x0, 0x1ff) ftruncate(0xffffffffffffffff, 0x51a9497) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="4b4aabd95adfcb67df25010000000000000009410000140d7564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x40000) 8.126097542s ago: executing program 1 (id=372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000003f00)={0x0, 0x0, 0x0}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x2, 0x2, 0x8, 0x80000000}, {0x4, 0xd, 0x9, 0x5}]}) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0xf, 0x7ffc0001}]}) socket(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket(0x15, 0x6, 0x7) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x43, &(0x7f00000001c0)=[{&(0x7f0000000780)="d8000000180001004e81f782db4cb904021d0800fe00ff00000055a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.463653817s ago: executing program 1 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/31, 0x1f, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ptrace(0x10, r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x5ed001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)) 6.187331486s ago: executing program 1 (id=384): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace/set_event\x00', &(0x7f0000000100)='cifs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x0, r1, 'id0\x00'}) writev(r2, &(0x7f0000000080), 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xffc9) pwrite64(r0, 0x0, 0x0, 0x404042ffc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x34, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xad2, 0x0, 0x0, 0x0, 0x703}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x10001}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28090000030801010000000000000000000000000c00048008005d14830aabef03400000000005000300060000065ad3b18fb027ae21a918d5e6923491a4b7a8b07103f0a35d8a826251805c2c36f73e36f2b3c333be9bd0800a74c7d25603b36feffc7497b0c39c29283cbb3f70aee9f6c1596c15a77e8750f61a8c85e8ef4a7261c8cec59135b9a3c7f601c12bc370deae02b7e753836ca50863332b0e9f0b4521e260dbbe48c52abeeaf8f7fdf8c5902c557d1133a9f91ac6bb51ac574225f33f47ea4d76941f9c"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000003840)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000900)="15b49803411d4be5bfac7115b0edcfa47fd87f72d2e87a2f944e8649eae6b4c06f86ff0b61662a31229d9ce015436a25d2ea1d45fe796ea7fc4f9d945a159ef9fd0f0c23ddc2babccbcbdf8f6cf3cafeee53570ee6af41594a18f1a01fc696d7dd934a1827eabfec55f069b03bf0fae2ac7ee569591e2e67", 0x78}], 0x2, &(0x7f0000003700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, r5, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r6, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x120, 0xc004}}], 0x1, 0x0) 5.403368444s ago: executing program 2 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000d00000007000004010000000a00000002000000f9d54b448a01d1f068894c00000003000000fffbffff0b00000003000000010001000d00000004000000070000001000000003000000e30a000008000000010000000b0900000400000004000000060000000400000000000000000000006dfd9866b1033cf301efe6a90461b03acdb89351ac6149596796156f8d3c3a82053203bb997877c7dbcbe6d3fe4a4656791858768f6d841b649d9ddb31d4870f2387f6da042a74bb4315688ee131c4ff8feda09e6fe2d39ee20211c1a3a45c4cbe1a00676737925e49c22938d5e6d0998dc4c4ebe93993145de112"], &(0x7f0000000540)=""/246, 0x8a, 0xf6, 0x1}, 0x28) unshare(0x62040200) 4.585918123s ago: executing program 3 (id=394): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/31, 0x1f, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ptrace(0x10, r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x5ed001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)) 4.510934955s ago: executing program 2 (id=395): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1af4 ', 0x5) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket(0x2d, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x2, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4008ee5000000020000007ffffffe0000000000000000000006000000000000000000090000000000000000002000000000000700000000000000fdffffffffffffff00000400000000008e0a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb0000000000000000"], 0x104}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="3f2a6a1bc4", 0x5}], 0x1) recvfrom(r3, &(0x7f00000025c0)=""/4059, 0xfdb, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r5, 0x7a656000) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.433639897s ago: executing program 4 (id=396): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x10800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c00)="82b61b2205a55abb50ec38769ca48811ee57c28ac0124674129554a8b5881d948768181aaf6b8f138262f7578f8ecdf42b0efc07eb007e444d83006e177feced6a7ca028a81b4b9817fa48ced426764fcde2e386672de2533b5065b4e1a189d9a472907ec924140e79e305000000000000007f092ad44d4c21361c911c77fe915a4b642fcc32c27128b8891491582dd82c0081", &(0x7f0000000580)="ec2ddcf4836d1faf9891a854ccaa1f2bf4eabb6a2f034bc5eaeda7c002d0979c7f9d87c637be7873174b32830b322fb27d6247705c6f0b29eab387320e2f59e694dae5ca07358a47da7b1a8f490810b815f87af42cc862b96298e36f3590cde7c533ef156a5f4012e37761a67e9f3b900dacea1eed59dce079eb15dfde98cb0690805c24b081168731329402ad10a1e43785a9655f57cf1e821d82df60251bc9eb8f6a4d4e76600bc943eab75d851fe062eb2bc8c36ab3981eeee141f5bea01b26055e83", 0x7ff, r0}, 0x38) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x2, 0x0, 0x0, 0x7, 0x4d10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x7e, 0x5, 0xa, 0x220005, 0x14d7, 0x0, 0x40000, 0x0, 0x20000008}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$midi(0x3, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010410e494240000102030109022800010104800909"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000037cc00001801000020696c2455000000000000007b1af8ff000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r3, &(0x7f0000000140)=""/54, 0x36) getdents(r3, 0xfffffffffffffffd, 0xbb) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) write(r2, &(0x7f00000037c0)="83cefd69a69006dc83e659563fe5304fc1101b1dc9f1bc5b250cbbfe385ffbd98ae6f5c17b526c82", 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000000500)={&(0x7f00000004c0)=[{}, {0x0}, {0x0}], 0x3, 0x8, 0x0, 0x5, 0x4, 0x2, 0x4, 0x1}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0xb0, 0xb0, 0x1a8, 0x0, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003140)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 3.934416039s ago: executing program 3 (id=397): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000580)="030000001e00030000201a80330061cc", 0x47) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 3.918434339s ago: executing program 3 (id=398): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r3, 0x8f5, 0x100000000000000) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x80000000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 3.844124151s ago: executing program 4 (id=399): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x3d, &(0x7f0000000200)=""/188) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvfrom(r0, 0x0, 0x4f, 0x40002021, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x102000, 0x800, 0xd, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') sendmsg$xdp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x2c4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x4028800) 3.531419288s ago: executing program 2 (id=400): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1af4 ', 0x5) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket(0x2d, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x2, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4008ee5000000020000007ffffffe0000000000000000000006000000000000000000090000000000000000002000000000000700000000000000fdffffffffffffff00000400000000008e0a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb0000000000000000"], 0x104}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="3f2a6a1bc4", 0x5}], 0x1) recvfrom(r3, &(0x7f00000025c0)=""/4059, 0xfdb, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.238090045s ago: executing program 4 (id=401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r1 = open(0x0, 0x66c42, 0xb4) pwritev2(r1, 0x0, 0x0, 0x5a00, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008042) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) unshare(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x20000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x8000085c, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 3.191548736s ago: executing program 0 (id=402): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000200)='./file1\x00', 0x108842, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0009}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.070267029s ago: executing program 4 (id=403): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, &(0x7f0000000900)={'team_slave_0\x00', @random='\x00\x00\x00 \x00'}) mount$bind(0x0, 0x0, 0x0, 0x21, 0x4000000) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000300)={0x8, 0xffffffff, 0x9, 0xec, 0x2, 0xb}) rt_tgsigqueueinfo(0x0, 0x0, 0x3, &(0x7f0000000480)={0x14, 0x6, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.00227066s ago: executing program 1 (id=404): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x8, 0x1ff, 0x6, "0d4181070081ff00800000220000f88c6b00", 0xa27b, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 2.949868141s ago: executing program 1 (id=405): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r3, 0x8f5, 0x100000000000000) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x80000000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.914089942s ago: executing program 4 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000d00000007000004010000000a00000002000000f9d54b448a01d1f068894c00000003000000fffbffff0b00000003000000010001000d00000004000000070000001000000003000000e30a000008000000010000000b0900000400000004000000060000000400000000000000000000006dfd9866b1033cf301efe6a90461b03acdb89351ac6149596796156f8d3c3a82053203bb997877c7dbcbe6d3fe4a4656791858768f6d841b649d9ddb31d4870f2387f6da042a74bb4315688ee131c4ff8feda09e6fe2d39ee20211c1a3a45c4cbe1a00676737925e49c22938d5e6d0998dc4c4ebe93993145de11214"], 0x0, 0x8a, 0x0, 0x1}, 0x28) unshare(0x62040200) 2.111573121s ago: executing program 2 (id=407): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/31, 0x1f, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ptrace(0x10, r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x5ed001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)) 2.075792001s ago: executing program 0 (id=408): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000580)="030000001e00030000201a80330061cc", 0x47) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 1.996260183s ago: executing program 0 (id=409): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='auxv\x00') writev(r1, &(0x7f00000051c0)=[{&(0x7f0000004100)}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") chmod(0x0, 0x21) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) accept$packet(r2, 0x0, &(0x7f0000000140)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080)=0x1e8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x1d}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800003, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaff08004600003400000000080190780a010102ac1414aa83032c000b009078032c0000450000000000000000890000ac1414bbac142daa"], 0x0) unshare(0x22020600) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000180)=""/125) 1.994942463s ago: executing program 4 (id=410): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1af4 ', 0x5) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket(0x2d, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x2, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4008ee5000000020000007ffffffe0000000000000000000006000000000000000000090000000000000000002000000000000700000000000000fdffffffffffffff00000400000000008e0a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb0000000000000000"], 0x104}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="3f2a6a1bc4", 0x5}], 0x1) recvfrom(r3, &(0x7f00000025c0)=""/4059, 0xfdb, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.590368603s ago: executing program 0 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4000, 0x0, 0x6) sendmsg$NFT_BATCH(r0, 0x0, 0x4) fcntl$lock(r0, 0x25, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x240408d4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r4, 0x301}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x64}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="4b4aabd95adfcb67df25010000000000000009410000140d7564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x40000) 1.463951076s ago: executing program 2 (id=412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000000000}) fcntl$lock(r0, 0x6, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x20000000000001, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x24, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000180)='./cgroup\x00', r1, &(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x8882) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000008000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffffffffffbe65fbccf607f88c8bf54360eb342ee5508060001080006040008519f"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) syz_usb_connect$uac2(0x2, 0xc5, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x40, 0x6, 0x0, 0xff, 0x6}, 0x3c, &(0x7f0000000a80)={0x5, 0xf, 0x3c, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x0, 0xea, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "23d0ecf08dc140c489704561d106e91f"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x10, 0xc, 0x3, 0x3}]}, 0x4, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc09}}, {0x23, 0x0}, {0x8d, &(0x7f0000000c40)=@string={0x8d, 0x3, "2dbfc46ca1ceae0e32b6cf3c34ac690b4800a01e3d4858e5ef3080ca0e07467fee1de9dacbeb3c7288f203ae097a18f05a16d89582911332d807c60591da12faecb0b479a64fff8198dc9126f8060e37d61a6e53707728c5e01181177b419235b6cdff8ae33712f06833c9e8cac1c9368e8e6b01a1b696c6a108cb34a983cb4337a155a40cc41ec5655389"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x380a}}]}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e210"], 0xdd12}], 0x1}, 0x20000400) 1.419337417s ago: executing program 0 (id=413): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace/set_event\x00', &(0x7f0000000100)='cifs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x0, r1, 'id0\x00'}) writev(r2, &(0x7f0000000080), 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xffc9) pwrite64(r0, 0x0, 0x0, 0x404042ffc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x34, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xad2, 0x0, 0x0, 0x0, 0x703}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x10001}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28090000030801010000000000000000000000000c00048008005d14830aabef03400000000005000300060000065ad3b18fb027ae21a918d5e6923491a4b7a8b07103f0a35d8a826251805c2c36f73e36f2b3c333be9bd0800a74c7d25603b36feffc7497b0c39c29283cbb3f70aee9f6c1596c15a77e8750f61a8c85e8ef4a7261c8cec59135b9a3c7f601c12bc370deae02b7e753836ca50863332b0e9f0b4521e260dbbe48c52abeeaf8f7fdf8c5902c557d1133a9f91ac6bb51ac574225f33f47ea4d76941f9c"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000003840)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000800)="5f898454c2eed39f30da35c5d8bcd309a8bd0d5754bf7b2594a160f0ff5c0e813772304820c329ea8770c27b078d061552d2ba63255df93a72d2ff06ca72122c5d9127d661a45de85243dabc477225a59b85eb3b5b20bbb5314d6b5ab1e27f84cd61dbc240c53e1769006ce10f8f83e4fe0cec994ff1ca9b8d3dc4b6f331bf2a9f771606949ff2f0d7c159b51759736351f2e24f6fdc8f3ad5ff0ab8a571a0ebd7ed1a49c0a249aa575abef979978d8d7ef40f1eca8e792b98b19e2663d7bdabff62a82ecdc2c304c70904fd693eea4835a791d1ab9729065feedabbe612f92a3f06ee451d85c303efb4363ff2b488db52dc94cb4b904a1a5d96", 0xfa}, {&(0x7f0000000900)="15b49803411d4be5bfac7115b0edcfa47fd87f72d2e87a2f944e8649eae6b4c06f86ff0b61662a31229d9ce015436a25d2ea1d45fe796ea7fc4f9d945a159ef9fd0f0c23ddc2babccbcbdf8f6cf3cafeee53570ee6af41594a18f1a01fc696d7dd934a1827eabfec55f069b03bf0fae2ac7ee569591e2e67", 0x78}], 0x2, &(0x7f0000003700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, r5, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r6, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x120, 0xc004}}], 0x1, 0x0) 656.511714ms ago: executing program 3 (id=414): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace/set_event\x00', &(0x7f0000000100)='cifs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x0, r1, 'id0\x00'}) writev(r2, &(0x7f0000000080), 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xffc9) pwrite64(r0, 0x0, 0x0, 0x404042ffc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x34, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xad2, 0x0, 0x0, 0x0, 0x703}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x10001}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28090000030801010000000000000000000000000c00048008005d14830aabef03400000000005000300060000065ad3b18fb027ae21a918d5e6923491a4b7a8b07103f0a35d8a826251805c2c36f73e36f2b3c333be9bd0800a74c7d25603b36feffc7497b0c39c29283cbb3f70aee9f6c1596c15a77e8750f61a8c85e8ef4a7261c8cec59135b9a3c7f601c12bc370deae02b7e753836ca50863332b0e9f0b4521e260dbbe48c52abeeaf8f7fdf8c5902c557d1133a9f91ac6bb51ac574225f33f47ea4d76941f9c"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000003840)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000800)="5f898454c2eed39f30da35c5d8bcd309a8bd0d5754bf7b2594a160f0ff5c0e813772304820c329ea8770c27b078d061552d2ba63255df93a72d2ff06ca72122c5d9127d661a45de85243dabc477225a59b85eb3b5b20bbb5314d6b5ab1e27f84cd61dbc240c53e1769006ce10f8f83e4fe0cec994ff1ca9b8d3dc4b6f331bf2a9f771606949ff2f0d7c159b51759736351f2e24f6fdc8f3ad5ff0ab8a571a0ebd7ed1a49c0a249aa575abef979978d8d7ef40f1eca8e792b98b19e2663d7bdabff62a82ecdc2c304c70904fd693eea4835a791d1ab9729065feedabbe612f92a3f06ee451d85c303efb4363ff2b488db52dc94cb4b904a1a5d96", 0xfa}, {&(0x7f0000000900)="15b49803411d4be5bfac7115b0edcfa47fd87f72d2e87a2f944e8649eae6b4c06f86ff0b61662a31229d9ce015436a25d2ea1d45fe796ea7fc4f9d945a159ef9fd0f0c23ddc2babccbcbdf8f6cf3cafeee53570ee6af41594a18f1a01fc696d7dd934a1827eabfec55f069b03bf0fae2ac7ee569591e2e67077b79a6d1693dea26286e3eb2cc5d6a688831957c8dd4da942734e0966159811d0623816b219ee58e41977f332cf2c51cbc3b2add2341b5ff6a4fb7", 0xb4}], 0x2, &(0x7f0000003700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, r5, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r6, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x120, 0xc004}}], 0x1, 0x0) 112.961977ms ago: executing program 3 (id=415): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x8, 0x1ff, 0x6, "0d4181070081ff00800000220000f88c6b00", 0xa27b, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 65.336008ms ago: executing program 3 (id=416): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, &(0x7f0000000900)={'team_slave_0\x00', @random='\x00\x00\x00 \x00'}) mount$bind(0x0, 0x0, 0x0, 0x21, 0x4000000) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000300)={0x8, 0xffffffff, 0x9, 0xec, 0x2, 0xb}) rt_tgsigqueueinfo(0x0, 0x0, 0x3, &(0x7f0000000480)={0x14, 0x6, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 0s ago: executing program 2 (id=417): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "48006246439c220f6ffecc3531919a57bc772f628c9aa314640b40e6629fc309"}, 0x30) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r0, 0xa0200) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 744:212): avc: denied { write } for pid=3535 comm="syz.4.11" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.407007][ T29] audit: type=1400 audit(1788900158.744:213): avc: denied { add_name } for pid=3535 comm="syz.4.11" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.410487][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 37.410517][ C0] EXT4-fs (loop1): initial error at time 1788900158: ext4_mb_generate_buddy:1317 [ 37.410548][ C0] EXT4-fs (loop1): last error at time 1788900158: ext4_mb_generate_buddy:1317 [ 37.414605][ T3539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.11: bg 0: block 112: padding at end of block bitmap is not set [ 37.448567][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 37.464498][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.14: corrupted inode contents [ 37.464591][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.469100][ T3549] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.14: mark_inode_dirty error [ 37.469193][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.469923][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.14: corrupted inode contents [ 37.470015][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.471933][ T3549] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.14: mark_inode_dirty error [ 37.472017][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.472461][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.14: corrupted inode contents [ 37.472542][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.472892][ T3549] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 37.472953][ T3549] loop1: lost filesystem error report for type 5 error -117 [ 37.479993][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.14: corrupted inode contents [ 37.480082][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.481453][ T3549] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.14: mark_inode_dirty error [ 37.481535][ T3549] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.481846][ T3549] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 37.481954][ T3549] loop1: lost filesystem error report for type 5 error -117 [ 37.488300][ T3549] EXT4-fs (loop1): 1 truncate cleaned up [ 37.489451][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.492727][ T3549] ext4 filesystem being mounted at /3/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 37.514804][ T322] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 37.637265][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.733733][ T3554] netlink: 'syz.0.16': attribute type 5 has an invalid length. [ 37.743179][ T3554] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16'. [ 37.767571][ T3539] syz.4.11 (3539) used greatest stack depth: 10880 bytes left [ 37.780756][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.837593][ T3559] FAULT_INJECTION: forcing a failure. [ 37.837593][ T3559] name failslab, interval 1, probability 0, space 0, times 0 [ 37.837657][ T3559] CPU: 1 UID: 0 PID: 3559 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.837684][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.837700][ T3559] Call Trace: [ 37.837709][ T3559] [ 37.837719][ T3559] __dump_stack+0x1d/0x30 [ 37.837753][ T3559] dump_stack_lvl+0x95/0xd0 [ 37.837784][ T3559] dump_stack+0x15/0x1b [ 37.837922][ T3559] should_fail_ex+0x262/0x280 [ 37.837946][ T3559] ? __alloc_skb+0x2e0/0x6f0 [ 37.838071][ T3559] should_failslab+0x8c/0xb0 [ 37.838185][ T3559] kmem_cache_alloc_node_noprof+0x82/0x400 [ 37.838333][ T3559] ? netlink_insert+0x684/0x900 [ 37.838429][ T3559] ? __alloc_skb+0x2e0/0x6f0 [ 37.838535][ T3559] __alloc_skb+0x2e0/0x6f0 [ 37.838635][ T3559] ? __alloc_skb+0x209/0x6f0 [ 37.838746][ T3559] netlink_alloc_large_skb+0xbf/0xf0 [ 37.838839][ T3559] netlink_sendmsg+0x40c/0x6f0 [ 37.839025][ T3559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.839140][ T3559] ____sys_sendmsg+0x532/0x580 [ 37.839256][ T3559] ___sys_sendmsg+0x195/0x1e0 [ 37.839421][ T3559] __x64_sys_sendmsg+0xd4/0x160 [ 37.839566][ T3559] x64_sys_call+0x22ab/0x2550 [ 37.839727][ T3559] do_syscall_64+0x112/0x360 [ 37.839864][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.839961][ T3559] RIP: 0033:0x7efee1dbe159 [ 37.840068][ T3559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.840148][ T3559] RSP: 002b:00007efee0817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.840262][ T3559] RAX: ffffffffffffffda RBX: 00007efee2045fa0 RCX: 00007efee1dbe159 [ 37.840314][ T3559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 37.840358][ T3559] RBP: 00007efee0817090 R08: 0000000000000000 R09: 0000000000000000 [ 37.840439][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.840482][ T3559] R13: 00007efee2046038 R14: 00007efee2045fa0 R15: 00007fff772725f8 [ 37.840552][ T3559] [ 37.969189][ T3566] loop2: detected capacity change from 0 to 164 [ 37.982984][ T3566] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 38.234091][ T3575] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 38.441145][ T3573] loop0: detected capacity change from 0 to 164 [ 38.456337][ T3584] Cannot find add_set index 0 as target [ 38.536776][ T3573] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 38.885389][ T3593] netlink: 'syz.0.27': attribute type 5 has an invalid length. [ 38.944886][ T3597] netlink: 64 bytes leftover after parsing attributes in process `syz.0.27'. [ 38.958096][ T3594] loop3: detected capacity change from 0 to 164 [ 39.095430][ T3604] EXT4-fs: Ignoring removed orlov option [ 39.119830][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.134071][ T3604] EXT4-fs error (device loop4): __ext4_new_inode:1289: comm syz.4.30: failed to insert inode 12: doubly allocated? [ 39.149819][ T3604] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 39.189376][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.292335][ T3618] netlink: 14 bytes leftover after parsing attributes in process `syz.1.34'. [ 39.342086][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.1.34 [ 39.592741][ T3634] : renamed from bond_slave_0 (while UP) [ 40.279263][ T3638] EXT4-fs: Ignoring removed orlov option [ 40.298124][ T3638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.337506][ T3642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.37'. [ 40.337559][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 40.358508][ T3638] capability: warning: `syz.1.36' uses deprecated v2 capabilities in a way that may be insecure [ 40.411922][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.532240][ T3648] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 40.569643][ T3650] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.38: iget: bad i_size value: 38620345925642 [ 40.569679][ T3650] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.582392][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 40.582420][ C0] EXT4-fs (loop3): initial error at time 1788900161: ext4_orphan_get:1403: inode 15 [ 40.582478][ C0] EXT4-fs (loop3): last error at time 1788900161: ext4_orphan_get:1403: inode 15 [ 40.619980][ T3650] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 40.620048][ T3650] loop3: lost filesystem error report for type 5 error -117 [ 40.632473][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.670653][ T3654] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 40.671189][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.41: corrupted inode contents [ 40.671240][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.671391][ T3654] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.41: mark_inode_dirty error [ 40.671425][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.671638][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.41: corrupted inode contents [ 40.671961][ T3654] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.41: mark_inode_dirty error [ 40.673492][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.41: corrupted inode contents [ 40.675808][ T3654] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 40.675875][ T3654] loop1: lost filesystem error report for type 5 error -117 [ 40.676696][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.41: corrupted inode contents [ 40.678368][ T3654] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.41: mark_inode_dirty error [ 40.678753][ T3654] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 40.678779][ T3654] loop1: lost filesystem error report for type 5 error -117 [ 40.681812][ T3654] EXT4-fs (loop1): 1 truncate cleaned up [ 40.682740][ T3654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.682934][ T3654] ext4 filesystem being mounted at /11/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 40.694703][ T3652] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 40.700050][ T133] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 40.766073][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.891522][ T3658] set_capacity_and_notify: 4 callbacks suppressed [ 40.891557][ T3658] loop2: detected capacity change from 0 to 512 [ 40.905071][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.915448][ T3658] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.962103][ T3664] loop3: detected capacity change from 0 to 256 [ 40.975853][ T3658] EXT4-fs (loop2): shut down requested (0) [ 41.006838][ T3301] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.055803][ T3671] loop2: detected capacity change from 0 to 164 [ 41.207816][ T3669] loop1: detected capacity change from 0 to 164 [ 41.337193][ T3669] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 41.643010][ T3685] loop1: detected capacity change from 0 to 1024 [ 41.655240][ T3685] EXT4-fs: Ignoring removed orlov option [ 41.668159][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.790829][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.884691][ T3692] Cannot find add_set index 0 as target [ 41.885837][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 42.083500][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 42.089975][ T29] audit: type=1326 audit(1788900163.424:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.110911][ T3696] tmpfs: Bad value for 'mpol' [ 42.117714][ T29] audit: type=1326 audit(1788900163.424:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.117776][ T29] audit: type=1326 audit(1788900163.434:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.117804][ T29] audit: type=1326 audit(1788900163.434:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.117831][ T29] audit: type=1326 audit(1788900163.434:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13e2e4e98e code=0x7ffc0000 [ 42.117915][ T29] audit: type=1326 audit(1788900163.434:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f13e2e8f457 code=0x7ffc0000 [ 42.117960][ T29] audit: type=1326 audit(1788900163.434:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.118129][ T29] audit: type=1326 audit(1788900163.434:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f13e2e8f457 code=0x7ffc0000 [ 42.118223][ T29] audit: type=1326 audit(1788900163.434:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13e2e4e98e code=0x7ffc0000 [ 42.118315][ T29] audit: type=1326 audit(1788900163.434:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.3.52" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 42.409843][ T3700] loop0: detected capacity change from 0 to 164 [ 42.589357][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 42.613122][ T3704] loop1: detected capacity change from 0 to 512 [ 42.651053][ T3704] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.56: bad orphan inode 16 [ 42.651155][ T3704] loop1: lost filesystem error report for type 5 error -117 [ 42.652854][ T3704] ext4_test_bit(bit=15, block=18) = 1 [ 42.652929][ T3704] is_bad_inode(inode)=0 [ 42.653111][ T3704] NEXT_ORPHAN(inode)=83886080 [ 42.653230][ T3704] max_ino=32 [ 42.653280][ T3704] i_nlink=0 [ 42.676060][ T38] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 42.676094][ T38] loop1: lost filesystem error report for type 5 error -117 [ 42.686895][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.687526][ T3704] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.736034][ T3704] program syz.1.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.801899][ T3712] FAULT_INJECTION: forcing a failure. [ 42.801899][ T3712] name failslab, interval 1, probability 0, space 0, times 0 [ 42.801934][ T3712] CPU: 0 UID: 0 PID: 3712 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.801965][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.802012][ T3712] Call Trace: [ 42.802021][ T3712] [ 42.802030][ T3712] __dump_stack+0x1d/0x30 [ 42.802061][ T3712] dump_stack_lvl+0x95/0xd0 [ 42.802097][ T3712] dump_stack+0x15/0x1b [ 42.802124][ T3712] should_fail_ex+0x262/0x280 [ 42.802160][ T3712] ? __send_signal_locked+0x14d/0x750 [ 42.802198][ T3712] should_failslab+0x8c/0xb0 [ 42.802244][ T3712] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 42.802342][ T3712] ? __send_signal_locked+0x14d/0x750 [ 42.802431][ T3712] __send_signal_locked+0x14d/0x750 [ 42.802472][ T3712] send_signal_locked+0x3b0/0x430 [ 42.802509][ T3712] force_sig_info_to_task+0x1de/0x270 [ 42.802587][ T3712] force_sig_fault+0x91/0xc0 [ 42.802626][ T3712] exc_page_fault+0x62/0xa0 [ 42.802656][ T3712] asm_exc_page_fault+0x26/0x30 [ 42.802759][ T3712] RIP: 0033:0x7f13e2d42d1d [ 42.802778][ T3712] Code: 89 4c 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 23 b4 14 00 <8b> 13 49 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 [ 42.802804][ T3712] RSP: 002b:00007f13e18c5fc0 EFLAGS: 00010286 [ 42.802825][ T3712] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: ffffffffffffffe8 [ 42.802844][ T3712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001a57 [ 42.802862][ T3712] RBP: 00007f13e18c6090 R08: 0000000000000000 R09: 0000000000000101 [ 42.802881][ T3712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.802924][ T3712] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd405caff8 [ 42.802949][ T3712] [ 42.849094][ T3711] Cannot find add_set index 0 as target [ 42.890706][ T3704] syz.1.56 (3704) used greatest stack depth: 9344 bytes left [ 42.900359][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.921348][ T3702] loop4: detected capacity change from 0 to 1024 [ 42.999658][ T3702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.007847][ T3702] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.118699][ T3721] loop1: detected capacity change from 0 to 1024 [ 43.124202][ T3721] EXT4-fs: Ignoring removed orlov option [ 43.141937][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.157946][ T3721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.347964][ T3734] netlink: 'syz.0.62': attribute type 5 has an invalid length. [ 43.412818][ T3736] netlink: 64 bytes leftover after parsing attributes in process `syz.0.62'. [ 43.469541][ T3733] geneve2: entered promiscuous mode [ 43.471161][ T3733] geneve2: entered allmulticast mode [ 43.591131][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.799077][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 44.601737][ T3764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 44.851155][ T3777] loop4: detected capacity change from 0 to 1024 [ 44.896302][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.896440][ T3777] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.084960][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.156906][ T3784] netlink: 'syz.4.74': attribute type 5 has an invalid length. [ 45.176150][ T3784] netlink: 64 bytes leftover after parsing attributes in process `syz.4.74'. [ 45.302445][ T3787] EXT4-fs: Ignoring removed orlov option [ 45.307255][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.437620][ T3794] FAULT_INJECTION: forcing a failure. [ 45.437620][ T3794] name failslab, interval 1, probability 0, space 0, times 0 [ 45.437699][ T3794] CPU: 0 UID: 0 PID: 3794 Comm: syz.4.77 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.437732][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.437751][ T3794] Call Trace: [ 45.437758][ T3794] [ 45.437766][ T3794] __dump_stack+0x1d/0x30 [ 45.437790][ T3794] dump_stack_lvl+0x95/0xd0 [ 45.437886][ T3794] dump_stack+0x15/0x1b [ 45.437962][ T3794] should_fail_ex+0x262/0x280 [ 45.437983][ T3794] ? __alloc_skb+0x2e0/0x6f0 [ 45.438009][ T3794] should_failslab+0x8c/0xb0 [ 45.438053][ T3794] kmem_cache_alloc_node_noprof+0x82/0x400 [ 45.438185][ T3794] ? netlink_insert+0x684/0x900 [ 45.438209][ T3794] ? __alloc_skb+0x2e0/0x6f0 [ 45.438236][ T3794] __alloc_skb+0x2e0/0x6f0 [ 45.438295][ T3794] ? __alloc_skb+0x209/0x6f0 [ 45.438324][ T3794] netlink_alloc_large_skb+0xbf/0xf0 [ 45.438348][ T3794] netlink_sendmsg+0x40c/0x6f0 [ 45.438444][ T3794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.438542][ T3794] ____sys_sendmsg+0x532/0x580 [ 45.438605][ T3794] ___sys_sendmsg+0x195/0x1e0 [ 45.438693][ T3794] __x64_sys_sendmsg+0xd4/0x160 [ 45.438728][ T3794] x64_sys_call+0x22ab/0x2550 [ 45.438767][ T3794] do_syscall_64+0x112/0x360 [ 45.438795][ T3794] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 45.438891][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.438971][ T3794] RIP: 0033:0x7fa366dde159 [ 45.438986][ T3794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.439002][ T3794] RSP: 002b:00007fa365837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.439021][ T3794] RAX: ffffffffffffffda RBX: 00007fa367065fa0 RCX: 00007fa366dde159 [ 45.439034][ T3794] RDX: 0000000000044040 RSI: 00002000000037c0 RDI: 0000000000000003 [ 45.439046][ T3794] RBP: 00007fa365837090 R08: 0000000000000000 R09: 0000000000000000 [ 45.439091][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.439102][ T3794] R13: 00007fa367066038 R14: 00007fa367065fa0 R15: 00007ffebf336c88 [ 45.439122][ T3794] [ 45.922014][ T3803] FAULT_INJECTION: forcing a failure. [ 45.922014][ T3803] name failslab, interval 1, probability 0, space 0, times 0 [ 45.922057][ T3803] CPU: 0 UID: 0 PID: 3803 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.922143][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.922157][ T3803] Call Trace: [ 45.922164][ T3803] [ 45.922172][ T3803] __dump_stack+0x1d/0x30 [ 45.922300][ T3803] dump_stack_lvl+0x95/0xd0 [ 45.922324][ T3803] dump_stack+0x15/0x1b [ 45.922347][ T3803] should_fail_ex+0x262/0x280 [ 45.922427][ T3803] ? skb_clone+0x151/0x1f0 [ 45.922471][ T3803] should_failslab+0x8c/0xb0 [ 45.922510][ T3803] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 45.922640][ T3803] ? skb_clone+0x151/0x1f0 [ 45.922687][ T3803] skb_clone+0x151/0x1f0 [ 45.922730][ T3803] __netlink_deliver_tap+0x2be/0x510 [ 45.922792][ T3803] netlink_unicast+0x656/0x680 [ 45.922887][ T3803] netlink_sendmsg+0x5be/0x6f0 [ 45.922925][ T3803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.922954][ T3803] ____sys_sendmsg+0x532/0x580 [ 45.922995][ T3803] ___sys_sendmsg+0x195/0x1e0 [ 45.923114][ T3803] __x64_sys_sendmsg+0xd4/0x160 [ 45.923209][ T3803] x64_sys_call+0x22ab/0x2550 [ 45.923240][ T3803] do_syscall_64+0x112/0x360 [ 45.923283][ T3803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.923355][ T3803] RIP: 0033:0x7efee1dbe159 [ 45.923372][ T3803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.923391][ T3803] RSP: 002b:00007efee0817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.923414][ T3803] RAX: ffffffffffffffda RBX: 00007efee2045fa0 RCX: 00007efee1dbe159 [ 45.923433][ T3803] RDX: 0000000000000004 RSI: 00002000000047c0 RDI: 0000000000000003 [ 45.923451][ T3803] RBP: 00007efee0817090 R08: 0000000000000000 R09: 0000000000000000 [ 45.923497][ T3803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.923510][ T3803] R13: 00007efee2046038 R14: 00007efee2045fa0 R15: 00007fff772725f8 [ 45.923529][ T3803] [ 46.041362][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 46.059845][ T3805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 46.082746][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.166385][ T3808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 46.196624][ T3799] set_capacity_and_notify: 1 callbacks suppressed [ 46.196680][ T3799] loop4: detected capacity change from 0 to 512 [ 46.219744][ T3812] loop3: detected capacity change from 0 to 164 [ 46.275546][ T3799] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.79: bad orphan inode 16 [ 46.275605][ T3799] loop4: lost filesystem error report for type 5 error -117 [ 46.276295][ T3799] ext4_test_bit(bit=15, block=18) = 1 [ 46.276480][ T3799] is_bad_inode(inode)=0 [ 46.276542][ T3799] NEXT_ORPHAN(inode)=83886080 [ 46.276597][ T3799] max_ino=32 [ 46.276651][ T3799] i_nlink=0 [ 46.293798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.293862][ C1] EXT4-fs (loop4): initial error at time 1788900167: ext4_orphan_get:1429 [ 46.293939][ C1] EXT4-fs (loop4): last error at time 1788900167: ext4_orphan_get:1429 [ 46.352159][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.352412][ T3799] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.375519][ T57] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 46.407386][ T3799] program syz.4.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.496572][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.571684][ T3816] loop4: detected capacity change from 0 to 512 [ 46.581429][ T3816] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 46.730787][ T3810] loop0: detected capacity change from 0 to 1024 [ 46.841142][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.005556][ T3810] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.205927][ T3825] capability: warning: `syz.2.88' uses 32-bit capabilities (legacy support in use) [ 47.587392][ T3829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.90'. [ 47.616399][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 47.616426][ T29] audit: type=1326 audit(1788900168.964:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b3e159 code=0x7ffc0000 [ 47.616980][ T29] audit: type=1326 audit(1788900168.964:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b3e159 code=0x7ffc0000 [ 47.617020][ T29] audit: type=1326 audit(1788900168.964:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b3e159 code=0x7ffc0000 [ 47.678460][ T29] audit: type=1326 audit(1788900169.024:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cb2b3dec2 code=0x7ffc0000 [ 47.678538][ T29] audit: type=1326 audit(1788900169.024:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cb2b3dec2 code=0x7ffc0000 [ 47.756711][ T29] audit: type=1326 audit(1788900169.104:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b3e159 code=0x7ffc0000 [ 47.756930][ T29] audit: type=1326 audit(1788900169.104:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cb2b3dec2 code=0x7ffc0000 [ 47.756965][ T29] audit: type=1326 audit(1788900169.104:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7cb2b3df57 code=0x7ffc0000 [ 47.757007][ T29] audit: type=1326 audit(1788900169.104:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7cb2afae51 code=0x7ffc0000 [ 47.757038][ T29] audit: type=1326 audit(1788900169.104:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.1.89" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7cb2b3ef49 code=0x7ffc0000 [ 47.784756][ T3780] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 48.396497][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.556680][ T3842] loop3: detected capacity change from 0 to 1024 [ 48.582956][ T3842] EXT4-fs: Ignoring removed orlov option [ 48.605496][ T3842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.667277][ T3834] geneve2: entered promiscuous mode [ 48.675517][ T3834] geneve2: entered allmulticast mode [ 48.875657][ T3852] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 48.990633][ T3855] netlink: 244 bytes leftover after parsing attributes in process `syz.4.95'. [ 49.031924][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 49.049091][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.124011][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 49.196134][ T3857] loop5: detected capacity change from 0 to 7 [ 49.196521][ T3857] loop5: [ 49.332841][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 49.578933][ T3874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 50.002902][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 50.025364][ T3884] loop4: detected capacity change from 0 to 512 [ 50.062254][ T3884] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.104: bad orphan inode 16 [ 50.062345][ T3884] loop4: lost filesystem error report for type 5 error -117 [ 50.072489][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 50.072515][ C1] EXT4-fs (loop4): initial error at time 1788900171: ext4_orphan_get:1429 [ 50.072544][ C1] EXT4-fs (loop4): last error at time 1788900171: ext4_orphan_get:1429 [ 50.075232][ T3882] loop0: detected capacity change from 0 to 1024 [ 50.095792][ T3884] ext4_test_bit(bit=15, block=18) = 1 [ 50.095892][ T3884] is_bad_inode(inode)=0 [ 50.095929][ T3884] NEXT_ORPHAN(inode)=83886080 [ 50.095953][ T3884] max_ino=32 [ 50.095989][ T3884] i_nlink=0 [ 50.134484][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.136352][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.137846][ T3884] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.139313][ T3882] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.157214][ T3884] program syz.4.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.171784][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 50.185144][ T3882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.103: bg 0: block 112: padding at end of block bitmap is not set [ 50.241802][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.270186][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.319493][ T3893] loop0: detected capacity change from 0 to 1024 [ 50.328481][ T3893] EXT4-fs: Ignoring removed orlov option [ 50.348749][ T3893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.356453][ T3897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.107'. [ 50.407680][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.528620][ T3901] SET target dimension over the limit! [ 50.631435][ T3903] loop1: detected capacity change from 0 to 512 [ 50.655155][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.655267][ T3903] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.687931][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.003655][ T3919] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 51.014060][ T3917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=3917 comm=syz.2.112 [ 51.040406][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 51.091274][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.102028][ T3924] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 51.119789][ T3921] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.113: bad orphan inode 16 [ 51.119867][ T3921] loop0: lost filesystem error report for type 5 error -117 [ 51.120319][ T3921] ext4_test_bit(bit=15, block=18) = 1 [ 51.120357][ T3921] is_bad_inode(inode)=0 [ 51.120411][ T3921] NEXT_ORPHAN(inode)=83886080 [ 51.120432][ T3921] max_ino=32 [ 51.120534][ T3921] i_nlink=0 [ 51.123556][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 51.123581][ C1] EXT4-fs (loop0): initial error at time 1788900172: ext4_orphan_get:1429 [ 51.123617][ C1] EXT4-fs (loop0): last error at time 1788900172: ext4_orphan_get:1429 [ 51.135911][ T3921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.137095][ T3921] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.155682][ T326] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 1 [ 51.177819][ T3921] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.228909][ T3929] set_capacity_and_notify: 1 callbacks suppressed [ 51.229041][ T3929] loop2: detected capacity change from 0 to 164 [ 51.323763][ T3934] SET target dimension over the limit! [ 51.476785][ T3936] loop1: detected capacity change from 0 to 1024 [ 51.500207][ T3936] EXT4-fs: Ignoring removed orlov option [ 51.518119][ T3936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.545198][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.627728][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.709928][ T3940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=3940 comm=syz.0.119 [ 51.711972][ T3942] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 51.734091][ T57] IPVS: starting estimator thread 0... [ 51.813199][ T3949] Cannot find add_set index 0 as target [ 51.844757][ T3943] IPVS: using max 2304 ests per chain, 115200 per kthread [ 52.128225][ T3966] RDS: rds_bind could not find a transport for ::ffff:128.0.0.0, load rds_tcp or rds_rdma? [ 52.214449][ T3975] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 52.216905][ T3972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=3972 comm=syz.1.125 [ 52.456591][ T3986] loop2: detected capacity change from 0 to 512 [ 52.476530][ T3986] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 52.476706][ T3986] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.128: corrupted in-inode xattr: e_value size too large [ 52.476751][ T3986] fserror_report: 5 callbacks suppressed [ 52.476767][ T3986] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.477174][ T3986] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.128: couldn't read orphan inode 15 (err -117) [ 52.477282][ T3986] loop2: lost filesystem error report for type 5 error -117 [ 52.478547][ T3986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.556532][ T3974] geneve2: entered promiscuous mode [ 52.556704][ T3974] geneve2: entered allmulticast mode [ 52.574951][ T3990] loop3: detected capacity change from 0 to 512 [ 52.601851][ T3990] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.130: bad orphan inode 16 [ 52.601948][ T3990] loop3: lost filesystem error report for type 5 error -117 [ 52.605186][ T3990] ext4_test_bit(bit=15, block=18) = 1 [ 52.605282][ T3990] is_bad_inode(inode)=0 [ 52.605429][ T3990] NEXT_ORPHAN(inode)=83886080 [ 52.605489][ T3990] max_ino=32 [ 52.605686][ T3990] i_nlink=0 [ 52.613988][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.614051][ C1] EXT4-fs (loop3): initial error at time 1788900173: ext4_orphan_get:1429 [ 52.614148][ C1] EXT4-fs (loop3): last error at time 1788900173: ext4_orphan_get:1429 [ 52.625044][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 52.625062][ T29] audit: type=1326 audit(1788900173.974:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366dde159 code=0x7ffc0000 [ 52.625139][ T29] audit: type=1326 audit(1788900173.974:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366dde159 code=0x7ffc0000 [ 52.626299][ T29] audit: type=1326 audit(1788900173.974:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.632624][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.639680][ T3990] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.657328][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.657494][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 52.659079][ T3990] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.671622][ T29] audit: type=1326 audit(1788900174.014:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.671668][ T29] audit: type=1326 audit(1788900174.014:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.671722][ T29] audit: type=1326 audit(1788900174.014:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.671755][ T29] audit: type=1326 audit(1788900174.014:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.697244][ T29] audit: type=1326 audit(1788900174.014:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.697290][ T29] audit: type=1326 audit(1788900174.014:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.4.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa366d9e98e code=0x7ffc0000 [ 52.782513][ T4000] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.130: deleted inode referenced: 16 [ 52.983592][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.000604][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.015161][ T4002] loop1: detected capacity change from 0 to 1024 [ 53.022269][ T4002] EXT4-fs: Ignoring removed orlov option [ 53.036666][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.102306][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.137980][ T4009] FAULT_INJECTION: forcing a failure. [ 53.137980][ T4009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.138025][ T4009] CPU: 1 UID: 0 PID: 4009 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.138114][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.138177][ T4009] Call Trace: [ 53.138208][ T4009] [ 53.138225][ T4009] __dump_stack+0x1d/0x30 [ 53.138307][ T4009] dump_stack_lvl+0x95/0xd0 [ 53.138365][ T4009] dump_stack+0x15/0x1b [ 53.138490][ T4009] should_fail_ex+0x262/0x280 [ 53.138641][ T4009] should_fail+0xb/0x20 [ 53.138708][ T4009] should_fail_usercopy+0x1a/0x20 [ 53.138816][ T4009] _copy_from_iter+0xcc/0xe70 [ 53.138907][ T4009] ? cred_has_capability+0x224/0x2a0 [ 53.139046][ T4009] write_pool_user+0x75/0x1d0 [ 53.139162][ T4009] ? import_ubuf+0xe8/0x120 [ 53.139249][ T4009] ? __pfx_random_ioctl+0x10/0x10 [ 53.139325][ T4009] random_ioctl+0x2cc/0x3f0 [ 53.139475][ T4009] __se_sys_ioctl+0xce/0x140 [ 53.139643][ T4009] __x64_sys_ioctl+0x43/0x50 [ 53.139765][ T4009] x64_sys_call+0x239d/0x2550 [ 53.139887][ T4009] do_syscall_64+0x112/0x360 [ 53.140011][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.140203][ T4009] RIP: 0033:0x7f05d1fce159 [ 53.140259][ T4009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.140325][ T4009] RSP: 002b:00007f05d0a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.140410][ T4009] RAX: ffffffffffffffda RBX: 00007f05d2256090 RCX: 00007f05d1fce159 [ 53.140463][ T4009] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000006 [ 53.140525][ T4009] RBP: 00007f05d206503b R08: 0000000000000000 R09: 0000000000000000 [ 53.140578][ T4009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.140633][ T4009] R13: 00007f05d2256128 R14: 00007f05d2256090 R15: 00007ffc3a86a658 [ 53.140685][ T4009] [ 53.290751][ T4012] __nla_validate_parse: 5 callbacks suppressed [ 53.290804][ T4012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 53.376479][ T4017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 53.501353][ T4022] loop0: detected capacity change from 0 to 256 [ 53.639368][ T4026] netlink: 144 bytes leftover after parsing attributes in process `syz.0.139'. [ 53.742927][ T4030] loop0: detected capacity change from 0 to 512 [ 53.770338][ T4030] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.813216][ T4006] Set syz0 is full, maxelem 65536 reached [ 53.834689][ T3300] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 53.942594][ T4008] Set syz0 is full, maxelem 65536 reached [ 54.022295][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 54.037854][ T4045] netlink: 'syz.3.147': attribute type 5 has an invalid length. [ 54.047145][ T4045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.147'. [ 54.082136][ T4047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'. [ 54.152922][ T4052] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 54.152951][ T4052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'. [ 54.153032][ T4052] dummy0: entered promiscuous mode [ 54.153413][ T4052] bridge0: port 3(dummy0) entered blocking state [ 54.153508][ T4052] bridge0: port 3(dummy0) entered disabled state [ 54.154266][ T4052] dummy0: entered allmulticast mode [ 54.155960][ T4052] bridge0: port 3(dummy0) entered blocking state [ 54.156066][ T4052] bridge0: port 3(dummy0) entered forwarding state [ 54.288590][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 54.306202][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.306649][ T4056] loop2: detected capacity change from 0 to 512 [ 54.340587][ T4056] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.445032][ T3301] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 54.488163][ T4062] FAULT_INJECTION: forcing a failure. [ 54.488163][ T4062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.488219][ T4062] CPU: 0 UID: 0 PID: 4062 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.488333][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.488391][ T4062] Call Trace: [ 54.488408][ T4062] [ 54.488499][ T4062] __dump_stack+0x1d/0x30 [ 54.488592][ T4062] dump_stack_lvl+0x95/0xd0 [ 54.488676][ T4062] dump_stack+0x15/0x1b [ 54.488759][ T4062] should_fail_ex+0x262/0x280 [ 54.488852][ T4062] should_fail+0xb/0x20 [ 54.488922][ T4062] should_fail_usercopy+0x1a/0x20 [ 54.488976][ T4062] _copy_from_iter+0xcc/0xe70 [ 54.489053][ T4062] ? cred_has_capability+0x224/0x2a0 [ 54.489218][ T4062] write_pool_user+0x75/0x1d0 [ 54.489317][ T4062] ? import_ubuf+0xe8/0x120 [ 54.489402][ T4062] ? __pfx_random_ioctl+0x10/0x10 [ 54.489535][ T4062] random_ioctl+0x2cc/0x3f0 [ 54.489630][ T4062] __se_sys_ioctl+0xce/0x140 [ 54.489822][ T4062] __x64_sys_ioctl+0x43/0x50 [ 54.489934][ T4062] x64_sys_call+0x239d/0x2550 [ 54.490026][ T4062] do_syscall_64+0x112/0x360 [ 54.490143][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.490258][ T4062] RIP: 0033:0x7f05d1fce159 [ 54.490305][ T4062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.490371][ T4062] RSP: 002b:00007f05d0a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.490445][ T4062] RAX: ffffffffffffffda RBX: 00007f05d2255fa0 RCX: 00007f05d1fce159 [ 54.490510][ T4062] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000006 [ 54.490611][ T4062] RBP: 00007f05d206503b R08: 0000000000000000 R09: 0000000000000000 [ 54.490654][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.490704][ T4062] R13: 00007f05d2256038 R14: 00007f05d2255fa0 R15: 00007ffc3a86a658 [ 54.490780][ T4062] [ 54.628779][ T4064] FAULT_INJECTION: forcing a failure. [ 54.628779][ T4064] name failslab, interval 1, probability 0, space 0, times 0 [ 54.628808][ T4064] CPU: 0 UID: 0 PID: 4064 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.628954][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.628968][ T4064] Call Trace: [ 54.628975][ T4064] [ 54.628983][ T4064] __dump_stack+0x1d/0x30 [ 54.629094][ T4064] dump_stack_lvl+0x95/0xd0 [ 54.629176][ T4064] dump_stack+0x15/0x1b [ 54.629250][ T4064] should_fail_ex+0x262/0x280 [ 54.629326][ T4064] ? audit_log_start+0x34c/0x730 [ 54.629405][ T4064] should_failslab+0x8c/0xb0 [ 54.629515][ T4064] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 54.629618][ T4064] ? audit_log_start+0x34c/0x730 [ 54.629695][ T4064] audit_log_start+0x34c/0x730 [ 54.629803][ T4064] audit_seccomp+0x49/0x110 [ 54.629967][ T4064] __seccomp_filter+0x909/0x1360 [ 54.630090][ T4064] ? xfd_validate_state+0x45/0xf0 [ 54.630230][ T4064] __seccomp_permit_syscall+0x7d/0x150 [ 54.630342][ T4064] do_syscall_64+0xca/0x360 [ 54.630549][ T4064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.630639][ T4064] RIP: 0033:0x7f05d1fce159 [ 54.630699][ T4064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.630782][ T4064] RSP: 002b:00007f05d0a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.630861][ T4064] RAX: ffffffffffffffda RBX: 00007f05d2255fa0 RCX: 00007f05d1fce159 [ 54.630993][ T4064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 54.631042][ T4064] RBP: 00007f05d206503b R08: 0000000000000000 R09: 0000000000000000 [ 54.631174][ T4064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.631250][ T4064] R13: 00007f05d2256038 R14: 00007f05d2255fa0 R15: 00007ffc3a86a658 [ 54.631390][ T4064] [ 54.651884][ T4064] process 'syz.2.155' launched './file0' with NULL argv: empty string added [ 54.735404][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 54.991268][ T4071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 55.037997][ T4073] FAULT_INJECTION: forcing a failure. [ 55.037997][ T4073] name failslab, interval 1, probability 0, space 0, times 0 [ 55.038032][ T4073] CPU: 1 UID: 0 PID: 4073 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.038065][ T4073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.038111][ T4073] Call Trace: [ 55.038120][ T4073] [ 55.038130][ T4073] __dump_stack+0x1d/0x30 [ 55.038164][ T4073] dump_stack_lvl+0x95/0xd0 [ 55.038265][ T4073] dump_stack+0x15/0x1b [ 55.038293][ T4073] should_fail_ex+0x262/0x280 [ 55.038324][ T4073] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 55.038357][ T4073] should_failslab+0x8c/0xb0 [ 55.038421][ T4073] __kmalloc_noprof+0xd0/0x4d0 [ 55.038511][ T4073] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 55.038543][ T4073] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 55.038638][ T4073] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 55.038667][ T4073] ? selinux_capable+0x31/0x40 [ 55.038710][ T4073] ? security_capable+0x7b/0x90 [ 55.038740][ T4073] ? ns_capable+0x80/0xb0 [ 55.038760][ T4073] genl_rcv_msg+0x42f/0x470 [ 55.038795][ T4073] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 55.038836][ T4073] ? __pfx_nl80211_req_set_reg+0x10/0x10 [ 55.038859][ T4073] ? __pfx_nl80211_post_doit+0x10/0x10 [ 55.038895][ T4073] netlink_rcv_skb+0x11e/0x220 [ 55.038932][ T4073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.038980][ T4073] genl_rcv+0x28/0x40 [ 55.039056][ T4073] netlink_unicast+0x5a9/0x680 [ 55.039086][ T4073] netlink_sendmsg+0x5be/0x6f0 [ 55.039117][ T4073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.039166][ T4073] ____sys_sendmsg+0x532/0x580 [ 55.039215][ T4073] ___sys_sendmsg+0x195/0x1e0 [ 55.039291][ T4073] __x64_sys_sendmsg+0xd4/0x160 [ 55.039340][ T4073] x64_sys_call+0x22ab/0x2550 [ 55.039389][ T4073] do_syscall_64+0x112/0x360 [ 55.039430][ T4073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.039460][ T4073] RIP: 0033:0x7f05d1fce159 [ 55.039480][ T4073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.039530][ T4073] RSP: 002b:00007f05d0a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.039556][ T4073] RAX: ffffffffffffffda RBX: 00007f05d2255fa0 RCX: 00007f05d1fce159 [ 55.039571][ T4073] RDX: 0000000000004040 RSI: 0000200000000240 RDI: 0000000000000003 [ 55.039585][ T4073] RBP: 00007f05d0a27090 R08: 0000000000000000 R09: 0000000000000000 [ 55.039602][ T4073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.039654][ T4073] R13: 00007f05d2256038 R14: 00007f05d2255fa0 R15: 00007ffc3a86a658 [ 55.039680][ T4073] [ 55.402300][ T4079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4079 comm=syz.2.162 [ 55.445111][ T4083] loop4: detected capacity change from 0 to 128 [ 55.449384][ T4083] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 55.464487][ T4083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.465195][ T4083] ext2 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.530091][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.549873][ T4089] SELinux: ebitmap: truncated map [ 55.549899][ T4089] SELinux: failed to load policy [ 56.042298][ T4091] Set syz0 is full, maxelem 65536 reached [ 56.048698][ T4104] SET target dimension over the limit! [ 56.215143][ T4108] SET target dimension over the limit! [ 56.353606][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.550984][ T4118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4118 comm=syz.4.175 [ 56.803063][ T4131] syzkaller1: entered promiscuous mode [ 56.803095][ T4131] syzkaller1: entered allmulticast mode [ 57.047882][ T4123] geneve2: entered promiscuous mode [ 57.047913][ T4123] geneve2: entered allmulticast mode [ 57.115590][ T4140] SELinux: ebitmap: truncated map [ 57.115643][ T4140] SELinux: failed to load policy [ 57.326469][ T4143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 57.326551][ T4143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.326960][ T4143] vhci_hcd vhci_hcd.0: Device attached [ 57.505389][ T3404] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 57.564567][ T3404] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 57.935710][ T4147] random: crng reseeded on system resumption [ 57.935754][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 57.935829][ T29] audit: type=1400 audit(1788900179.284:2534): avc: denied { write } for pid=4146 comm="syz.4.185" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.935866][ T29] audit: type=1400 audit(1788900179.284:2535): avc: denied { open } for pid=4146 comm="syz.4.185" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.965587][ T29] audit: type=1400 audit(1788900179.294:2536): avc: denied { ioctl } for pid=4146 comm="syz.4.185" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.018544][ T4143] loop2: detected capacity change from 0 to 4096 [ 58.224922][ T4151] loop4: detected capacity change from 0 to 164 [ 58.234501][ T4151] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 58.313942][ T4143] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 58.353853][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.399441][ T29] audit: type=1400 audit(1788900179.734:2537): avc: denied { write } for pid=4142 comm="syz.2.184" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.422720][ T4144] vhci_hcd: cannot find the pending unlink 4096 [ 58.475328][ T4144] vhci_hcd: connection reset by peer [ 58.476362][ T326] vhci_hcd vhci_hcd.2: stop threads [ 58.476434][ T326] vhci_hcd vhci_hcd.2: release socket [ 58.476539][ T326] vhci_hcd vhci_hcd.2: disconnect device [ 58.599731][ T4155] loop4: detected capacity change from 0 to 1024 [ 58.619559][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.619668][ T4155] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.622059][ T4154] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.187: bg 0: block 112: padding at end of block bitmap is not set [ 58.622586][ T29] audit: type=1400 audit(1788900179.964:2538): avc: denied { write } for pid=4153 comm="syz.4.187" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.724975][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.785976][ T4159] loop4: detected capacity change from 0 to 1024 [ 58.797110][ T4159] EXT4-fs: Ignoring removed orlov option [ 58.808234][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.880758][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.918692][ T4163] loop4: detected capacity change from 0 to 1024 [ 58.931597][ T4163] EXT4-fs: Ignoring removed orlov option [ 58.941170][ T4163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.009237][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.056757][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.132350][ T29] audit: type=1400 audit(1788900180.474:2539): avc: denied { validate_trans } for pid=4168 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.239791][ T4169] SELinux: security_context_str_to_sid (}oæ‹bö–?3bæñlæÊ@Gœ;oÔÌñ°Òƒl(ëæ$9¸Å–ãí[©¥•»]ÂÞß3Ò¤ÒÛÓQ,ÄE¸,w¾D2„ÒÀ¬Šçб•{· `ÌgÞ&´ÇOQ¤ýÆÄ‘‡_î`.ÛÍÜ1ô¦vÆÒϧ“) failed with errno=-22 [ 59.421411][ T4173] __nla_validate_parse: 2 callbacks suppressed [ 59.421453][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 59.468676][ T4169] loop2: detected capacity change from 0 to 512 [ 59.611175][ T4169] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 59.908743][ T4181] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 60.016136][ T4190] loop1: detected capacity change from 0 to 1024 [ 60.027312][ T4190] EXT4-fs: Ignoring removed orlov option [ 60.048833][ T4192] loop3: detected capacity change from 0 to 1024 [ 60.064634][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.093603][ T4188] loop0: detected capacity change from 0 to 164 [ 60.106165][ T4188] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 60.234658][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.234749][ T4192] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.239026][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.268332][ T4201] : renamed from bond_slave_0 (while UP) [ 60.687577][ T4206] FAULT_INJECTION: forcing a failure. [ 60.687577][ T4206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.687660][ T4206] CPU: 0 UID: 0 PID: 4206 Comm: syz.1.201 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.687695][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.687712][ T4206] Call Trace: [ 60.687721][ T4206] [ 60.687731][ T4206] __dump_stack+0x1d/0x30 [ 60.687807][ T4206] dump_stack_lvl+0x95/0xd0 [ 60.687838][ T4206] dump_stack+0x15/0x1b [ 60.687866][ T4206] should_fail_ex+0x262/0x280 [ 60.687900][ T4206] should_fail+0xb/0x20 [ 60.687927][ T4206] should_fail_usercopy+0x1a/0x20 [ 60.687961][ T4206] _copy_from_iter+0xcc/0xe70 [ 60.688053][ T4206] ? __alloc_skb+0x516/0x6f0 [ 60.688099][ T4206] ? __alloc_skb+0x209/0x6f0 [ 60.688154][ T4206] netlink_sendmsg+0x4a4/0x6f0 [ 60.688216][ T4206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.688257][ T4206] ____sys_sendmsg+0x532/0x580 [ 60.688318][ T4206] ___sys_sendmsg+0x195/0x1e0 [ 60.688442][ T4206] __x64_sys_sendmsg+0xd4/0x160 [ 60.688486][ T4206] x64_sys_call+0x22ab/0x2550 [ 60.688518][ T4206] do_syscall_64+0x112/0x360 [ 60.688560][ T4206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.688659][ T4206] RIP: 0033:0x7f7cb2b3e159 [ 60.688756][ T4206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.688781][ T4206] RSP: 002b:00007f7cb1597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.688809][ T4206] RAX: ffffffffffffffda RBX: 00007f7cb2dc5fa0 RCX: 00007f7cb2b3e159 [ 60.688859][ T4206] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.688873][ T4206] RBP: 00007f7cb1597090 R08: 0000000000000000 R09: 0000000000000000 [ 60.688886][ T4206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.688903][ T4206] R13: 00007f7cb2dc6038 R14: 00007f7cb2dc5fa0 R15: 00007ffffe78d238 [ 60.688985][ T4206] [ 60.767627][ T29] audit: type=1400 audit(1788900182.114:2540): avc: denied { write } for pid=4185 comm="syz.3.197" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.773769][ T4186] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.197: bg 0: block 112: padding at end of block bitmap is not set [ 61.007468][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.073014][ T4208] loop4: detected capacity change from 0 to 512 [ 61.099772][ T4208] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.112344][ T29] audit: type=1400 audit(1788900182.444:2541): avc: denied { mounton } for pid=4217 comm="syz.3.205" path="/30/file1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.142007][ T29] audit: type=1400 audit(1788900182.484:2542): avc: denied { create } for pid=4211 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.198241][ T4226] EXT4-fs (loop4): shut down requested (0) [ 61.250385][ T29] audit: type=1326 audit(1788900182.594:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb2b3e159 code=0x7ffc0000 [ 61.316201][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 61.445309][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 61.445378][ T4234] bridge_slave_1: left allmulticast mode [ 61.445443][ T4234] bridge_slave_1: left promiscuous mode [ 61.445783][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.490079][ T4234] bridge_slave_0: left allmulticast mode [ 61.490120][ T4234] bridge_slave_0: left promiscuous mode [ 61.490283][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.507859][ T4236] EXT4-fs: Ignoring removed orlov option [ 61.638707][ T4242] FAULT_INJECTION: forcing a failure. [ 61.638707][ T4242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.638790][ T4242] CPU: 0 UID: 0 PID: 4242 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.638823][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.638836][ T4242] Call Trace: [ 61.638843][ T4242] [ 61.638853][ T4242] __dump_stack+0x1d/0x30 [ 61.638884][ T4242] dump_stack_lvl+0x95/0xd0 [ 61.638971][ T4242] dump_stack+0x15/0x1b [ 61.639000][ T4242] should_fail_ex+0x262/0x280 [ 61.639031][ T4242] should_fail+0xb/0x20 [ 61.639107][ T4242] should_fail_usercopy+0x1a/0x20 [ 61.639141][ T4242] _copy_to_user+0x20/0xa0 [ 61.639200][ T4242] ethtool_get_link_ksettings+0x2aa/0x320 [ 61.639248][ T4242] dev_ethtool+0xc8f/0x2100 [ 61.639295][ T4242] dev_ioctl+0x2e0/0x960 [ 61.639384][ T4242] sock_do_ioctl+0x1aa/0x230 [ 61.639415][ T4242] sock_ioctl+0x439/0x610 [ 61.639442][ T4242] ? mutex_lock+0x57/0x90 [ 61.639474][ T4242] ? __pfx_sock_ioctl+0x10/0x10 [ 61.639555][ T4242] __se_sys_ioctl+0xce/0x140 [ 61.639596][ T4242] __x64_sys_ioctl+0x43/0x50 [ 61.639724][ T4242] x64_sys_call+0x239d/0x2550 [ 61.639760][ T4242] do_syscall_64+0x112/0x360 [ 61.639801][ T4242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.639832][ T4242] RIP: 0033:0x7f13e2e8e159 [ 61.639850][ T4242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.639912][ T4242] RSP: 002b:00007f13e18e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.639939][ T4242] RAX: ffffffffffffffda RBX: 00007f13e3115fa0 RCX: 00007f13e2e8e159 [ 61.639966][ T4242] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 61.639985][ T4242] RBP: 00007f13e18e7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.639999][ T4242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.640016][ T4242] R13: 00007f13e3116038 R14: 00007f13e3115fa0 R15: 00007ffd405caff8 [ 61.640104][ T4242] [ 61.957364][ T4227] geneve2: entered promiscuous mode [ 61.957396][ T4227] geneve2: entered allmulticast mode [ 61.958121][ T4250] EXT4-fs (loop4): 1 truncate cleaned up [ 62.106994][ T4265] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 62.399259][ T4269] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4269 comm=syz.3.218 [ 62.465783][ T4274] SELinux: policydb string S does not match my string SE Linux [ 62.465817][ T4274] SELinux: failed to load policy [ 62.467333][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 62.477137][ T4274] IPv6: sit1: Disabled Multicast RS [ 62.483269][ T4274] sit1: entered allmulticast mode [ 62.512063][ T4274] netlink: 'syz.2.220': attribute type 2 has an invalid length. [ 62.569375][ T4283] EXT4-fs: Ignoring removed orlov option [ 62.583588][ T3404] usb 5-1: enqueue for inactive port 0 [ 62.583628][ T3404] usb 5-1: enqueue for inactive port 0 [ 62.615977][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.630565][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.659743][ T3404] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 62.668582][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.688345][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.708621][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.751466][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.752057][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.770603][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.770927][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.803733][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.803857][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.829932][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.847121][ T4278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.221'. [ 62.859828][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.880217][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.903236][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.919735][ T4278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.964008][ T4297] FAULT_INJECTION: forcing a failure. [ 62.964008][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 62.964051][ T4297] CPU: 1 UID: 0 PID: 4297 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.964165][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.964221][ T4297] Call Trace: [ 62.964229][ T4297] [ 62.964239][ T4297] __dump_stack+0x1d/0x30 [ 62.964272][ T4297] dump_stack_lvl+0x95/0xd0 [ 62.964317][ T4297] dump_stack+0x15/0x1b [ 62.964342][ T4297] should_fail_ex+0x262/0x280 [ 62.964435][ T4297] should_failslab+0x8c/0xb0 [ 62.964477][ T4297] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 62.964522][ T4297] ? __d_alloc+0x34/0x320 [ 62.964549][ T4297] ? __d_alloc+0x34/0x320 [ 62.964584][ T4297] __d_alloc+0x34/0x320 [ 62.964619][ T4297] d_alloc+0x2e/0x100 [ 62.964725][ T4297] lookup_one_qstr_excl+0x95/0x240 [ 62.964768][ T4297] filename_create+0x155/0x220 [ 62.964805][ T4297] filename_symlinkat+0x94/0x2b0 [ 62.964919][ T4297] __se_sys_symlinkat+0x43/0x1b0 [ 62.964965][ T4297] __x64_sys_symlinkat+0x43/0x50 [ 62.965120][ T4297] x64_sys_call+0x1cf4/0x2550 [ 62.965177][ T4297] do_syscall_64+0x112/0x360 [ 62.965221][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.965251][ T4297] RIP: 0033:0x7f13e2e8e159 [ 62.965267][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.965340][ T4297] RSP: 002b:00007f13e18e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 62.965373][ T4297] RAX: ffffffffffffffda RBX: 00007f13e3115fa0 RCX: 00007f13e2e8e159 [ 62.965391][ T4297] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000002040 [ 62.965466][ T4297] RBP: 00007f13e18e7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.965482][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.965500][ T4297] R13: 00007f13e3116038 R14: 00007f13e3115fa0 R15: 00007ffd405caff8 [ 62.965526][ T4297] [ 63.593676][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 63.593707][ T29] audit: type=1400 audit(1788900184.934:2623): avc: denied { create } for pid=4306 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.628469][ T29] audit: type=1400 audit(1788900184.974:2624): avc: denied { bind } for pid=4306 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.635544][ T4303] set_capacity_and_notify: 6 callbacks suppressed [ 63.636227][ T4303] loop2: detected capacity change from 0 to 164 [ 63.638869][ T4303] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 64.071663][ T4317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4317 comm=syz.2.233 [ 64.171826][ T4322] loop0: detected capacity change from 0 to 1024 [ 64.185280][ T4322] EXT4-fs: Ignoring removed bh option [ 64.205808][ T4322] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.217700][ T29] audit: type=1400 audit(1788900185.564:2625): avc: denied { write } for pid=4321 comm="syz.0.234" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.217760][ T29] audit: type=1400 audit(1788900185.564:2626): avc: denied { read write } for pid=4321 comm="syz.0.234" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.217803][ T29] audit: type=1400 audit(1788900185.564:2627): avc: denied { open } for pid=4321 comm="syz.0.234" path="/38/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.223450][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 3) [ 64.232818][ T4322] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 64.232918][ T4322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.232918][ T4322] [ 64.237034][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.237920][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.304035][ T29] audit: type=1400 audit(1788900185.584:2628): avc: denied { map } for pid=4321 comm="syz.0.234" path="/38/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.304889][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.306908][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.307590][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.308437][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.310867][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.311445][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.312079][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.477424][ T4323] SELinux: policydb version 1180827720 does not match my version range 15-35 [ 64.477473][ T4323] SELinux: failed to load policy [ 64.550086][ T29] audit: type=1400 audit(1788900185.894:2629): avc: denied { create } for pid=4321 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.701513][ T4333] SELinux: policydb version 1180827720 does not match my version range 15-35 [ 64.717662][ T4333] SELinux: failed to load policy [ 64.718421][ T4336] SELinux: policydb version 1180827720 does not match my version range 15-35 [ 64.718488][ T4336] SELinux: failed to load policy [ 64.741093][ T4337] SET target dimension over the limit! [ 65.099331][ T4343] loop1: detected capacity change from 0 to 1024 [ 65.135433][ T4343] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.155524][ T4343] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.240: bg 0: block 112: padding at end of block bitmap is not set [ 65.161391][ T29] audit: type=1400 audit(1788900186.504:2630): avc: denied { write } for pid=4340 comm="syz.1.240" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.161507][ T29] audit: type=1400 audit(1788900186.504:2631): avc: denied { add_name } for pid=4340 comm="syz.1.240" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.387022][ T4351] __nla_validate_parse: 43 callbacks suppressed [ 65.387052][ T4351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.241'. [ 65.573843][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 65.573960][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.573960][ T12] [ 65.590318][ T4356] loop2: detected capacity change from 0 to 164 [ 65.617813][ T29] audit: type=1400 audit(1788900186.964:2632): avc: denied { name_bind } for pid=4353 comm="syz.1.244" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.622810][ T4356] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 65.938138][ T4364] FAULT_INJECTION: forcing a failure. [ 65.938138][ T4364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.938185][ T4364] CPU: 0 UID: 0 PID: 4364 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.938221][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.938238][ T4364] Call Trace: [ 65.938291][ T4364] [ 65.938302][ T4364] __dump_stack+0x1d/0x30 [ 65.938429][ T4364] dump_stack_lvl+0x95/0xd0 [ 65.938462][ T4364] dump_stack+0x15/0x1b [ 65.938490][ T4364] should_fail_ex+0x262/0x280 [ 65.938523][ T4364] should_fail+0xb/0x20 [ 65.938549][ T4364] should_fail_usercopy+0x1a/0x20 [ 65.938681][ T4364] _copy_from_iter+0xcc/0xe70 [ 65.938715][ T4364] ? __alloc_skb+0x516/0x6f0 [ 65.938753][ T4364] ? __alloc_skb+0x209/0x6f0 [ 65.938909][ T4364] netlink_sendmsg+0x4a4/0x6f0 [ 65.939070][ T4364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.939158][ T4364] ____sys_sendmsg+0x532/0x580 [ 65.939280][ T4364] ___sys_sendmsg+0x195/0x1e0 [ 65.939466][ T4364] __x64_sys_sendmsg+0xd4/0x160 [ 65.939636][ T4364] x64_sys_call+0x22ab/0x2550 [ 65.939810][ T4364] do_syscall_64+0x112/0x360 [ 65.939987][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.940070][ T4364] RIP: 0033:0x7f05d1fce159 [ 65.940123][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.940198][ T4364] RSP: 002b:00007f05d0a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.940300][ T4364] RAX: ffffffffffffffda RBX: 00007f05d2255fa0 RCX: 00007f05d1fce159 [ 65.940369][ T4364] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 65.940423][ T4364] RBP: 00007f05d0a27090 R08: 0000000000000000 R09: 0000000000000000 [ 65.940459][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.940501][ T4364] R13: 00007f05d2256038 R14: 00007f05d2255fa0 R15: 00007ffc3a86a658 [ 65.940591][ T4364] [ 66.289878][ T4369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.249'. [ 66.290299][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.290487][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.329638][ T4369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=4369 comm=syz.4.249 [ 66.340135][ T4369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.249'. [ 66.516570][ T4379] tipc: Started in network mode [ 66.516630][ T4379] tipc: Node identity a27e51e18278, cluster identity 4711 [ 66.516917][ T4379] tipc: Enabled bearer , priority 0 [ 66.517341][ T4381] syzkaller0: entered promiscuous mode [ 66.517464][ T4381] syzkaller0: entered allmulticast mode [ 66.601740][ T4383] FAULT_INJECTION: forcing a failure. [ 66.601740][ T4383] name failslab, interval 1, probability 0, space 0, times 0 [ 66.601789][ T4383] CPU: 0 UID: 0 PID: 4383 Comm: syz.4.252 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.601825][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.601838][ T4383] Call Trace: [ 66.601845][ T4383] [ 66.601852][ T4383] __dump_stack+0x1d/0x30 [ 66.601936][ T4383] dump_stack_lvl+0x95/0xd0 [ 66.601965][ T4383] dump_stack+0x15/0x1b [ 66.602032][ T4383] should_fail_ex+0x262/0x280 [ 66.602144][ T4383] ? audit_log_d_path+0x8d/0x150 [ 66.602280][ T4383] should_failslab+0x8c/0xb0 [ 66.602378][ T4383] __kmalloc_cache_noprof+0x7a/0x400 [ 66.602528][ T4383] ? audit_log_d_path+0x8d/0x150 [ 66.602619][ T4383] ? audit_log_n_string+0x17e/0x2c0 [ 66.602707][ T4383] audit_log_d_path+0x8d/0x150 [ 66.602792][ T4383] audit_log_d_path_exe+0x42/0x70 [ 66.602874][ T4383] audit_log_task+0x1e8/0x240 [ 66.603025][ T4383] audit_seccomp+0x6a/0x110 [ 66.603174][ T4383] __seccomp_filter+0x909/0x1360 [ 66.603280][ T4383] ? __fget_files+0x184/0x1c0 [ 66.603382][ T4383] __seccomp_permit_syscall+0x7d/0x150 [ 66.603480][ T4383] do_syscall_64+0xca/0x360 [ 66.603650][ T4383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.603748][ T4383] RIP: 0033:0x7fa366dde159 [ 66.603804][ T4383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.603910][ T4383] RSP: 002b:00007fa365837028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 66.603984][ T4383] RAX: ffffffffffffffda RBX: 00007fa367065fa0 RCX: 00007fa366dde159 [ 66.604036][ T4383] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000004 [ 66.604089][ T4383] RBP: 00007fa365837090 R08: 0000000000000000 R09: 0000000000000000 [ 66.604140][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.604182][ T4383] R13: 00007fa367066038 R14: 00007fa367065fa0 R15: 00007ffebf336c88 [ 66.604248][ T4383] [ 66.629793][ T4374] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 66.817635][ T4375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 66.875839][ T4374] tipc: Resetting bearer [ 66.893001][ T4371] geneve2: entered promiscuous mode [ 66.893044][ T4371] geneve2: entered allmulticast mode [ 66.924684][ T4373] tipc: Resetting bearer [ 66.954744][ T4373] tipc: Disabling bearer [ 67.108864][ T4407] loop3: detected capacity change from 0 to 164 [ 67.127976][ T4407] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 67.168714][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 67.271869][ T4414] Cannot find add_set index 0 as target [ 67.421879][ T4419] Illegal XDP return value 65267 on prog (id 61) dev syz_tun, expect packet loss! [ 67.728588][ T4428] : renamed from bond_slave_0 (while UP) [ 68.416286][ T4437] FAULT_INJECTION: forcing a failure. [ 68.416286][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 68.416408][ T4437] CPU: 0 UID: 0 PID: 4437 Comm: syz.3.265 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.416439][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.416454][ T4437] Call Trace: [ 68.416541][ T4437] [ 68.416602][ T4437] __dump_stack+0x1d/0x30 [ 68.416633][ T4437] dump_stack_lvl+0x95/0xd0 [ 68.416734][ T4437] dump_stack+0x15/0x1b [ 68.416791][ T4437] should_fail_ex+0x262/0x280 [ 68.416841][ T4437] ? skb_clone+0x151/0x1f0 [ 68.416938][ T4437] should_failslab+0x8c/0xb0 [ 68.416973][ T4437] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 68.417025][ T4437] ? skb_clone+0x151/0x1f0 [ 68.417066][ T4437] skb_clone+0x151/0x1f0 [ 68.417105][ T4437] __netlink_deliver_tap+0x2be/0x510 [ 68.417212][ T4437] netlink_unicast+0x656/0x680 [ 68.417247][ T4437] netlink_sendmsg+0x5be/0x6f0 [ 68.417291][ T4437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.417327][ T4437] ____sys_sendmsg+0x532/0x580 [ 68.417379][ T4437] ___sys_sendmsg+0x195/0x1e0 [ 68.417518][ T4437] __x64_sys_sendmsg+0xd4/0x160 [ 68.417562][ T4437] x64_sys_call+0x22ab/0x2550 [ 68.417594][ T4437] do_syscall_64+0x112/0x360 [ 68.417669][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.417713][ T4437] RIP: 0033:0x7f13e2e8e159 [ 68.417733][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.417755][ T4437] RSP: 002b:00007f13e18e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.417780][ T4437] RAX: ffffffffffffffda RBX: 00007f13e3115fa0 RCX: 00007f13e2e8e159 [ 68.417858][ T4437] RDX: 0000000000000140 RSI: 0000200000000000 RDI: 0000000000000003 [ 68.417875][ T4437] RBP: 00007f13e18e7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.417890][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.417904][ T4437] R13: 00007f13e3116038 R14: 00007f13e3115fa0 R15: 00007ffd405caff8 [ 68.417929][ T4437] [ 68.417979][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 68.661457][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 68.661477][ T29] audit: type=1400 audit(1788900190.004:2759): avc: denied { create } for pid=4444 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.688832][ T29] audit: type=1400 audit(1788900190.004:2760): avc: denied { create } for pid=4444 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.708290][ T29] audit: type=1400 audit(1788900190.044:2761): avc: denied { open } for pid=4444 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.708329][ T29] audit: type=1400 audit(1788900190.044:2762): avc: denied { perfmon } for pid=4444 comm="syz.4.267" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.708475][ T29] audit: type=1400 audit(1788900190.044:2763): avc: denied { kernel } for pid=4444 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.768229][ T4450] syz.1.263 uses obsolete (PF_INET,SOCK_PACKET) [ 68.775387][ T29] audit: type=1400 audit(1788900190.124:2764): avc: denied { create } for pid=4432 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.795230][ T29] audit: type=1400 audit(1788900190.134:2765): avc: denied { create } for pid=4444 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.795279][ T29] audit: type=1400 audit(1788900190.134:2766): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.835855][ T29] audit: type=1400 audit(1788900190.144:2767): avc: denied { setopt } for pid=4432 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.835942][ T29] audit: type=1400 audit(1788900190.144:2769): avc: denied { read } for pid=4432 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.880564][ T4447] FAULT_INJECTION: forcing a failure. [ 68.880564][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.880626][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.4.267 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.880689][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.880753][ T4447] Call Trace: [ 68.880783][ T4447] [ 68.880844][ T4447] __dump_stack+0x1d/0x30 [ 68.880940][ T4447] dump_stack_lvl+0x95/0xd0 [ 68.881087][ T4447] dump_stack+0x15/0x1b [ 68.881164][ T4447] should_fail_ex+0x262/0x280 [ 68.881249][ T4447] should_fail+0xb/0x20 [ 68.881362][ T4447] should_fail_usercopy+0x1a/0x20 [ 68.881450][ T4447] _copy_from_user+0x1c/0xb0 [ 68.881554][ T4447] memdup_user+0x5e/0xd0 [ 68.881651][ T4447] strndup_user+0x68/0xb0 [ 68.881737][ T4447] __se_sys_request_key+0xf4/0x2a0 [ 68.881888][ T4447] __x64_sys_request_key+0x55/0x70 [ 68.882011][ T4447] x64_sys_call+0x1741/0x2550 [ 68.882106][ T4447] do_syscall_64+0x112/0x360 [ 68.882277][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.882363][ T4447] RIP: 0033:0x7fa366dde159 [ 68.882450][ T4447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.882527][ T4447] RSP: 002b:00007fa365837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 68.882595][ T4447] RAX: ffffffffffffffda RBX: 00007fa367065fa0 RCX: 00007fa366dde159 [ 68.882710][ T4447] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000240 [ 68.882767][ T4447] RBP: 00007fa366e7503b R08: 0000000000000000 R09: 0000000000000000 [ 68.882817][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.882858][ T4447] R13: 00007fa367066038 R14: 00007fa367065fa0 R15: 00007ffebf336c88 [ 68.882922][ T4447] [ 68.915453][ T4450] loop1: detected capacity change from 0 to 512 [ 68.927271][ T4450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.947097][ T4450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 68.947191][ T4450] System zones: 1-12 [ 68.967604][ T4450] EXT4-fs (loop1): 1 truncate cleaned up [ 69.107755][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 69.283079][ T4467] SET target dimension over the limit! [ 69.421223][ T4469] loop4: detected capacity change from 0 to 512 [ 69.550552][ T4469] EXT4-fs (loop4): shut down requested (0) [ 69.569456][ T4476] tmpfs: Bad value for 'mpol' [ 69.569941][ T4461] loop0: detected capacity change from 0 to 164 [ 69.578465][ T4461] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 69.680926][ T4471] loop3: detected capacity change from 0 to 512 [ 69.739234][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 69.753007][ T4473] mmap: syz.3.273 (4473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.792730][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 70.012290][ T4498] loop4: detected capacity change from 0 to 128 [ 70.028161][ T4498] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.061119][ T4503] netlink: 52 bytes leftover after parsing attributes in process `syz.3.284'. [ 70.076353][ T4498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.197010][ T4507] loop3: detected capacity change from 0 to 512 [ 70.312575][ T4507] EXT4-fs (loop3): shut down requested (0) [ 70.364496][ T3297] EXT4-fs unmount: 19 callbacks suppressed [ 70.364536][ T3297] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 70.485690][ T4519] loop1: detected capacity change from 0 to 164 [ 70.529454][ T4525] loop0: detected capacity change from 0 to 512 [ 70.532270][ T4519] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 70.535453][ T4528] __nla_validate_parse: 1 callbacks suppressed [ 70.535489][ T4528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.295'. [ 70.539715][ T4525] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.584219][ T4525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 70.584345][ T4525] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.602375][ T4525] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.293: Bad quota inum: 3, type: 1 [ 70.602456][ T4525] loop0: lost filesystem error report for type 5 error -117 [ 70.613560][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.613589][ C1] EXT4-fs (loop0): initial error at time 1788900191: ext4_quota_enable:7256 [ 70.613633][ C1] EXT4-fs (loop0): last error at time 1788900191: ext4_quota_enable:7256 [ 70.615531][ T4525] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix. [ 70.615647][ T4525] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 70.616371][ T4525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.636067][ T4525] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.293: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 70.793763][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.854797][ T4543] netlink: 'syz.1.296': attribute type 21 has an invalid length. [ 70.854879][ T4543] netlink: 'syz.1.296': attribute type 6 has an invalid length. [ 70.854899][ T4543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.296'. [ 70.962970][ T4546] loop0: detected capacity change from 0 to 128 [ 70.964510][ T4546] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 71.064713][ T4546] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.065166][ T4546] ext2 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.197146][ T4551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'. [ 71.275682][ T4556] FAULT_INJECTION: forcing a failure. [ 71.275682][ T4556] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.276025][ T4556] CPU: 1 UID: 0 PID: 4556 Comm: syz.4.300 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.276059][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.276083][ T4556] Call Trace: [ 71.276092][ T4556] [ 71.276100][ T4556] __dump_stack+0x1d/0x30 [ 71.276128][ T4556] dump_stack_lvl+0x95/0xd0 [ 71.276201][ T4556] dump_stack+0x15/0x1b [ 71.276246][ T4556] should_fail_ex+0x262/0x280 [ 71.276278][ T4556] should_fail+0xb/0x20 [ 71.276312][ T4556] get_futex_key+0x12d/0xb10 [ 71.276350][ T4556] ? refill_pi_state_cache+0x5f/0xe0 [ 71.276435][ T4556] futex_requeue+0x1d7/0x1450 [ 71.276485][ T4556] ? kstrtouint_from_user+0xa8/0xf0 [ 71.276514][ T4556] ? get_pid_task+0x92/0xc0 [ 71.276541][ T4556] do_futex+0x3bf/0x460 [ 71.276628][ T4556] __se_sys_futex+0x2f6/0x370 [ 71.276671][ T4556] __x64_sys_futex+0x78/0x90 [ 71.276700][ T4556] x64_sys_call+0x22e2/0x2550 [ 71.276742][ T4556] do_syscall_64+0x112/0x360 [ 71.276776][ T4556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.276800][ T4556] RIP: 0033:0x7fa366dde159 [ 71.276820][ T4556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.276839][ T4556] RSP: 002b:00007fa3657f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.276919][ T4556] RAX: ffffffffffffffda RBX: 00007fa367066180 RCX: 00007fa366dde159 [ 71.276934][ T4556] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 71.276946][ T4556] RBP: 00007fa3657f5090 R08: 0000200000048000 R09: 0000000000000000 [ 71.276965][ T4556] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 71.276979][ T4556] R13: 00007fa367066218 R14: 00007fa367066180 R15: 00007ffebf336c88 [ 71.277065][ T4556] [ 71.620149][ T4558] loop3: detected capacity change from 0 to 256 [ 71.637556][ T4558] vfat: Unknown parameter 'quietmmutable' [ 71.683375][ T4558] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 71.701538][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.793225][ T4562] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.814524][ T4562] EXT4-fs (loop0): shut down requested (0) [ 71.837526][ T3300] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 72.023188][ T4575] netlink: 52 bytes leftover after parsing attributes in process `syz.4.307'. [ 72.430888][ T4573] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 72.827067][ T4583] SET target dimension over the limit! [ 73.216913][ T4586] netlink: 'syz.2.311': attribute type 5 has an invalid length. [ 73.246628][ T4586] netlink: 64 bytes leftover after parsing attributes in process `syz.2.311'. [ 73.260695][ T4588] EXT4-fs: Ignoring removed orlov option [ 73.301031][ T4588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.465871][ T4593] FAULT_INJECTION: forcing a failure. [ 73.465871][ T4593] name failslab, interval 1, probability 0, space 0, times 0 [ 73.465914][ T4593] CPU: 0 UID: 0 PID: 4593 Comm: syz.4.312 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.465949][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.465972][ T4593] Call Trace: [ 73.466010][ T4593] [ 73.466019][ T4593] __dump_stack+0x1d/0x30 [ 73.466046][ T4593] dump_stack_lvl+0x95/0xd0 [ 73.466075][ T4593] dump_stack+0x15/0x1b [ 73.466102][ T4593] should_fail_ex+0x262/0x280 [ 73.466186][ T4593] should_failslab+0x8c/0xb0 [ 73.466235][ T4593] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 73.466280][ T4593] ? kstrdup_const+0x3e/0x50 [ 73.466429][ T4593] ? kstrdup_const+0x3e/0x50 [ 73.466511][ T4593] kstrdup+0x3e/0xd0 [ 73.466534][ T4593] kstrdup_const+0x3e/0x50 [ 73.466563][ T4593] alloc_vfsmnt+0xe2/0x2f0 [ 73.466660][ T4593] clone_mnt+0x30/0x5d0 [ 73.466692][ T4593] copy_tree+0x2dc/0x890 [ 73.466813][ T4593] copy_mnt_ns+0x1d2/0x720 [ 73.467015][ T4593] create_new_namespaces+0x7f/0x420 [ 73.467064][ T4593] unshare_nsproxy_namespaces+0x115/0x150 [ 73.467119][ T4593] ksys_unshare+0x42b/0x710 [ 73.467167][ T4593] __x64_sys_unshare+0x1f/0x30 [ 73.467225][ T4593] x64_sys_call+0x1e33/0x2550 [ 73.467275][ T4593] do_syscall_64+0x112/0x360 [ 73.467322][ T4593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.467352][ T4593] RIP: 0033:0x7fa366dde159 [ 73.467369][ T4593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.467469][ T4593] RSP: 002b:00007fa3657f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.467506][ T4593] RAX: ffffffffffffffda RBX: 00007fa367066180 RCX: 00007fa366dde159 [ 73.467529][ T4593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 73.467543][ T4593] RBP: 00007fa366e7503b R08: 0000000000000000 R09: 0000000000000000 [ 73.467557][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.467570][ T4593] R13: 00007fa367066218 R14: 00007fa367066180 R15: 00007ffebf336c88 [ 73.467594][ T4593] [ 73.705211][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 73.705312][ T29] audit: type=1400 audit(1788900195.054:2865): avc: denied { write } for pid=4587 comm="syz.4.312" name="protocols" dev="proc" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.834276][ T4598] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.870457][ T4598] EXT4-fs (loop1): shut down requested (0) [ 73.904640][ T3296] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 73.963208][ T29] audit: type=1400 audit(1788900195.304:2866): avc: denied { tracepoint } for pid=4601 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.064785][ T29] audit: type=1400 audit(1788900195.404:2867): avc: denied { bind } for pid=4603 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.090424][ T29] audit: type=1400 audit(1788900195.434:2868): avc: denied { write } for pid=4603 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.295306][ T29] audit: type=1400 audit(1788900195.644:2869): avc: denied { map } for pid=4605 comm="syz.0.319" path="socket:[7940]" dev="sockfs" ino=7940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.295359][ T29] audit: type=1400 audit(1788900195.644:2870): avc: denied { read } for pid=4605 comm="syz.0.319" path="socket:[7940]" dev="sockfs" ino=7940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.409868][ T29] audit: type=1400 audit(1788900195.754:2871): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.409912][ T29] audit: type=1400 audit(1788900195.754:2872): avc: denied { remove_name } for pid=3302 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.409973][ T29] audit: type=1400 audit(1788900195.754:2873): avc: denied { rmdir } for pid=3302 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.410011][ T29] audit: type=1400 audit(1788900195.754:2874): avc: denied { write } for pid=3302 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.474560][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 74.519524][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.561390][ T4616] mmap: syz.0.319 (4616): VmData 18403328 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 75.236802][ T4633] set_capacity_and_notify: 4 callbacks suppressed [ 75.236855][ T4633] loop3: detected capacity change from 0 to 512 [ 75.279123][ T4633] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.386993][ T4638] EXT4-fs (loop3): shut down requested (0) [ 75.624219][ T3297] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 76.549600][ T4648] SET target dimension over the limit! [ 76.609610][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 76.651338][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 76.820953][ T4676] netlink: 'syz.0.338': attribute type 5 has an invalid length. [ 76.872866][ T4676] netlink: 64 bytes leftover after parsing attributes in process `syz.0.338'. [ 76.888839][ T4677] SELinux: policydb version 1180827720 does not match my version range 15-35 [ 76.888882][ T4677] SELinux: failed to load policy [ 77.007492][ T4680] SET target dimension over the limit! [ 77.177050][ T4684] FAULT_INJECTION: forcing a failure. [ 77.177050][ T4684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.177094][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.177129][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.177152][ T4684] Call Trace: [ 77.177161][ T4684] [ 77.177200][ T4684] __dump_stack+0x1d/0x30 [ 77.177252][ T4684] dump_stack_lvl+0x95/0xd0 [ 77.177275][ T4684] dump_stack+0x15/0x1b [ 77.177301][ T4684] should_fail_ex+0x262/0x280 [ 77.177410][ T4684] should_fail+0xb/0x20 [ 77.177455][ T4684] should_fail_usercopy+0x1a/0x20 [ 77.177488][ T4684] _copy_from_iter+0xcc/0xe70 [ 77.177566][ T4684] write_pool_user+0x75/0x1d0 [ 77.177600][ T4684] ? import_ubuf+0xe8/0x120 [ 77.177630][ T4684] ? __pfx_random_ioctl+0x10/0x10 [ 77.177656][ T4684] random_ioctl+0x2cc/0x3f0 [ 77.177744][ T4684] __se_sys_ioctl+0xce/0x140 [ 77.177784][ T4684] __x64_sys_ioctl+0x43/0x50 [ 77.177814][ T4684] x64_sys_call+0x239d/0x2550 [ 77.177861][ T4684] do_syscall_64+0x112/0x360 [ 77.177903][ T4684] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 77.177950][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.177973][ T4684] RIP: 0033:0x7f13e2e8e159 [ 77.178026][ T4684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.178049][ T4684] RSP: 002b:00007f13e18e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.178072][ T4684] RAX: ffffffffffffffda RBX: 00007f13e3115fa0 RCX: 00007f13e2e8e159 [ 77.178094][ T4684] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000006 [ 77.178108][ T4684] RBP: 00007f13e2f2503b R08: 0000000000000000 R09: 0000000000000000 [ 77.178126][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.178221][ T4684] R13: 00007f13e3116038 R14: 00007f13e3115fa0 R15: 00007ffd405caff8 [ 77.178248][ T4684] [ 77.280295][ T4686] loop2: detected capacity change from 0 to 1024 [ 77.289318][ T4686] EXT4-fs: Ignoring removed orlov option [ 77.340580][ T4686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.564957][ T4692] netlink: 48 bytes leftover after parsing attributes in process `syz.3.343'. [ 77.597306][ T4692] loop3: detected capacity change from 0 to 512 [ 77.613204][ T4692] ext2: Unknown parameter '€' [ 77.620728][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.811474][ T4705] loop1: detected capacity change from 0 to 164 [ 77.848635][ T4705] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 77.850755][ T4714] loop0: detected capacity change from 0 to 128 [ 78.010613][ T4727] netlink: 'syz.1.352': attribute type 5 has an invalid length. [ 78.020344][ T4727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.352'. [ 78.068228][ T4729] netlink: 'syz.1.353': attribute type 5 has an invalid length. [ 78.113423][ T4729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.353'. [ 78.181251][ T4735] FAULT_INJECTION: forcing a failure. [ 78.181251][ T4735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.181296][ T4735] CPU: 1 UID: 0 PID: 4735 Comm: syz.2.355 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.181331][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.181373][ T4735] Call Trace: [ 78.181379][ T4735] [ 78.181406][ T4735] __dump_stack+0x1d/0x30 [ 78.181438][ T4735] dump_stack_lvl+0x95/0xd0 [ 78.181494][ T4735] dump_stack+0x15/0x1b [ 78.181617][ T4735] should_fail_ex+0x262/0x280 [ 78.181648][ T4735] should_fail+0xb/0x20 [ 78.181673][ T4735] should_fail_usercopy+0x1a/0x20 [ 78.181751][ T4735] _copy_from_iter+0xcc/0xe70 [ 78.181783][ T4735] ? cred_has_capability+0x224/0x2a0 [ 78.181876][ T4735] write_pool_user+0x75/0x1d0 [ 78.181957][ T4735] ? import_ubuf+0xe8/0x120 [ 78.181992][ T4735] ? __pfx_random_ioctl+0x10/0x10 [ 78.182020][ T4735] random_ioctl+0x2cc/0x3f0 [ 78.182054][ T4735] __se_sys_ioctl+0xce/0x140 [ 78.182148][ T4735] __x64_sys_ioctl+0x43/0x50 [ 78.182188][ T4735] x64_sys_call+0x239d/0x2550 [ 78.182299][ T4735] do_syscall_64+0x112/0x360 [ 78.182340][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.182381][ T4735] RIP: 0033:0x7f05d1fce159 [ 78.182402][ T4735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.182427][ T4735] RSP: 002b:00007f05d0a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.182492][ T4735] RAX: ffffffffffffffda RBX: 00007f05d2255fa0 RCX: 00007f05d1fce159 [ 78.182507][ T4735] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000005 [ 78.182597][ T4735] RBP: 00007f05d206503b R08: 0000000000000000 R09: 0000000000000000 [ 78.182678][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.182690][ T4735] R13: 00007f05d2256038 R14: 00007f05d2255fa0 R15: 00007ffc3a86a658 [ 78.182786][ T4735] [ 78.350661][ T4739] : renamed from bond_slave_0 (while UP) [ 79.468994][ T4752] loop4: detected capacity change from 0 to 164 [ 79.502716][ T4752] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 79.633290][ T4764] loop3: detected capacity change from 0 to 164 [ 79.657659][ T4764] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 79.683764][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 79.683816][ T29] audit: type=1400 audit(1788900201.024:2917): avc: denied { read write } for pid=4766 comm="syz.1.364" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.730584][ T29] audit: type=1400 audit(1788900201.024:2918): avc: denied { open } for pid=4766 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.738448][ T29] audit: type=1400 audit(1788900201.084:2919): avc: denied { ioctl } for pid=4766 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.739577][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.750021][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.905148][ T29] audit: type=1400 audit(1788900201.254:2920): avc: denied { lock } for pid=4776 comm="syz.4.368" path="socket:[10268]" dev="sockfs" ino=10268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.987443][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.010457][ T29] audit: type=1326 audit(1788900201.354:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.010511][ T29] audit: type=1326 audit(1788900201.354:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.010901][ T29] audit: type=1326 audit(1788900201.354:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.010946][ T29] audit: type=1326 audit(1788900201.354:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.016140][ T29] audit: type=1326 audit(1788900201.364:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.066021][ T29] audit: type=1326 audit(1788900201.414:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee1dbe159 code=0x7ffc0000 [ 80.110771][ T4770] loop2: detected capacity change from 0 to 1024 [ 80.233813][ T4770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.233955][ T4770] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.293920][ T4770] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.365: bg 0: block 112: padding at end of block bitmap is not set [ 80.408307][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.425535][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.521649][ T4791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4791 comm=syz.1.371 [ 80.758301][ T4795] netlink: 'syz.1.372': attribute type 15 has an invalid length. [ 80.758324][ T4795] netlink: 'syz.1.372': attribute type 7 has an invalid length. [ 80.842902][ T4798] loop3: detected capacity change from 0 to 512 [ 80.853037][ T4798] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.983745][ T4800] EXT4-fs (loop3): shut down requested (0) [ 81.014023][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.085969][ T3297] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 82.114506][ T4808] loop3: detected capacity change from 0 to 164 [ 82.132434][ T4808] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 82.252365][ T4824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4824 comm=syz.3.380 [ 82.352005][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.352171][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.418436][ T4829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4829 comm=syz.2.382 [ 82.501011][ T4832] loop2: detected capacity change from 0 to 1024 [ 82.501551][ T4832] EXT4-fs: Ignoring removed orlov option [ 82.525510][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.630559][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.754667][ T4840] SET target dimension over the limit! [ 83.261072][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 83.676319][ T4850] net_ratelimit: 40 callbacks suppressed [ 83.676352][ T4850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.691121][ T4850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.823137][ T4859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4859 comm=syz.4.391 [ 83.979598][ T4863] loop3: detected capacity change from 0 to 512 [ 84.009784][ T4864] netlink: 'syz.4.392': attribute type 5 has an invalid length. [ 84.016047][ T4863] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.065072][ T4866] netlink: 64 bytes leftover after parsing attributes in process `syz.4.392'. [ 84.066474][ T4863] EXT4-fs (loop3): shut down requested (0) [ 84.107036][ T3297] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 84.107986][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.295187][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.295305][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.340474][ T4870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 84.925017][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 84.925045][ T29] audit: type=1326 audit(1788900206.274:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.925086][ T29] audit: type=1326 audit(1788900206.274:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.925164][ T29] audit: type=1326 audit(1788900206.274:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.974420][ T29] audit: type=1326 audit(1788900206.314:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.974546][ T29] audit: type=1326 audit(1788900206.314:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.974734][ T29] audit: type=1326 audit(1788900206.314:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.974833][ T29] audit: type=1326 audit(1788900206.314:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.974934][ T29] audit: type=1326 audit(1788900206.314:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.975059][ T29] audit: type=1326 audit(1788900206.314:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 84.975154][ T29] audit: type=1326 audit(1788900206.314:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2e8e159 code=0x7ffc0000 [ 85.164205][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.261186][ T4888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 85.429932][ T4891] loop4: detected capacity change from 0 to 512 [ 85.448091][ T4891] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.529209][ T4894] loop0: detected capacity change from 0 to 164 [ 85.544203][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.575213][ T4895] EXT4-fs (loop4): shut down requested (0) [ 85.623434][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 85.632710][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.655107][ T4897] loop4: detected capacity change from 0 to 1024 [ 85.662025][ T4897] EXT4-fs: Ignoring removed orlov option [ 85.681229][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.756297][ T4884] geneve2: entered promiscuous mode [ 85.756325][ T4884] geneve2: entered allmulticast mode [ 85.781310][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.429478][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.740051][ T4911] geneve2: entered promiscuous mode [ 86.740085][ T4911] geneve2: entered allmulticast mode [ 86.784269][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'. [ 86.964795][ T4925] loop0: detected capacity change from 0 to 164 [ 86.989066][ T4925] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ0x0000000000000000ÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šŸâ/ÈFÍõ¶' [ 87.218443][ T4932] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 87.246118][ T4930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4930 comm=syz.0.411 [ 87.434643][ T4937] loop2: detected capacity change from 0 to 1024 [ 87.458725][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.458822][ T4937] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.475552][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.484504][ T4937] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.412: bg 0: block 112: padding at end of block bitmap is not set [ 87.848945][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.852521][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.509350][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.653556][ T4948] loop3: detected capacity change from 0 to 1024 [ 88.663801][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.708545][ T4948] EXT4-fs: Ignoring removed orlov option [ 88.717461][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.729016][ T4948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.747764][ T3284] ================================================================== [ 88.747790][ T3284] BUG: KCSAN: data-race in set_nlink / set_nlink [ 88.747817][ T3284] [ 88.747825][ T3284] read to 0xffff8881076906f0 of 4 bytes by task 2984 on cpu 0: [ 88.747847][ T3284] set_nlink+0x29/0xb0 [ 88.747865][ T3284] kernfs_iop_permission+0x1e5/0x220 [ 88.747898][ T3284] inode_permission+0x2a5/0x3b0 [ 88.747925][ T3284] link_path_walk+0x875/0xdd0 [ 88.747955][ T3284] path_lookupat+0x53/0x4c0 [ 88.747983][ T3284] filename_lookup+0x18f/0x390 [ 88.748008][ T3284] vfs_statx+0x96/0x170 [ 88.748032][ T3284] vfs_fstatat+0x118/0x170 [ 88.748056][ T3284] __se_sys_newfstatat+0x55/0x3e0 [ 88.748083][ T3284] __x64_sys_newfstatat+0x55/0x70 [ 88.748112][ T3284] x64_sys_call+0xee6/0x2550 [ 88.748141][ T3284] do_syscall_64+0x112/0x360 [ 88.748177][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.748207][ T3284] [ 88.748214][ T3284] write to 0xffff8881076906f0 of 4 bytes by task 3284 on cpu 1: [ 88.748234][ T3284] set_nlink+0x99/0xb0 [ 88.748251][ T3284] kernfs_iop_permission+0x1e5/0x220 [ 88.748288][ T3284] inode_permission+0x2a5/0x3b0 [ 88.748315][ T3284] link_path_walk+0x875/0xdd0 [ 88.748339][ T3284] path_openat+0xe7/0x10d0 [ 88.748373][ T3284] do_file_open+0x16c/0x290 [ 88.748410][ T3284] do_sys_openat2+0xa0/0x130 [ 88.748432][ T3284] __x64_sys_openat+0xf2/0x120 [ 88.748453][ T3284] x64_sys_call+0x1f72/0x2550 [ 88.748478][ T3284] do_syscall_64+0x112/0x360 [ 88.748516][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.748555][ T3284] [ 88.748560][ T3284] value changed: 0x00000009 -> 0x00000008 [ 88.748575][ T3284] [ 88.748581][ T3284] Reported by Kernel Concurrency Sanitizer on: [ 88.748596][ T3284] CPU: 1 UID: 0 PID: 3284 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 88.748622][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.748635][ T3284] ================================================================== [ 88.960876][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.549887][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.588319][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.636417][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.703874][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.666446][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.707449][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.514571][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.747142][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.144218][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.787572][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.826553][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.543765][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.704344][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.713895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.866900][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog