last executing test programs: 5m15.305385412s ago: executing program 3 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180004ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)="766abf", 0x3}], 0x1, 0x3) 5m12.10132804s ago: executing program 3 (id=75): r0 = socket$inet6(0xa, 0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYRES32=0x0], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socket$l2tp(0x2, 0x2, 0x73) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x7f, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 5m11.904375245s ago: executing program 3 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)='#', 0x1}, {&(0x7f0000000240)="709f", 0x2}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) umount2(0x0, 0x8000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000480)=0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/122, 0x7a, 0x0, &(0x7f0000000280)=""/200, 0xc8}}, 0x10) 5m11.758195459s ago: executing program 3 (id=79): socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x664b, &(0x7f0000000500)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='8086 2', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xf65, 0x9, 0x800000, 0x43, 0x4d7, 0x0, 0x4be80bf9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='a', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1000000000002, 0xc}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_CTAB={0x404, 0x3, [0xb, 0x3, 0x6, 0x8, 0xfffffffc, 0x9, 0xb, 0xfffffff9, 0x10000, 0x5, 0x2, 0x6, 0x8, 0x5a, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb3, 0x3, 0x0, 0x1, 0x800, 0x1ff, 0x922, 0x91, 0xa236f736, 0x8, 0x4, 0xff, 0x2, 0x10000, 0x5, 0x5, 0x0, 0x8000, 0x9, 0xc, 0xfffff800, 0x6, 0x0, 0xfffffffc, 0x5, 0xffff, 0x7, 0x0, 0x1, 0xf56, 0x1ff, 0x1, 0x2, 0x3, 0x5, 0x7, 0xfffffffb, 0xfffffff8, 0x7, 0x4, 0x1000, 0x6, 0x7f, 0x4, 0x9, 0x0, 0x80000000, 0x7, 0x0, 0x3ff, 0xe, 0x3, 0x2, 0x7, 0x4, 0x1, 0x1, 0x1, 0x96c, 0x4, 0x38, 0xc, 0x8001, 0x1, 0x1, 0x8668, 0x400, 0xb, 0x8, 0x7, 0x2400000, 0x6, 0x200, 0x9, 0xfffffff9, 0x0, 0x7, 0x6, 0x53d7, 0xfff, 0xffffffff, 0x5, 0x1, 0x400, 0xd, 0x9, 0x90, 0x8, 0x3, 0x2, 0x2, 0x80000000, 0x1, 0x1000, 0x6, 0xa, 0x7, 0x8, 0x4, 0x7, 0x0, 0x8, 0xffff, 0xfffff801, 0x8, 0x10000, 0xffff, 0x4, 0x8008, 0x5, 0x1, 0x9, 0x6, 0xfff, 0x4, 0xffff, 0x401, 0x579, 0xd, 0x1, 0xe62, 0xfffffff8, 0x3, 0x7, 0x0, 0x8, 0x80, 0x81, 0x9, 0x0, 0x1, 0x8, 0x80000001, 0x8, 0xfff, 0x9, 0x6, 0x7, 0x5, 0x6, 0x0, 0x4, 0x3, 0x0, 0xfffffffe, 0x7f, 0x1, 0x2, 0x400, 0x3, 0x80000000, 0x7, 0x5, 0x6, 0x8, 0x8, 0x449f, 0x5, 0x4, 0x4, 0x9, 0x0, 0x168, 0xcec, 0x4de, 0x7, 0x0, 0x2, 0x6, 0x3, 0x7, 0x61a, 0x7, 0x4, 0x5, 0x7, 0x7, 0x0, 0x7f, 0x4, 0xa14, 0x90000000, 0x9, 0x2, 0x8000, 0x200, 0x1, 0x242, 0x6, 0x3, 0xa, 0x2f, 0xfff, 0x0, 0x0, 0x19, 0x6, 0x3, 0x0, 0xfffffffd, 0x9, 0x8, 0x3, 0x4, 0x5, 0xffffffff, 0x5ffad104, 0x6, 0xdbfe, 0xfffffff9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x8, 0x3, 0x4, 0x1, 0xffffc993, 0x653e, 0xffffffff, 0x8, 0x8001, 0x7, 0xb, 0xac1, 0xffff, 0x2, 0x2, 0x4, 0x1ff, 0x0, 0x3, 0x40, 0x6]}]}}]}, 0x464}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5m11.476109866s ago: executing program 3 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5m11.194679482s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}], 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180004ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)="766abf", 0x3}], 0x1, 0x3) write$char_usb(r7, &(0x7f0000000280)='L', 0x1) 5m11.194426412s ago: executing program 32 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}], 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180004ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)="766abf", 0x3}], 0x1, 0x3) write$char_usb(r7, &(0x7f0000000280)='L', 0x1) 4m22.761572529s ago: executing program 1 (id=329): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x100000) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 4m20.895743606s ago: executing program 1 (id=333): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) write(r4, &(0x7f0000000240)="2a3ab829c29ce2b1009f9eaf17e7cbf3f7bcecd234590000f9ffffff00"/38, 0x26) 4m20.739814349s ago: executing program 1 (id=335): r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf043}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfb1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x801}, 0x10) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='nfsd\x00', 0x440, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x6) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r4 = syz_open_procfs$userns(r3, &(0x7f0000000640)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000000740), 0x7fff, 0x725000) r7 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000780), 0x2, 0x0) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r9 = syz_open_pts(r0, 0x44c500) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) r11 = fcntl$getown(r0, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)="6f6434eb1119a26ed42d51233e50848b27f2a93d3f4c1a8810f26bfd", 0x1c}, {&(0x7f00000004c0)="a2d0390bdd62b3a4917416ee76b976a4552ad089527a8a4e380a25fe88e489c8c38f25355301c05a04801ef57e8eb110ce48d9704ca6d7759ca126866071691c09eb48c600c1c122c65bee0ef9da47a1bcd38cdf19c5296360df95a39d29e6d87b28221dba82e5dfd13b5eca26385beabf71656c198756338258a991718972213312b37b4f2d1a692345faf80952c0dcdf0195c82928aed2c39631", 0x9b}, {&(0x7f0000000580)="23e79b36b91ccb9eaec45c08c87221d84a3aa3941949ceffdefc6d48fe5735833bf3304e3206a61bc3cc1f32f927dfd8974af74f2b732a6942c83f20083b8fce0b2e84c83544af998b70", 0x4a}], 0x3, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [r0, r4, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r2}}}, @rights={{0x28, 0x1, 0x1, [r6, r0, r7, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r8, r0, r0, r0, r0, r0, r9, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r2}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r14, r0]}}], 0x128, 0x8080}, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000bc0)={0x0, 0x10, 0x3}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000c40)={r15, 0x5}, 0x8) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000c80)={0x0, 0x2, [@remote, @empty]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETFSUUID(r14, 0x8008662c, &(0x7f0000000cc0)) unlink(&(0x7f0000000d00)='./file0\x00') ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000d80)={0x1, 0x10, [0xa, 0xf0f, 0xc, 0x8], &(0x7f0000000d40)=[0x0, 0x0]}) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000dc0)) writev(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f0000000e40)="30e77dce5e369f8d79f47fe858", 0xd}], 0x1) 4m20.669552801s ago: executing program 1 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40b02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x1, 0xff, 0x6, @remote}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) unshare(0x62020600) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) fsetxattr$trusted_overlay_upper(r9, &(0x7f00000001c0), &(0x7f00000002c0)={0x0, 0xfb, 0x1a, 0x6, 0x3, "e2fc2c5a29d4787d3e161b2fc7e3e043", "5870480cc7"}, 0x1a, 0x2) mount$9p_fd(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r7, @ANYRESDEC=r5, @ANYRES16=r8, @ANYBLOB=',\x00']) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000300)={'\x00', 0x3}) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 4m20.489256975s ago: executing program 1 (id=338): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) socket$kcm(0x29, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'gre0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$kcm(0xa, 0x1, 0x106) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000001c0)) 4m19.980947238s ago: executing program 1 (id=341): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4b2, &(0x7f0000000e40)="$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") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@ifindex, 0xffffffffffffffff, 0x3}, 0x20) write$UHID_CREATE2(r2, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e05fdff0503000003000000fcffffff05010905a10105091901290a150005017501950a8102950175068103c0"], 0x135) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000500)=""/176, 0xb0}], 0x2) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r1, r0, 0x8, 0x800, '\x00', {0x0, 0x4, 0x800, 0x4, 0x9a, 0x2, 0x3, 0x4, {0x81}, {0x6, 0x2}, {0x9, 0xfffffff9}, 0xda1, 0x0, 0x8e, 0x40, 0x9, 0x800, 0x0, 0x5, 0x811d, 0x3, '\x00', 0x9, 0x3, 0x9, 0x7}}) 4m19.818780982s ago: executing program 33 (id=341): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4b2, &(0x7f0000000e40)="$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") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@ifindex, 0xffffffffffffffff, 0x3}, 0x20) write$UHID_CREATE2(r2, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e05fdff0503000003000000fcffffff05010905a10105091901290a150005017501950a8102950175068103c0"], 0x135) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000500)=""/176, 0xb0}], 0x2) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r1, r0, 0x8, 0x800, '\x00', {0x0, 0x4, 0x800, 0x4, 0x9a, 0x2, 0x3, 0x4, {0x81}, {0x6, 0x2}, {0x9, 0xfffffff9}, 0xda1, 0x0, 0x8e, 0x40, 0x9, 0x800, 0x0, 0x5, 0x811d, 0x3, '\x00', 0x9, 0x3, 0x9, 0x7}}) 2m15.782197942s ago: executing program 4 (id=1126): ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) getpgid(0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000040)=0x1f) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffff5, 0x42003ff, 0xfffffff5, 0xc4d3, 0x10, "df5d393e6922804a0000100001a6e7800600", 0x240000, 0x2}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) syz_pidfd_open(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8640, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x67}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 2m15.297298704s ago: executing program 4 (id=1129): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x200, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) 2m14.186350771s ago: executing program 4 (id=1139): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000100) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) 2m13.344904302s ago: executing program 4 (id=1144): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$eJzs3c9qE18UwPHTtGmTlDZZ/PiBgvSgG90MbXyCIC2IAaU2RV0IUzvRkDEpmRiJiNWVW3e+Q3HpTrC+QDfu3IubIggu7EI6kkzGTOO0NrVp0vb7gTK3c++Ze+cP4cyQudm89ephMe8YebMqkZhKTERkSyQlEfHEZbVVaqwZklEJei6Xxn+4rnv7zrVMNjs7rzqXWbicVtXJqfePn745/6E6vvh28t2YbKTubn5Lf974f+PM5vaCv/Vy9YXoUrlcNZdsS5cLTtFQvWFbpmNpoeRYlaqa7fq8XV5ZqatZWp5IrFQsx1GzVNeiVddqWauVupr3zUJJDcPQiYScNsN7VcbDVubW5ufNTFedRLocFI5S6FmuVDLmcGhlbu0oBgUAAAZLZ/4faaT0O/L/Rs7v2S3///7p3M1u8/8HBUcLjpbKO/L7P/P/iJD/904z/98OTRpxMkQbNwAZMxF660b+DwAAAAAAAAAAAAAAAAAAAADAcbDluknXdZP+0v8bE5GYbMe8Vm6y3+NEb+x9/kX8/wMhQ30cLg5Z4MW9mIj9spar5bylV5/JS0FssWQ6KvKzeT20eOW5q9nZaW1Kybq92opvviQ45sf7UuHxM168BuJXa7moJIL9pyUp/4XHpzvioyJSy43KxQuBeEOS8vGelMWW5eZ13Y5/NqN65Xq2o/94sx0AAAAAACeBob+ldt7/erNJGob604Z01Hsr288HJPmX5wMq66PSjh+RsyP9228AAAAAAE4Tp/6kaNq2VTl4YWrxn8IHoBCX7qMO5dAds4LR+jrYno1d123+YMw+t/w6LrJLVUR2rep14auIDMABP+xr7Msj7wTup3E/P5UAAAAA9EI76e/3SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL32O3mY3/4gc48Fuhvuz14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+FXAAAA///xbBZn") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="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", 0xfe}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") 2m12.569090411s ago: executing program 4 (id=1148): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a'], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 2m11.665093953s ago: executing program 4 (id=1151): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m11.664963433s ago: executing program 34 (id=1151): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 5.466266396s ago: executing program 7 (id=1987): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x200, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x880) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) 5.062791106s ago: executing program 7 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)}], 0x1) 4.89414981s ago: executing program 7 (id=1994): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f00000000c0)=@ieee802154, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/78}, 0x2f331ec2}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/12}, {&(0x7f0000000400)=""/143}, {&(0x7f00000004c0)=""/169}, {&(0x7f0000000580)=""/100}, {&(0x7f0000000600)=""/4096}, {&(0x7f00000016c0)=""/167}, {&(0x7f0000002900)=""/225}, {&(0x7f00000017c0)=""/4096}], 0x0, &(0x7f0000002840)=""/39}, 0xa}], 0x56b, 0x40000022, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$llc(0xffffffffffffffff, &(0x7f0000001780)={0x1a, 0x201, 0x7f, 0xff, 0x0, 0x81, @random="cf592c34a7db"}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xa1b5, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x40, 0x0, 0x9, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x18, 0x80, 0x0, 0x401, {{0x3b, 0x4, 0x0, 0x1, 0xec, 0x67, 0x0, 0xe, 0x4, 0x0, @empty, @empty, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0xf, "5d9cee3e7540e475203e795e8a"}, {0x5, 0x5, ':TE'}, {0x1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x12, "eacd8163e1ddeaa73b003dd30da4e3e7"}, {0x7, 0x10, "f6a6391ada22bd8983af57119969"}]}, @end, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x2}, {0x6, 0x9, "85d63e50858b7a"}, {0x0, 0xe, "4089a5adcf9182a3e1d68c8e"}, {0x0, 0x11, "644a96229e3c1ded5f3e705cd02116"}, {0x1, 0x11, "599d82f3fd2cf76df7e4fd8086693d"}, {0x5, 0xa, "e2bd5af630b4a636"}]}, @noop, @ssrr={0x89, 0x23, 0x9c, [@rand_addr=0x64010102, @multicast1, @remote, @private=0xa010101, @multicast1, @private=0xa010101, @remote, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x14, [@remote]}, @generic={0x83, 0xf, "de5297568691c5993962a34755"}]}}}}}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000003b40)={'vxcan1\x00', {0x2, 0x0, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x1, &(0x7f00000000c0)) 4.597060277s ago: executing program 0 (id=1999): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000980)="419f4b47662764b5a01e080f475c15802464d115bedf1366c271ec6a3b106f16006464f502cc61e837742a3768c4c85d938e1449188ed4f91d90ab08763722d3fb42b1f44c9ad9cf6db3c872d1d86d82c1ca1053116219927a70", 0x5a, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000a40)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ec0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x90) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) 4.579881437s ago: executing program 7 (id=2000): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40000000000c0400200012800b0001006272696467650000"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x2, 0xad, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) 4.337356213s ago: executing program 5 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="0135014010ff"}) 4.215666726s ago: executing program 7 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180004ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)="766abf", 0x3}], 0x1, 0x3) write$char_usb(r7, &(0x7f0000000280)='L', 0x1) 3.536905923s ago: executing program 6 (id=2005): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x39b3) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r4, @ANYRESDEC=r7, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r8 = openat(0xffffffffffffffff, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x19a) pread64(r8, &(0x7f00000002c0)=""/267, 0x10b, 0x304) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.453444065s ago: executing program 5 (id=2006): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x200, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300), 0x0) 3.281502329s ago: executing program 5 (id=2007): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x200, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x880) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) 3.047373235s ago: executing program 0 (id=2008): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b7b, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) 2.974761897s ago: executing program 2 (id=2009): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000, 0x0, 0x100000}], 0x1, 0xbff, 0x0, 0x0, 0x48, 0x40}) openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x33, 0x36, 0x2d, 0x34, 0x2d, 0x30]}}}}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) write(r0, &(0x7f00000003c0)="05010906a101", 0x6) fsmount(r0, 0x1, 0x80) 2.83482291s ago: executing program 2 (id=2010): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r5, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 2.83451159s ago: executing program 5 (id=2011): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlinkat(&(0x7f0000001500)='./bus\x00', r0, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00') sched_setscheduler(0x0, 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r1, &(0x7f0000001240)=[{}], 0x1f4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x1004000, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x2000000}, 0x0, 0xc, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="3f56de566817cf3173292d", @ANYBLOB=',shortname=win95,utf8=0,iocharset=iso8859-4,\x00'], 0x1, 0x379, &(0x7f0000000600)="$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") 2.761341402s ago: executing program 0 (id=2012): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r3, 0x540a, 0xfdfdffff) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x490, 0x30, 0xfdcd, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x206, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xb, 0x0, 0x2, 0x9d, 0x9, 0x6, 0xd65, 0xfffffff9, 0x10000, 0x8, 0x6, 0x6, 0x1, 0x100, 0x0, 0x10, 0xffff, 0x2, 0x800, 0x80000000, 0x8, 0x4dbbcd1b, 0x4, 0x8, 0x800, 0x7, 0x0, 0x8, 0xb97, 0xd6, 0x7, 0x9, 0x0, 0xea, 0x8, 0x9, 0x1, 0x8, 0xe3, 0x2, 0x2, 0x9, 0x437f, 0x200, 0x10, 0x200, 0x1, 0x1ff, 0x3, 0xd5, 0x6, 0x2, 0xfffffff9, 0x2, 0x6, 0x7, 0xcf5, 0x83a7, 0x7db, 0x3, 0xb, 0x8, 0x5, 0x9, 0x1000, 0x6, 0x7, 0x8e09, 0x7af, 0x4, 0xe8, 0x3, 0x5, 0x6, 0x81, 0x2, 0x8, 0x5, 0xfffffffe, 0x101, 0x5, 0x2, 0x2921579d, 0x6, 0xfffffff8, 0x40, 0x2, 0x9, 0x2, 0x4, 0xffffffff, 0x8003, 0x9, 0x5, 0xfffffffd, 0x8, 0x8, 0x2, 0x3, 0x2, 0x85, 0x9, 0x5, 0xb3, 0x6835, 0x4, 0x8, 0x401, 0x6, 0x810b, 0x8, 0x3, 0x1, 0x6, 0x8cf60000, 0x0, 0x2, 0x7, 0x5, 0x6, 0x6, 0x9, 0x6, 0x81, 0x384, 0xffffffff, 0x1, 0x2, 0x1000, 0x7, 0xf, 0x4, 0x1, 0x0, 0xb, 0x4, 0x4, 0x9, 0x6e55, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x400a, 0x63a82083, 0x0, 0x0, 0x80000001, 0xde, 0xb, 0x401, 0x7fff, 0x6, 0x8, 0x10001, 0x590a, 0x3, 0x8, 0x1, 0x0, 0x4defd41f, 0x80000000, 0x9, 0x6, 0x8, 0xfff, 0xd73, 0x0, 0xce04, 0x7, 0xf, 0x10, 0x1, 0x1, 0x7, 0xc000, 0x0, 0x81, 0xe03, 0x3, 0x3, 0x32, 0x20e2ffff, 0x222f, 0x8, 0x2, 0x74e, 0x0, 0x2, 0x0, 0x830, 0xfff, 0x7fffffff, 0x9, 0x2, 0xc, 0x0, 0x2, 0x1ff, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x9, 0x5, 0x1d89, 0xd14, 0x2, 0xa5a, 0x4, 0x4, 0xfffffff8, 0x7, 0xca7, 0x9, 0x0, 0x6, 0x5, 0x2, 0x7, 0x0, 0x3, 0x7ff, 0xfffffffa, 0x800, 0x80, 0x3, 0xf71800, 0x1, 0x101, 0x80000000, 0x5, 0x4010, 0x6, 0x7, 0x4, 0x7, 0x1, 0xe514, 0x101, 0x3, 0x10001, 0x5, 0x8, 0x6061, 0xc, 0x1ff, 0x8001, 0x8, 0x8, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) open(0x0, 0x20000, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.364685312s ago: executing program 7 (id=2013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd70000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)='L', 0x1) 2.320304553s ago: executing program 0 (id=2014): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40000000000c0400200012800b0001006272696467650000"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x2, 0xad, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) 1.948753682s ago: executing program 6 (id=2015): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, 0x0) 1.848789944s ago: executing program 0 (id=2016): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlinkat(&(0x7f0000001500)='./bus\x00', r0, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00') sched_setscheduler(0x0, 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r1, &(0x7f0000001240)=[{}], 0x1f4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x1004000, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x2000000}, 0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="3f56de566817cf3173292d", @ANYBLOB=',shortname=win95,utf8=0,iocharset=iso8859-4,\x00'], 0x1, 0x379, &(0x7f0000000600)="$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") 1.827996335s ago: executing program 6 (id=2017): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x200, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300)="7293746573742f6576656e74", 0xc) 1.662380559s ago: executing program 2 (id=2018): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0xa00, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x46}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x80) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x720, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601020000000000000040000000000900020073797a310000000005000400010000000500010007000000050005000a0000001c000780050015000c000000080011400000001805001400090000000c000300686173683a6970"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.549247272s ago: executing program 6 (id=2019): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r2, 0x540a, 0xfdfdffff) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.547406632s ago: executing program 5 (id=2020): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x1, @perf_config_ext={0x8001, 0x4}, 0xc108, 0x1, 0xe, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ustat(0x13, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000200)='2', 0x1) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10032, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x3, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$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") openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x100002, 0x20, 0xc}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x1638, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x200, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r2, 0x400261f3, &(0x7f0000000000)) 1.534023252s ago: executing program 2 (id=2021): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000, 0x0, 0x100000}], 0x1, 0xbff, 0x0, 0x0, 0x48, 0x40}) openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x33, 0x36, 0x2d, 0x34, 0x2d, 0x30]}}}}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) write(r0, &(0x7f00000003c0)="05010906a101", 0x6) fsmount(r0, 0x1, 0x80) 1.431680925s ago: executing program 6 (id=2022): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 1.380162136s ago: executing program 2 (id=2023): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f00000000c0)=@ieee802154, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/78}, 0x2f331ec2}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/12}, {&(0x7f0000000400)=""/143}, {&(0x7f00000004c0)=""/169}, {&(0x7f0000000580)=""/100}, {&(0x7f0000000600)=""/4096}, {&(0x7f00000016c0)=""/167}, {&(0x7f0000002900)=""/225}, {&(0x7f00000017c0)=""/4096}], 0x0, &(0x7f0000002840)=""/39}, 0xa}], 0x56b, 0x40000022, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$llc(0xffffffffffffffff, &(0x7f0000001780)={0x1a, 0x201, 0x7f, 0xff, 0x0, 0x81, @random="cf592c34a7db"}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xa1b5, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x40, 0x0, 0x9, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x18, 0x80, 0x0, 0x401, {{0x3b, 0x4, 0x0, 0x1, 0xec, 0x67, 0x0, 0xe, 0x4, 0x0, @empty, @empty, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0xf, "5d9cee3e7540e475203e795e8a"}, {0x5, 0x5, ':TE'}, {0x1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x12, "eacd8163e1ddeaa73b003dd30da4e3e7"}, {0x7, 0x10, "f6a6391ada22bd8983af57119969"}]}, @end, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x2}, {0x6, 0x9, "85d63e50858b7a"}, {0x0, 0xe, "4089a5adcf9182a3e1d68c8e"}, {0x0, 0x11, "644a96229e3c1ded5f3e705cd02116"}, {0x1, 0x11, "599d82f3fd2cf76df7e4fd8086693d"}, {0x5, 0xa, "e2bd5af630b4a636"}]}, @noop, @ssrr={0x89, 0x23, 0x9c, [@rand_addr=0x64010102, @multicast1, @remote, @private=0xa010101, @multicast1, @private=0xa010101, @remote, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x14, [@remote]}, @generic={0x83, 0xf, "de5297568691c5993962a34755"}]}}}}}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000003b40)={'vxcan1\x00', {0x2, 0x0, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.22448825s ago: executing program 2 (id=2024): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'wg2\x00'}}, 0x1e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) io_setup(0x2, &(0x7f0000000100)=0x0) io_cancel(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f0000000980)="419f4b47662764b5a01e080f475c15802464d115bedf1366c271ec6a3b106f16006464f502cc61e837742a3768c4c85d938e1449188ed4f91d90ab08763722d3fb42b1f44c9ad9cf6db3c872d1d86d82c1ca1053116219927a70", 0x5a, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000a40)) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 98.921738ms ago: executing program 6 (id=2025): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x1, @perf_config_ext={0x8001, 0x4}, 0xc108, 0x1, 0xe, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1fb) ustat(0x13, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000200)='2', 0x1) r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, 0x0, &(0x7f0000000340)=0x9b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10032, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x3, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00010000"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r2, @ANYRES64, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$eJzs3V1v094dwPGfSzuiTOqm/SeEqgKHsklFKsFJR1HEleecpAcSO7Id1F6hiqaoIh0TZdLaG9Ybtknbi2CXexF7R2gvgcnHTh/zAPRx1fcTlePYxz4/p9H5cdL4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDh+zXXLjjRN0FlRw/m1KGwdPM33PrFCHh4pRrQr4qQ/UijI7WzV7V8fbL6V/jMns9mzWSmkRUF2f37rl89+mpzo7z8i4O/yrx880vbO7tu1Xq/7/qwCuYLu3By+raEDE4em5TW0MnGoqktL7uPleqzqpqnj1TjRLeVH2kvCSM37D1W5Wl1UurQadoJGzWvq/sqnjyquu6Sel9rai+IwePy8FPvLptk0QcPWSTendZ6mb8QXJlGJ9lpKbWz2uovjTiCtVP6WSpVxlSpupVIuVyrlpSfVJ09dd/LECvcYOVHj7N60+P90hr03cDoTef6XphgJpCMrogY+fKlJJKG0hmzP9fP/bx/rke0ezv/9LH/7YPOM2Px/N3t2d1j+HxLLxT22ZUd25a2sSU960pX3lx7RxT4aoiUQI7GEYqQlnl2j8jVKqrIkS+LKK1mW+lT6S6yLkaZoiWVVYklE23eUL5Fo8SSRUCJRMi++PBQlZalKVRZFiZaSrEooHQmkITXx7FE2ZNO+7ouinGEx7lcqDz2NYv9915XKiLMl/+P0zrL7Bk7laz//AwAAAACAa8uxn75P2Z879nndNLV72WEBAAAAAIAzZP/yP5sW9ttZd8Rh/A8AAAAAwHXj2GvsHBEpyr1saUMce7kUHwIAAAAAAHBN2L//300LOwfKPXH2p0th/A8AAAAAwDXxt7Fz7Mftm85//itRNOXstVd+42zZuXm9rRvZfjeOHzGpzzjT+UFssZQVk5O+nnUKWaX9STC/5MXGuDicgwC8/QD+8j0B/DQp/5D7WZ3761m5nm/5RdZKsW6auuSHzWdl8bzpiUSvJH/6w+afxZ7+34PWtFOQzV639Ppdb93GspceZW8rn0DxxDyKI2L5YOdbsNdcDDzjKXshRt5u0ZGNzV7Xba/czI/sbU1kCxNHW/w4PaLNTzKX1ZrLZ7wt9rdkbRbSNsulYWefR1E+5Zl/kgdZnQfzD7JiQBSVcVFUDkcx+LU4fRSL46JYPGUUAHBZNsZkIUdO5N0f6OWOZfe02/uG7C7fmd0/yXxWZ37GdqyTMwN6dHdcj+6eMrv9+8Q9kIbl2LTdfx7Lqp/THT4PbTduVpz0JbzxYeuPcmt7Z/fR5tbam+6b/nbXfVKRKXsaeUHuAQAMcPgeO87A/D/qLjxfv6a5+3f5qHrv+Kg6z3i/2v9KQUleyzvpybos2KsN7DcOBv6/o3joawgLY0atRZsmszu8LIwY1f3MXuXQP25lZN2jMSxexK8CAIALMzcmD+/n//2B+MlP5hfGjLuP5vLRo+Piobu1AQCA86GjL04x+asTRab9qlytlr1kWaso9F+oyNQaWpkg0ZG/7AUNrdpRmIR+2EwXXpqajlXcabfDKFH1MFLtMDYrdvpAld/6PdYtL0iMH7eb2ou18sMg8fxE1Uzsq3bn900TL+vI7hy3tW/qxvcSEwYqDjuRr0tKxVofqmhqOkhM3aSLgWpHpuVFBfUybHZaWtV07EemnYTZAfttmaAeRi172NJlv9gAAFwR2zu7b9d6ve77c1wY2HDhwk8VAADkxmRpAAAAAAAAAAAAAAAAAAAAAABwBVzE9X8sXPOF/lTQVyUeFs5gYWzX8fHcOycA5+p/AQAA//8qPE5B") openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x100002, 0x20, 0xc}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x1638, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x200, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x5, 0x40, 0xb, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x1ff, 0xdd5}, 0xd86, 0xfc, 0x0, 0x0, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x8, &(0x7f00000001c0)=@raw=[@generic={0x82, 0x8, 0x8, 0x9000, 0x4}, @ldst={0x2, 0x1, 0x4, 0x0, 0x4, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x3071986b60ee7330, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1a}], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2badc, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r3, r3, r3], 0x0, 0x10, 0x1}, 0x94) r5 = syz_io_uring_setup(0x439c, &(0x7f0000000580)={0x0, 0xbbda, 0x400, 0x3, 0x100004, 0x0, r3}, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) 1.38974ms ago: executing program 0 (id=2026): connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x1, @perf_config_ext={0x8001, 0x4}, 0xc108, 0x1, 0xe, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1fb) ustat(0x13, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000200)='2', 0x1) r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, 0x0, &(0x7f0000000340)=0x9b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10032, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x3, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00010000"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r2, @ANYRES64, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$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") openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x100002, 0x20, 0xc}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x1638, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x200, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x5, 0x40, 0xb, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x1ff, 0xdd5}, 0xd86, 0xfc, 0x0, 0x0, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x8, &(0x7f00000001c0)=@raw=[@generic={0x82, 0x8, 0x8, 0x9000, 0x4}, @ldst={0x2, 0x1, 0x4, 0x0, 0x4, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x3071986b60ee7330, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1a}], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2badc, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r3, r3, r3], 0x0, 0x10, 0x1}, 0x94) r5 = syz_io_uring_setup(0x439c, &(0x7f0000000580)={0x0, 0xbbda, 0x400, 0x3, 0x100004, 0x0, r3}, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) 0s ago: executing program 5 (id=2027): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40000000000c0400200012800b00010062726964676500001000"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x2, 0xad, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 0000000 R09: 0000000000000000 [ 307.919253][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.919289][T10430] R13: 00007f030de46038 R14: 00007f030de45fa0 R15: 00007ffdcca55838 [ 307.919311][T10430] [ 307.928082][T10430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 307.932081][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.944341][T10435] loop5: detected capacity change from 0 to 512 [ 307.985259][T10435] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.050440][T10434] FAULT_INJECTION: forcing a failure. [ 308.050440][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 308.050568][T10434] CPU: 1 UID: 0 PID: 10434 Comm: syz.2.1665 Not tainted syzkaller #0 PREEMPT(lazy) [ 308.050596][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.050610][T10434] Call Trace: [ 308.050619][T10434] [ 308.050628][T10434] __dump_stack+0x1d/0x30 [ 308.050654][T10434] dump_stack_lvl+0x95/0xd0 [ 308.050757][T10434] dump_stack+0x15/0x1b [ 308.050824][T10434] should_fail_ex+0x262/0x280 [ 308.050853][T10434] ? __kernfs_new_node+0x70/0x440 [ 308.050876][T10434] should_failslab+0x8c/0xb0 [ 308.050985][T10434] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 308.051019][T10434] ? __kernfs_new_node+0x70/0x440 [ 308.051045][T10434] __kernfs_new_node+0x70/0x440 [ 308.051094][T10434] ? __rcu_read_unlock+0x4e/0x70 [ 308.051128][T10434] ? kernfs_activate_one+0x10c/0x140 [ 308.051153][T10434] ? __rcu_read_unlock+0x4e/0x70 [ 308.051261][T10434] ? up_write+0x19/0x60 [ 308.051291][T10434] kernfs_new_node+0xcf/0xf0 [ 308.051380][T10434] __kernfs_create_file+0x4b/0x180 [ 308.051409][T10434] ? __pfx_kobj_attr_show+0x10/0x10 [ 308.051443][T10434] ? __pfx_kobj_attr_store+0x10/0x10 [ 308.051507][T10434] sysfs_add_file_mode_ns+0x132/0x1b0 [ 308.051542][T10434] internal_create_group+0x43e/0x9e0 [ 308.051648][T10434] ? kernfs_create_dir_ns+0x158/0x170 [ 308.051677][T10434] sysfs_create_groups+0x3f/0xf0 [ 308.051759][T10434] kobject_add_internal+0x49d/0x770 [ 308.051794][T10434] kobject_init_and_add+0x13c/0x1e0 [ 308.051831][T10434] rpc_sysfs_xprt_switch_setup+0x10f/0x1f0 [ 308.051967][T10434] xprt_switch_alloc+0x14f/0x2d0 [ 308.052006][T10434] rpc_create_xprt+0x9f/0x620 [ 308.052039][T10434] ? kstrdup+0x88/0xd0 [ 308.052066][T10434] rpc_create+0x494/0x570 [ 308.052110][T10434] nfs_create_rpc_client+0x4d4/0x590 [ 308.052215][T10434] nfs4_alloc_client+0x4aa/0x6e0 [ 308.052240][T10434] ? _raw_spin_unlock+0x9/0x30 [ 308.052270][T10434] ? ktime_get+0x212/0x240 [ 308.052329][T10434] ? ktime_get+0x212/0x240 [ 308.052357][T10434] ? lapic_next_event+0x11/0x20 [ 308.052382][T10434] ? clockevents_program_event+0x2fd/0x340 [ 308.052468][T10434] ? _raw_spin_lock_bh+0xb0/0xb0 [ 308.052541][T10434] ? __hrtimer_rearm_deferred+0x571/0x650 [ 308.052576][T10434] nfs_get_client+0x829/0xb80 [ 308.052609][T10434] nfs4_set_client+0x28a/0x320 [ 308.052647][T10434] nfs4_create_server+0x373/0x960 [ 308.052739][T10434] nfs4_try_get_tree+0x29/0xc0 [ 308.052769][T10434] nfs_get_tree+0xb81/0xc60 [ 308.052866][T10434] vfs_get_tree+0x57/0x1d0 [ 308.052900][T10434] do_new_mount+0x288/0x8d0 [ 308.052978][T10434] path_mount+0x4ad/0xb90 [ 308.053002][T10434] __se_sys_mount+0x28c/0x2e0 [ 308.053025][T10434] ? __hrtimer_rearm_deferred+0x571/0x650 [ 308.053054][T10434] __x64_sys_mount+0x67/0x80 [ 308.053079][T10434] x64_sys_call+0xc3b/0x2550 [ 308.053157][T10434] do_syscall_64+0x112/0x360 [ 308.053218][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.053242][T10434] RIP: 0033:0x7f1e0031e199 [ 308.053261][T10434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.053281][T10434] RSP: 002b:00007f1dfed77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.053303][T10434] RAX: ffffffffffffffda RBX: 00007f1e005a5fa0 RCX: 00007f1e0031e199 [ 308.053397][T10434] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 308.053413][T10434] RBP: 00007f1e003b50b8 R08: 0000200000000140 R09: 0000000000000000 [ 308.053488][T10434] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 308.053502][T10434] R13: 00007f1e005a6038 R14: 00007f1e005a5fa0 R15: 00007ffeefbf6208 [ 308.053582][T10434] [ 308.064524][T10434] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 308.084727][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 308.084741][ T29] audit: type=1326 audit(1791228933.309:17211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.084771][ T29] audit: type=1326 audit(1791228933.309:17212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.084864][ T29] audit: type=1326 audit(1791228933.309:17213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.089628][ T29] audit: type=1326 audit(1791228933.309:17214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.098977][ T29] audit: type=1326 audit(1791228933.319:17215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.100878][ T29] audit: type=1326 audit(1791228933.329:17217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.100909][ T29] audit: type=1326 audit(1791228933.329:17218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.103171][ T29] audit: type=1326 audit(1791228933.319:17216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.103503][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.103587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.105430][ T29] audit: type=1326 audit(1791228933.329:17219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.106647][ T29] audit: type=1326 audit(1791228933.329:17220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.5.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dee98e199 code=0x7ffc0000 [ 308.302564][T10417] loop6: detected capacity change from 0 to 512 [ 308.406311][T10451] vfat: Unknown parameter 'nnonumtail' [ 308.413976][T10417] EXT4-fs mount: 44 callbacks suppressed [ 308.414000][T10417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.414662][T10417] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.485288][T10443] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 308.550514][T10443] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.551417][T10443] ext2 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.558219][T10455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.558406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.558509][T10455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.563551][T10456] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 308.564286][T10456] JBD2: no valid journal superblock found [ 308.564296][T10456] EXT4-fs (loop7): Could not load journal inode [ 308.593419][T10443] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 308.593623][T10443] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 309.290701][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.350331][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.492232][ T3553] udevd[3553]: incorrect ext4 checksum on /dev/loop6 [ 309.511598][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.768474][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1675'. [ 309.770515][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.770667][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.818809][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.818972][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.143010][T10484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.143142][T10484] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.170294][T10487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.170443][T10487] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.234113][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.234395][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.284404][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.284767][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.519406][T10500] vfat: Unknown parameter 'nnonumtail' [ 310.626601][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.664537][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.727566][T10508] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 310.738432][T10508] JBD2: no valid journal superblock found [ 310.738446][T10508] EXT4-fs (loop6): Could not load journal inode [ 310.804413][T10502] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 310.854737][T10509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.854867][T10509] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.905871][T10502] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.945357][T10502] ext2 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.010922][T10502] EXT4-fs (loop2): resizing filesystem from 64 to 2 blocks [ 311.011197][T10502] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 311.270335][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.570490][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.640244][T10524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 311.640275][T10524] System zones: 1-12 [ 311.642470][T10524] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1691: missing EA_INODE flag [ 311.642498][T10524] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 311.643376][T10524] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1691: error while reading EA inode 12 err=-117 [ 311.643406][T10524] loop2: lost filesystem error report for type 5 error -117 [ 311.644535][T10524] EXT4-fs (loop2): 1 orphan inode deleted [ 311.644906][T10524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.829586][T10531] set_capacity_and_notify: 12 callbacks suppressed [ 311.829602][T10531] loop5: detected capacity change from 0 to 1024 [ 311.833805][T10531] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 311.836306][T10531] JBD2: no valid journal superblock found [ 311.836318][T10531] EXT4-fs (loop5): Could not load journal inode [ 311.882954][T10535] loop6: detected capacity change from 0 to 512 [ 311.904576][T10535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.904694][T10535] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.617402][T10542] loop7: detected capacity change from 0 to 256 [ 312.625579][T10542] vfat: Unknown parameter 'nnonumtail' [ 312.709683][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.899656][T10548] loop5: detected capacity change from 0 to 164 [ 313.092936][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 313.092957][ T29] audit: type=1400 audit(1791228938.319:17886): avc: denied { write } for pid=10559 comm="syz.0.1703" name="instances" dev="tracefs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 313.236318][ T37] net_ratelimit: 501 callbacks suppressed [ 313.236335][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.236430][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.293819][T10567] tmpfs: Bad value for 'mpol' [ 313.371083][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1704'. [ 313.373609][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.373741][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.438900][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.439193][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.737099][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.840087][T10572] loop0: detected capacity change from 0 to 1024 [ 313.863180][T10572] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 313.866197][T10572] JBD2: no valid journal superblock found [ 313.866210][T10572] EXT4-fs (loop0): Could not load journal inode [ 313.917916][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.995367][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1706'. [ 313.997946][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.998106][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.049352][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.049552][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.051191][ T5378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.233753][T10581] loop7: detected capacity change from 0 to 512 [ 314.273011][T10581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.273211][T10581] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.348933][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.349150][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.412979][ T29] audit: type=1326 audit(1791228939.639:17887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.416388][ T29] audit: type=1326 audit(1791228939.639:17888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.469689][ T29] audit: type=1326 audit(1791228939.699:17890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.474410][ T29] audit: type=1326 audit(1791228939.639:17889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.476175][ T29] audit: type=1326 audit(1791228939.699:17891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.504800][ T29] audit: type=1326 audit(1791228939.729:17892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.510974][ T29] audit: type=1326 audit(1791228939.729:17893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.511784][ T29] audit: type=1326 audit(1791228939.729:17894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.561771][ T29] audit: type=1326 audit(1791228939.789:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.7.1709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 314.706001][T10587] loop0: detected capacity change from 0 to 1024 [ 314.721135][T10587] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 314.721589][T10587] JBD2: no valid journal superblock found [ 314.721598][T10587] EXT4-fs (loop0): Could not load journal inode [ 314.808441][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.993426][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.368051][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.368669][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.643564][T10596] loop0: detected capacity change from 0 to 512 [ 315.673320][T10596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.673444][T10596] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.732517][T10596] FAULT_INJECTION: forcing a failure. [ 315.732517][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 315.732616][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.0.1712 Not tainted syzkaller #0 PREEMPT(lazy) [ 315.732640][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 315.732655][T10596] Call Trace: [ 315.732662][T10596] [ 315.732705][T10596] __dump_stack+0x1d/0x30 [ 315.732734][T10596] dump_stack_lvl+0x95/0xd0 [ 315.732839][T10596] dump_stack+0x15/0x1b [ 315.732861][T10596] should_fail_ex+0x262/0x280 [ 315.732886][T10596] ? hash_mac_create+0x1f8/0x6c0 [ 315.732929][T10596] should_failslab+0x8c/0xb0 [ 315.733007][T10596] __kmalloc_cache_noprof+0x7a/0x400 [ 315.733045][T10596] ? hash_mac_create+0x1f8/0x6c0 [ 315.733153][T10596] hash_mac_create+0x1f8/0x6c0 [ 315.733192][T10596] ? __nla_parse+0x40/0x60 [ 315.733276][T10596] ? __pfx_hash_mac_create+0x10/0x10 [ 315.733379][T10596] ip_set_create+0x3cc/0x970 [ 315.733420][T10596] ? __nla_parse+0x40/0x60 [ 315.733454][T10596] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 315.733554][T10596] netlink_rcv_skb+0x11e/0x220 [ 315.733578][T10596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 315.733617][T10596] nfnetlink_rcv+0x15f/0x1740 [ 315.733698][T10596] ? finish_task_switch+0x121/0x340 [ 315.733727][T10596] ? __schedule+0x79e/0xd20 [ 315.733758][T10596] ? __kfree_skb+0x109/0x150 [ 315.733841][T10596] ? nlmon_xmit+0x4f/0x60 [ 315.733867][T10596] ? __dev_queue_xmit+0x151/0x1ec0 [ 315.733890][T10596] ? preempt_schedule_common+0x12/0x40 [ 315.733922][T10596] ? preempt_schedule_thunk+0x16/0x40 [ 315.733988][T10596] ? __dev_queue_xmit+0x151/0x1ec0 [ 315.734054][T10596] ? __local_bh_enable_ip+0x68/0x80 [ 315.734075][T10596] ? __dev_queue_xmit+0x1361/0x1ec0 [ 315.734101][T10596] ? __dev_queue_xmit+0x151/0x1ec0 [ 315.734176][T10596] ? ref_tracker_free+0x380/0x3f0 [ 315.734276][T10596] ? skb_clone+0x151/0x1f0 [ 315.734305][T10596] ? _raw_spin_lock+0x53/0xa0 [ 315.734335][T10596] ? __list_del_entry_valid_or_report+0x65/0x130 [ 315.734381][T10596] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 315.734464][T10596] ? rcu_preempt_deferred_qs_irqrestore+0x3b6/0x5a0 [ 315.734500][T10596] ? rcu_read_unlock_special+0xa0/0x210 [ 315.734538][T10596] netlink_unicast+0x5a9/0x680 [ 315.734654][T10596] netlink_sendmsg+0x5be/0x6f0 [ 315.734676][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.734700][T10596] ____sys_sendmsg+0x532/0x580 [ 315.734731][T10596] ___sys_sendmsg+0x195/0x1e0 [ 315.734800][T10596] __x64_sys_sendmsg+0xd4/0x160 [ 315.734873][T10596] x64_sys_call+0x22ab/0x2550 [ 315.734934][T10596] do_syscall_64+0x112/0x360 [ 315.734963][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.734990][T10596] RIP: 0033:0x7f030dbbe199 [ 315.735009][T10596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.735042][T10596] RSP: 002b:00007f030c617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.735065][T10596] RAX: ffffffffffffffda RBX: 00007f030de45fa0 RCX: 00007f030dbbe199 [ 315.735083][T10596] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 315.735098][T10596] RBP: 00007f030dc550b8 R08: 0000000000000000 R09: 0000000000000000 [ 315.735111][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.735203][T10596] R13: 00007f030de46038 R14: 00007f030de45fa0 R15: 00007ffdcca55838 [ 315.735226][T10596] [ 315.896730][T10593] loop7: detected capacity change from 0 to 164 [ 316.007015][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.249148][T10601] loop0: detected capacity change from 0 to 512 [ 316.365053][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.420707][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.421318][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.473842][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.473937][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.647746][T10601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.651468][T10601] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.822962][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.832224][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1717'. [ 316.909093][T10624] tmpfs: Bad value for 'mpol' [ 316.937200][T10626] loop7: detected capacity change from 0 to 1024 [ 316.954871][T10626] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 316.956696][T10626] JBD2: no valid journal superblock found [ 316.956708][T10626] EXT4-fs (loop7): Could not load journal inode [ 317.088834][T10632] loop2: detected capacity change from 0 to 512 [ 317.117625][T10636] loop0: detected capacity change from 0 to 512 [ 317.143075][T10636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.143156][T10636] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.276107][T10632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.282951][T10632] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.306692][T10643] loop5: detected capacity change from 0 to 164 [ 317.384930][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.415033][T10646] loop2: detected capacity change from 0 to 512 [ 317.424586][T10646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 317.424615][T10646] System zones: 1-12 [ 317.425426][T10646] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1726: missing EA_INODE flag [ 317.425450][T10646] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.426320][T10646] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1726: error while reading EA inode 12 err=-117 [ 317.426352][T10646] loop2: lost filesystem error report for type 5 error -117 [ 317.426877][T10646] EXT4-fs (loop2): 1 orphan inode deleted [ 317.486446][T10646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.901844][T10658] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1729'. [ 318.005704][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.153968][T10663] loop5: detected capacity change from 0 to 164 [ 318.602904][ T24] net_ratelimit: 10 callbacks suppressed [ 318.602921][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.605124][ T5378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.877890][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.970575][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.018117][T10672] tmpfs: Bad value for 'mpol' [ 319.097171][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.119116][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.156392][T10677] loop0: detected capacity change from 0 to 512 [ 319.173025][T10680] loop2: detected capacity change from 0 to 1024 [ 319.176478][T10680] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 319.195007][T10680] JBD2: no valid journal superblock found [ 319.195019][T10680] EXT4-fs (loop2): Could not load journal inode [ 319.212354][T10682] loop5: detected capacity change from 0 to 164 [ 319.347453][T10677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.348723][T10677] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.410345][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.410469][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.410636][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.679014][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1740'. [ 319.759152][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.792190][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.850486][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.888588][T10702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1743'. [ 319.994855][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 319.994872][ T29] audit: type=1400 audit(1791228945.219:18265): avc: denied { write } for pid=10707 comm="syz.0.1746" name="instances" dev="tracefs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 320.073805][T10713] tmpfs: Bad value for 'mpol' [ 320.075591][T10706] loop5: detected capacity change from 0 to 512 [ 320.122196][T10706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.122573][T10706] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.197056][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.333365][T10720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.333458][T10720] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.333870][T10726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 320.333899][T10726] System zones: 1-12 [ 320.334227][T10726] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1752: missing EA_INODE flag [ 320.334280][T10726] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 320.334417][T10726] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1752: error while reading EA inode 12 err=-117 [ 320.334443][T10726] loop7: lost filesystem error report for type 5 error -117 [ 320.334843][T10726] EXT4-fs (loop7): 1 orphan inode deleted [ 320.335225][T10726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.397800][ T29] audit: type=1326 audit(1791228945.619:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.397834][ T29] audit: type=1326 audit(1791228945.619:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.397878][ T29] audit: type=1326 audit(1791228945.619:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.397975][ T29] audit: type=1326 audit(1791228945.619:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.398003][ T29] audit: type=1326 audit(1791228945.619:18270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.398790][ T29] audit: type=1326 audit(1791228945.619:18271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.399013][ T29] audit: type=1326 audit(1791228945.629:18272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.399170][ T29] audit: type=1326 audit(1791228945.629:18273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.399619][ T29] audit: type=1326 audit(1791228945.629:18274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.6.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2c7ee0e199 code=0x7ffc0000 [ 320.469291][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.469488][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.519528][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.519897][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.926393][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 321.142684][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.266958][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1757'. [ 321.424662][T10753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.425001][T10753] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.011035][T10757] set_capacity_and_notify: 4 callbacks suppressed [ 322.011060][T10757] loop6: detected capacity change from 0 to 164 [ 322.174507][T10767] loop0: detected capacity change from 0 to 512 [ 322.190452][T10767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.190591][T10767] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.244126][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.367021][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.417379][T10776] loop7: detected capacity change from 0 to 512 [ 322.440335][T10776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 322.440363][T10776] System zones: 1-12 [ 322.440730][T10776] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1766: missing EA_INODE flag [ 322.440756][T10776] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 322.441313][T10776] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1766: error while reading EA inode 12 err=-117 [ 322.441340][T10776] loop7: lost filesystem error report for type 5 error -117 [ 322.441502][T10776] EXT4-fs (loop7): 1 orphan inode deleted [ 322.442026][T10776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.645341][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'. [ 322.700464][T10774] loop6: detected capacity change from 0 to 512 [ 322.743083][T10774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.743839][T10774] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.076255][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.105309][T10787] loop2: detected capacity change from 0 to 512 [ 323.456973][T10787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.457117][T10787] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.470641][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.545928][T10791] loop5: detected capacity change from 0 to 128 [ 323.560548][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop5 [ 323.597683][T10794] loop5: detected capacity change from 0 to 164 [ 323.698339][ T1009] net_ratelimit: 26 callbacks suppressed [ 323.698365][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.698417][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.698479][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.698555][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.699204][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.704075][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.704948][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.705076][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.932795][T10801] loop2: detected capacity change from 0 to 256 [ 323.938227][T10801] vfat: Unknown parameter 'nnonumtail' [ 323.987568][T10801] FAULT_INJECTION: forcing a failure. [ 323.987568][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 323.987626][T10801] CPU: 1 UID: 0 PID: 10801 Comm: syz.2.1773 Not tainted syzkaller #0 PREEMPT(lazy) [ 323.987653][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.987666][T10801] Call Trace: [ 323.987673][T10801] [ 323.987680][T10801] __dump_stack+0x1d/0x30 [ 323.987777][T10801] dump_stack_lvl+0x95/0xd0 [ 323.987804][T10801] dump_stack+0x15/0x1b [ 323.987828][T10801] should_fail_ex+0x262/0x280 [ 323.987854][T10801] ? percpu_ref_init+0x9c/0x250 [ 323.987934][T10801] should_failslab+0x8c/0xb0 [ 323.987964][T10801] __kmalloc_cache_noprof+0x7a/0x400 [ 323.988016][T10801] ? percpu_ref_init+0x33/0x250 [ 323.988036][T10801] ? percpu_ref_init+0x9c/0x250 [ 323.988075][T10801] ? __pfx_no_op+0x10/0x10 [ 323.988100][T10801] percpu_ref_init+0x9c/0x250 [ 323.988124][T10801] ? mddev_init+0x58/0x420 [ 323.988170][T10801] mddev_init+0x8c/0x420 [ 323.988202][T10801] md_alloc+0x99/0xa00 [ 323.988243][T10801] md_alloc_and_put+0x18/0x170 [ 323.988278][T10801] add_named_array+0x1cd/0x2a0 [ 323.988310][T10801] param_attr_store+0x149/0x1d0 [ 323.988370][T10801] ? __pfx_param_attr_store+0x10/0x10 [ 323.988407][T10801] module_attr_store+0x4c/0x70 [ 323.988441][T10801] ? __pfx_module_attr_store+0x10/0x10 [ 323.988542][T10801] sysfs_kf_write+0xfe/0x120 [ 323.988572][T10801] ? __pfx_sysfs_kf_write+0x10/0x10 [ 323.988638][T10801] kernfs_fop_write_iter+0x1d2/0x2e0 [ 323.988669][T10801] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 323.988764][T10801] vfs_write+0x57f/0x9a0 [ 323.988798][T10801] ksys_write+0xdc/0x1a0 [ 323.988827][T10801] __x64_sys_write+0x40/0x50 [ 323.988907][T10801] x64_sys_call+0x154e/0x2550 [ 323.988935][T10801] do_syscall_64+0x112/0x360 [ 323.988965][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.988991][T10801] RIP: 0033:0x7f1e0031e199 [ 323.989088][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.989109][T10801] RSP: 002b:00007f1dfed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.989131][T10801] RAX: ffffffffffffffda RBX: 00007f1e005a5fa0 RCX: 00007f1e0031e199 [ 323.989149][T10801] RDX: 0000000000000003 RSI: 0000200000000280 RDI: 0000000000000008 [ 323.989166][T10801] RBP: 00007f1e003b50b8 R08: 0000000000000000 R09: 0000000000000000 [ 323.989226][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.989239][T10801] R13: 00007f1e005a6038 R14: 00007f1e005a5fa0 R15: 00007ffeefbf6208 [ 323.989374][T10801] [ 324.004362][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.170436][T10801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.265476][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 324.266697][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.266966][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.317638][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.342358][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.342438][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.609285][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.609374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.622366][T10806] loop7: detected capacity change from 0 to 512 [ 324.665193][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1778'. [ 324.699330][T10819] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1779'. [ 324.747439][T10806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.753222][T10806] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.850810][T10832] loop5: detected capacity change from 0 to 512 [ 324.871294][T10832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 324.871328][T10832] System zones: 1-12 [ 324.872831][T10832] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1783: missing EA_INODE flag [ 324.872912][T10832] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 324.875062][T10832] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1783: error while reading EA inode 12 err=-117 [ 324.875088][T10832] loop5: lost filesystem error report for type 5 error -117 [ 324.877833][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 324.877848][ C0] EXT4-fs (loop5): initial error at time 1791228950: ext4_xattr_inode_iget:437: inode 12 [ 324.877881][ C0] EXT4-fs (loop5): last error at time 1791228950: ext4_xattr_inode_iget:442 [ 324.882872][T10832] EXT4-fs (loop5): 1 orphan inode deleted [ 324.883483][T10832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.083907][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 325.083922][ T29] audit: type=1400 audit(1791228950.309:18733): avc: denied { write } for pid=10831 comm="syz.5.1783" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.130592][T10839] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 325.132946][T10839] JBD2: no valid journal superblock found [ 325.132959][T10839] EXT4-fs (loop6): Could not load journal inode [ 325.321682][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.749528][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.789144][T10842] FAULT_INJECTION: forcing a failure. [ 325.789144][T10842] name fail_futex, interval 1, probability 0, space 0, times 0 [ 325.789170][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.2.1785 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.789199][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.789220][T10842] Call Trace: [ 325.789229][T10842] [ 325.789239][T10842] __dump_stack+0x1d/0x30 [ 325.789262][T10842] dump_stack_lvl+0x95/0xd0 [ 325.789297][T10842] dump_stack+0x15/0x1b [ 325.789320][T10842] should_fail_ex+0x262/0x280 [ 325.789377][T10842] should_fail+0xb/0x20 [ 325.789404][T10842] get_futex_key+0x594/0xb10 [ 325.789434][T10842] futex_wake+0x89/0x400 [ 325.789459][T10842] do_futex+0x3f8/0x460 [ 325.789493][T10842] mm_exit_exec_release+0xab/0x190 [ 325.789521][T10842] exit_mm+0x37/0x1b0 [ 325.789550][T10842] do_exit+0x438/0x1510 [ 325.789603][T10842] ? do_group_exit+0xf3/0x140 [ 325.789638][T10842] do_group_exit+0xfe/0x140 [ 325.789670][T10842] ? get_signal+0xe00/0xf10 [ 325.789770][T10842] get_signal+0xe07/0xf10 [ 325.789876][T10842] arch_do_signal_or_restart+0x96/0x480 [ 325.789914][T10842] exit_to_user_mode_loop+0x15d/0x8c0 [ 325.789990][T10842] do_syscall_64+0x212/0x360 [ 325.790019][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.790044][T10842] RIP: 0033:0x7f1e0031e199 [ 325.790059][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.790080][T10842] RSP: 002b:00007f1dfed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 325.790108][T10842] RAX: fffffffffffffe00 RBX: 00007f1e005a5fa8 RCX: 00007f1e0031e199 [ 325.790121][T10842] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e005a5fa8 [ 325.790181][T10842] RBP: 00007f1e005a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 325.790193][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.790205][T10842] R13: 00007f1e005a6038 R14: 00007ffeefbf6120 R15: 00007ffeefbf6208 [ 325.790228][T10842] [ 325.908998][T10849] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 326.142617][T10858] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 326.145853][T10858] JBD2: no valid journal superblock found [ 326.145866][T10858] EXT4-fs (loop2): Could not load journal inode [ 326.360727][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1792'. [ 327.033296][ T29] audit: type=1400 audit(1791228952.259:18734): avc: denied { write } for pid=10877 comm="syz.7.1796" name="instances" dev="tracefs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 327.083834][ T29] audit: type=1400 audit(1791228952.309:18735): avc: denied { write } for pid=10877 comm="syz.7.1796" name="instances" dev="tracefs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 327.089168][T10866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.092105][T10866] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.111091][T10883] tmpfs: Bad value for 'mpol' [ 327.126783][T10885] set_capacity_and_notify: 4 callbacks suppressed [ 327.126813][T10885] loop6: detected capacity change from 0 to 1024 [ 327.141040][T10885] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 327.142308][T10885] JBD2: no valid journal superblock found [ 327.142393][T10885] EXT4-fs (loop6): Could not load journal inode [ 327.317651][T10889] loop2: detected capacity change from 0 to 1024 [ 327.337986][T10889] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 327.338454][T10889] JBD2: no valid journal superblock found [ 327.338490][T10889] EXT4-fs (loop2): Could not load journal inode [ 327.468471][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.905937][T10894] FAULT_INJECTION: forcing a failure. [ 327.905937][T10894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.906152][T10894] CPU: 1 UID: 0 PID: 10894 Comm: syz.5.1800 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.906176][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 327.906193][T10894] Call Trace: [ 327.906200][T10894] [ 327.906209][T10894] __dump_stack+0x1d/0x30 [ 327.906268][T10894] dump_stack_lvl+0x95/0xd0 [ 327.906294][T10894] dump_stack+0x15/0x1b [ 327.906319][T10894] should_fail_ex+0x262/0x280 [ 327.906349][T10894] should_fail+0xb/0x20 [ 327.906395][T10894] should_fail_usercopy+0x1a/0x20 [ 327.906441][T10894] _copy_from_user+0x1c/0xb0 [ 327.906470][T10894] memdup_user+0x5e/0xd0 [ 327.906553][T10894] strndup_user+0x68/0xb0 [ 327.906576][T10894] __se_sys_mount+0x4d/0x2e0 [ 327.906673][T10894] __x64_sys_mount+0x67/0x80 [ 327.906694][T10894] x64_sys_call+0xc3b/0x2550 [ 327.906721][T10894] do_syscall_64+0x112/0x360 [ 327.906748][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.906844][T10894] RIP: 0033:0x7f5dee98e199 [ 327.906859][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.906876][T10894] RSP: 002b:00007f5ded3e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.906900][T10894] RAX: ffffffffffffffda RBX: 00007f5deec15fa0 RCX: 00007f5dee98e199 [ 327.906918][T10894] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 327.906933][T10894] RBP: 00007f5deea250b8 R08: 0000000000000000 R09: 0000000000000000 [ 327.907017][T10894] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.907065][T10894] R13: 00007f5deec16038 R14: 00007f5deec15fa0 R15: 00007ffe242a4b58 [ 327.907084][T10894] [ 328.289899][T10907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1804'. [ 328.313540][T10903] FAULT_INJECTION: forcing a failure. [ 328.313540][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 328.313596][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.0.1802 Not tainted syzkaller #0 PREEMPT(lazy) [ 328.313667][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.313682][T10903] Call Trace: [ 328.313689][T10903] [ 328.313699][T10903] __dump_stack+0x1d/0x30 [ 328.313728][T10903] dump_stack_lvl+0x95/0xd0 [ 328.313823][T10903] dump_stack+0x15/0x1b [ 328.313899][T10903] should_fail_ex+0x262/0x280 [ 328.313930][T10903] ? kobject_uevent_env+0x1a8/0x560 [ 328.314035][T10903] should_failslab+0x8c/0xb0 [ 328.314071][T10903] __kmalloc_cache_noprof+0x7a/0x400 [ 328.314103][T10903] ? kobject_uevent_env+0x1a8/0x560 [ 328.314184][T10903] kobject_uevent_env+0x1a8/0x560 [ 328.314222][T10903] ? kobject_uevent+0x11/0x30 [ 328.314247][T10903] kobject_uevent+0x1d/0x30 [ 328.314326][T10903] rpc_sysfs_xprt_switch_setup+0x181/0x1f0 [ 328.314352][T10903] xprt_switch_alloc+0x14f/0x2d0 [ 328.314413][T10903] rpc_create_xprt+0x9f/0x620 [ 328.314450][T10903] ? kstrdup+0x88/0xd0 [ 328.314485][T10903] rpc_create+0x494/0x570 [ 328.314512][T10903] ? ktime_get+0x212/0x240 [ 328.314551][T10903] nfs_create_rpc_client+0x4d4/0x590 [ 328.314656][T10903] nfs4_alloc_client+0x4aa/0x6e0 [ 328.314687][T10903] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 328.314746][T10903] ? nfs_get_client+0x7a0/0xb80 [ 328.314850][T10903] nfs_get_client+0x829/0xb80 [ 328.314929][T10903] nfs4_set_client+0x28a/0x320 [ 328.314959][T10903] nfs4_create_server+0x373/0x960 [ 328.315009][T10903] nfs4_try_get_tree+0x29/0xc0 [ 328.315041][T10903] nfs_get_tree+0xb81/0xc60 [ 328.315068][T10903] vfs_get_tree+0x57/0x1d0 [ 328.315130][T10903] do_new_mount+0x288/0x8d0 [ 328.315158][T10903] path_mount+0x4ad/0xb90 [ 328.315184][T10903] __se_sys_mount+0x28c/0x2e0 [ 328.315212][T10903] __x64_sys_mount+0x67/0x80 [ 328.315317][T10903] x64_sys_call+0xc3b/0x2550 [ 328.315346][T10903] do_syscall_64+0x112/0x360 [ 328.315376][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.315402][T10903] RIP: 0033:0x7f030dbbe199 [ 328.315424][T10903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.315441][T10903] RSP: 002b:00007f030c617028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.315461][T10903] RAX: ffffffffffffffda RBX: 00007f030de45fa0 RCX: 00007f030dbbe199 [ 328.315478][T10903] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 328.315495][T10903] RBP: 00007f030dc550b8 R08: 0000200000000140 R09: 0000000000000000 [ 328.315579][T10903] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 328.315592][T10903] R13: 00007f030de46038 R14: 00007f030de45fa0 R15: 00007ffdcca55838 [ 328.315611][T10903] [ 328.336180][T10908] loop5: detected capacity change from 0 to 512 [ 328.384335][T10912] loop2: detected capacity change from 0 to 512 [ 328.401154][T10908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.401325][T10908] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.411003][T10912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.411067][T10912] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.498360][ T29] audit: type=1400 audit(1791228953.719:18736): avc: denied { write } for pid=10910 comm="syz.2.1806" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.528003][ T29] audit: type=1400 audit(1791228953.749:18737): avc: denied { write } for pid=10905 comm="syz.5.1803" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.587362][ T29] audit: type=1400 audit(1791228953.809:18738): avc: denied { write } for pid=10905 comm="syz.5.1803" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.665402][ T29] audit: type=1400 audit(1791228953.889:18739): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.666245][ T29] audit: type=1400 audit(1791228953.889:18740): avc: denied { write } for pid=3298 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.666677][ T29] audit: type=1400 audit(1791228953.889:18741): avc: denied { write } for pid=3298 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.667033][ T29] audit: type=1400 audit(1791228953.889:18742): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.709376][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.879395][ T24] net_ratelimit: 823 callbacks suppressed [ 328.879413][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.879558][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.001839][T10924] tmpfs: Bad value for 'mpol' [ 329.086131][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.301867][T10920] loop2: detected capacity change from 0 to 164 [ 329.364054][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.372687][ T5378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.379614][T10935] loop7: detected capacity change from 0 to 164 [ 329.519366][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1813'. [ 329.520639][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.520706][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.558582][T10928] loop6: detected capacity change from 0 to 512 [ 329.591613][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.591734][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.720647][T10928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.721377][T10928] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.758092][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.758194][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.816133][T10950] loop7: detected capacity change from 0 to 512 [ 329.830354][T10950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.830414][T10950] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.878246][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.918131][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.918211][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.968728][T10955] loop6: detected capacity change from 0 to 1024 [ 329.978732][T10955] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 329.983320][T10955] JBD2: no valid journal superblock found [ 329.983332][T10955] EXT4-fs (loop6): Could not load journal inode [ 330.146368][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 330.146385][ T29] audit: type=1326 audit(1791228955.369:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 330.147822][ T29] audit: type=1326 audit(1791228955.369:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 330.147853][ T29] audit: type=1326 audit(1791228955.369:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 330.206698][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.206913][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.254930][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.255144][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.287812][ T29] audit: type=1326 audit(1791228955.499:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a86e199 code=0x7ffc0000 [ 330.287957][ T29] audit: type=1326 audit(1791228955.499:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd18a86df02 code=0x7ffc0000 [ 330.287994][ T29] audit: type=1326 audit(1791228955.499:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd18a86df97 code=0x7ffc0000 [ 330.288103][ T29] audit: type=1326 audit(1791228955.499:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd18a82ae91 code=0x7ffc0000 [ 330.288148][ T29] audit: type=1326 audit(1791228955.499:18770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd18a86ef89 code=0x7ffc0000 [ 330.288175][ T29] audit: type=1326 audit(1791228955.499:18771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd18a82aefb code=0x7ffc0000 [ 330.288211][ T29] audit: type=1326 audit(1791228955.499:18772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10943 comm="syz.7.1814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd18a82a5ec code=0x7ffc0000 [ 330.583913][T10964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.584023][T10964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.306104][T10975] loop2: detected capacity change from 0 to 512 [ 331.351262][T10975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.351361][T10975] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.725055][T10984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.725116][T10984] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.755308][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.287454][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.761483][T11004] set_capacity_and_notify: 2 callbacks suppressed [ 332.761547][T11004] loop5: detected capacity change from 0 to 128 [ 332.794528][T11004] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 332.817533][T11000] loop7: detected capacity change from 0 to 164 [ 332.828043][T11004] ext2 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.856313][T11004] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 332.856581][T11004] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 332.882029][T11009] loop6: detected capacity change from 0 to 1024 [ 332.895101][T11009] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 332.898672][T11009] JBD2: no valid journal superblock found [ 332.898685][T11009] EXT4-fs (loop6): Could not load journal inode [ 332.938290][T10997] loop2: detected capacity change from 0 to 512 [ 333.351672][T11012] loop0: detected capacity change from 0 to 164 [ 333.427717][T10997] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.911694][T11026] net_ratelimit: 434 callbacks suppressed [ 333.911778][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.930384][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.935767][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.937858][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.970118][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.971827][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.976609][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.003449][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.007670][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.024304][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.101660][T11023] loop7: detected capacity change from 0 to 512 [ 334.131919][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1838'. [ 334.350429][T11042] loop0: detected capacity change from 0 to 512 [ 334.360759][T11023] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.373104][T11042] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.456536][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'. [ 334.457798][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.457978][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.548035][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.548190][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.669719][T11052] loop5: detected capacity change from 0 to 128 [ 334.688251][T11052] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 334.695220][T11052] ext2 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.721655][T11052] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 334.721680][T11052] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 334.959092][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.959237][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.005807][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.006109][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.073199][T11061] loop5: detected capacity change from 0 to 164 [ 335.084686][T11061] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 335.288248][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 335.288273][ T29] audit: type=1400 audit(1791228960.499:19100): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.288361][ T29] audit: type=1400 audit(1791228960.509:19101): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.296416][ T29] audit: type=1400 audit(1791228960.519:19102): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.351550][ T29] audit: type=1400 audit(1791228960.579:19103): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.396801][ T29] audit: type=1400 audit(1791228960.619:19104): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.420814][ T29] audit: type=1400 audit(1791228960.649:19105): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.421823][ T29] audit: type=1400 audit(1791228960.649:19106): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.422793][ T29] audit: type=1400 audit(1791228960.649:19107): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.424774][ T29] audit: type=1400 audit(1791228960.649:19108): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.426579][ T29] audit: type=1400 audit(1791228960.649:19109): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.609847][T11068] loop7: detected capacity change from 0 to 512 [ 335.667270][T11068] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.769810][T11077] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 335.771112][T11077] JBD2: no valid journal superblock found [ 335.771125][T11077] EXT4-fs (loop0): Could not load journal inode [ 336.489296][T11082] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.541914][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1852'. [ 336.951355][T11100] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 337.036034][T11100] ext2 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.061152][T11100] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 337.061302][T11100] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 337.136193][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 337.139028][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.139435][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.208834][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.209186][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.363408][T11107] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.751819][T11115] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.007185][T11127] set_capacity_and_notify: 6 callbacks suppressed [ 338.007225][T11127] loop7: detected capacity change from 0 to 1024 [ 338.022477][T11127] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 338.024672][T11127] JBD2: no valid journal superblock found [ 338.024685][T11127] EXT4-fs (loop7): Could not load journal inode [ 338.237299][T11125] FAULT_INJECTION: forcing a failure. [ 338.237299][T11125] name failslab, interval 1, probability 0, space 0, times 0 [ 338.237405][T11125] CPU: 1 UID: 0 PID: 11125 Comm: syz.2.1863 Not tainted syzkaller #0 PREEMPT(lazy) [ 338.237430][T11125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.237446][T11125] Call Trace: [ 338.237453][T11125] [ 338.237526][T11125] __dump_stack+0x1d/0x30 [ 338.237556][T11125] dump_stack_lvl+0x95/0xd0 [ 338.237634][T11125] dump_stack+0x15/0x1b [ 338.237654][T11125] should_fail_ex+0x262/0x280 [ 338.237760][T11125] ? __kernfs_new_node+0x70/0x440 [ 338.237785][T11125] should_failslab+0x8c/0xb0 [ 338.237827][T11125] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 338.237878][T11125] ? __kernfs_new_node+0x70/0x440 [ 338.237903][T11125] __kernfs_new_node+0x70/0x440 [ 338.237923][T11125] ? rb_insert_color+0x291/0x2a0 [ 338.237949][T11125] ? __rcu_read_unlock+0x4e/0x70 [ 338.238024][T11125] ? __rcu_read_unlock+0x4e/0x70 [ 338.238058][T11125] ? kernfs_activate_one+0x10c/0x140 [ 338.238086][T11125] ? __rcu_read_unlock+0x4e/0x70 [ 338.238165][T11125] ? up_write+0x19/0x60 [ 338.238201][T11125] kernfs_new_node+0xcf/0xf0 [ 338.238226][T11125] __kernfs_create_file+0x4b/0x180 [ 338.238255][T11125] ? __pfx_kobj_attr_show+0x10/0x10 [ 338.238357][T11125] ? __pfx_kobj_attr_store+0x10/0x10 [ 338.238391][T11125] sysfs_add_file_mode_ns+0x132/0x1b0 [ 338.238480][T11125] internal_create_group+0x43e/0x9e0 [ 338.238520][T11125] ? kernfs_create_dir_ns+0x158/0x170 [ 338.238547][T11125] sysfs_create_groups+0x3f/0xf0 [ 338.238566][T11125] kobject_add_internal+0x49d/0x770 [ 338.238635][T11125] kobject_init_and_add+0x13c/0x1e0 [ 338.238726][T11125] rpc_sysfs_xprt_switch_setup+0x10f/0x1f0 [ 338.238755][T11125] xprt_switch_alloc+0x14f/0x2d0 [ 338.238866][T11125] rpc_create_xprt+0x9f/0x620 [ 338.238901][T11125] ? kstrdup+0x88/0xd0 [ 338.238993][T11125] rpc_create+0x494/0x570 [ 338.239111][T11125] nfs_create_rpc_client+0x4d4/0x590 [ 338.239144][T11125] nfs4_alloc_client+0x4aa/0x6e0 [ 338.239167][T11125] ? lapic_next_event+0x11/0x20 [ 338.239188][T11125] ? clockevents_program_event+0x2fd/0x340 [ 338.239323][T11125] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 338.239391][T11125] nfs_get_client+0x829/0xb80 [ 338.239417][T11125] ? nfs4_set_client+0x1d5/0x320 [ 338.239446][T11125] nfs4_set_client+0x28a/0x320 [ 338.239472][T11125] nfs4_create_server+0x373/0x960 [ 338.239586][T11125] nfs4_try_get_tree+0x29/0xc0 [ 338.239614][T11125] nfs_get_tree+0xb81/0xc60 [ 338.239658][T11125] vfs_get_tree+0x57/0x1d0 [ 338.239691][T11125] do_new_mount+0x288/0x8d0 [ 338.239714][T11125] path_mount+0x4ad/0xb90 [ 338.239817][T11125] __se_sys_mount+0x28c/0x2e0 [ 338.239845][T11125] __x64_sys_mount+0x67/0x80 [ 338.239869][T11125] x64_sys_call+0xc3b/0x2550 [ 338.239979][T11125] do_syscall_64+0x112/0x360 [ 338.240009][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.240032][T11125] RIP: 0033:0x7f1e0031e199 [ 338.240077][T11125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.240098][T11125] RSP: 002b:00007f1dfed77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 338.240121][T11125] RAX: ffffffffffffffda RBX: 00007f1e005a5fa0 RCX: 00007f1e0031e199 [ 338.240139][T11125] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 338.240159][T11125] RBP: 00007f1e003b50b8 R08: 0000200000000140 R09: 0000000000000000 [ 338.240175][T11125] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 338.240190][T11125] R13: 00007f1e005a6038 R14: 00007f1e005a5fa0 R15: 00007ffeefbf6208 [ 338.240214][T11125] [ 338.243870][T11125] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 338.358860][T11122] loop6: detected capacity change from 0 to 512 [ 338.552111][ T3297] EXT4-fs unmount: 20 callbacks suppressed [ 338.552127][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.637076][T11122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.639414][T11122] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.885554][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.920638][T11142] loop0: detected capacity change from 0 to 512 [ 338.930968][T11142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 338.931057][T11142] System zones: 1-12 [ 338.931275][T11142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1877: missing EA_INODE flag [ 338.931303][T11142] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 338.932533][T11142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1877: error while reading EA inode 12 err=-117 [ 338.932559][T11142] loop0: lost filesystem error report for type 5 error -117 [ 338.933954][T11142] EXT4-fs (loop0): 1 orphan inode deleted [ 338.934333][T11142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.960769][ T3539] net_ratelimit: 98 callbacks suppressed [ 338.960782][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.027312][T11148] loop6: detected capacity change from 0 to 1024 [ 339.036554][T11148] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 339.039295][T11148] JBD2: no valid journal superblock found [ 339.039306][T11148] EXT4-fs (loop6): Could not load journal inode [ 339.354531][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.354821][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.354987][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.359773][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.359895][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.360553][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.361119][T11152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.378714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.379476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.839413][T11145] loop2: detected capacity change from 0 to 512 [ 339.997735][T11145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.000618][T11145] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.086925][T11166] loop7: detected capacity change from 0 to 512 [ 340.098234][T11166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 340.098286][T11166] System zones: 1-12 [ 340.107581][T11166] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1872: missing EA_INODE flag [ 340.107611][T11166] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 340.107797][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 340.107844][ C1] EXT4-fs (loop7): initial error at time 1791228965: ext4_xattr_inode_iget:437: inode 12 [ 340.107881][ C1] EXT4-fs (loop7): last error at time 1791228965: ext4_xattr_inode_iget:437: inode 12 [ 340.146786][T11161] loop6: detected capacity change from 0 to 128 [ 340.170460][T11166] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1872: error while reading EA inode 12 err=-117 [ 340.170489][T11166] loop7: lost filesystem error report for type 5 error -117 [ 340.171196][T11166] EXT4-fs (loop7): 1 orphan inode deleted [ 340.171702][T11166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.177525][ T3553] udevd[3553]: incorrect ext4 checksum on /dev/loop6 [ 340.274124][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.448461][T11177] loop6: detected capacity change from 0 to 512 [ 340.604815][T11177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.604883][T11177] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.606571][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 340.645251][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.645452][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.674736][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 340.674759][ T29] audit: type=1400 audit(1791228965.899:19391): avc: denied { write } for pid=11170 comm="syz.6.1874" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.858229][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.858463][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.053735][ T29] audit: type=1400 audit(1791228966.279:19392): avc: denied { write } for pid=11170 comm="syz.6.1874" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.253887][ T29] audit: type=1400 audit(1791228966.479:19393): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.253916][ T29] audit: type=1400 audit(1791228966.479:19394): avc: denied { write } for pid=5271 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.253944][ T29] audit: type=1400 audit(1791228966.479:19395): avc: denied { write } for pid=5271 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.254081][ T29] audit: type=1400 audit(1791228966.479:19396): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.254105][ T29] audit: type=1400 audit(1791228966.479:19397): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.254185][ T29] audit: type=1400 audit(1791228966.479:19398): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.254282][ T29] audit: type=1400 audit(1791228966.479:19399): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.254454][ T29] audit: type=1400 audit(1791228966.479:19400): avc: denied { write } for pid=5271 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.441427][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.766037][T11193] loop6: detected capacity change from 0 to 512 [ 341.908411][T11193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.908821][T11193] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.961675][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.128937][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.237522][T11204] loop7: detected capacity change from 0 to 1024 [ 342.251436][T11204] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 342.255271][T11204] JBD2: no valid journal superblock found [ 342.255286][T11204] EXT4-fs (loop7): Could not load journal inode [ 342.546025][T11212] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 342.546655][T11212] JBD2: no valid journal superblock found [ 342.546664][T11212] EXT4-fs (loop6): Could not load journal inode [ 343.183779][T11217] set_capacity_and_notify: 1 callbacks suppressed [ 343.183804][T11217] loop5: detected capacity change from 0 to 512 [ 343.235477][T11217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.236308][T11217] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.364754][T11225] loop7: detected capacity change from 0 to 1024 [ 343.375272][T11225] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 343.375865][T11225] JBD2: no valid journal superblock found [ 343.375876][T11225] EXT4-fs (loop7): Could not load journal inode [ 343.969505][T11216] net_ratelimit: 432 callbacks suppressed [ 343.969525][T11216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.077967][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.078141][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.104669][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.158491][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.224405][T11239] loop2: detected capacity change from 0 to 1024 [ 344.305979][T11239] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 344.307345][T11239] JBD2: no valid journal superblock found [ 344.307357][T11239] EXT4-fs (loop2): Could not load journal inode [ 344.318472][T11237] loop5: detected capacity change from 0 to 1024 [ 344.321997][T11237] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 344.323446][T11237] JBD2: no valid journal superblock found [ 344.323457][T11237] EXT4-fs (loop5): Could not load journal inode [ 344.624443][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.624533][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.624614][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.625935][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.626035][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.626463][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.365329][T11243] loop7: detected capacity change from 0 to 164 [ 345.460105][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.472776][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1895'. [ 345.500492][T11257] tmpfs: Bad value for 'mpol' [ 345.743412][T11268] loop5: detected capacity change from 0 to 512 [ 345.770319][T11268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.770445][T11268] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.801611][T11272] tmpfs: Bad value for 'mpol' [ 345.814860][T11275] loop0: detected capacity change from 0 to 512 [ 345.815651][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 345.815664][ T29] audit: type=1400 audit(1791228971.039:19403): avc: denied { write } for pid=11265 comm="syz.5.1901" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.831338][T11275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 345.831372][T11275] System zones: 1-12 [ 345.831900][T11275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1903: missing EA_INODE flag [ 345.831926][T11275] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 345.837064][T11275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1903: error while reading EA inode 12 err=-117 [ 345.837161][T11275] loop0: lost filesystem error report for type 5 error -117 [ 345.837801][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 345.837820][ C0] EXT4-fs (loop0): initial error at time 1791228971: ext4_xattr_inode_iget:437: inode 12 [ 345.837851][ C0] EXT4-fs (loop0): last error at time 1791228971: ext4_xattr_inode_iget:442 [ 345.838696][T11275] EXT4-fs (loop0): 1 orphan inode deleted [ 345.839138][T11275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.904730][T11278] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1901'. [ 345.915142][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'. [ 345.916724][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.916814][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.976652][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.976762][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.131035][ T29] audit: type=1400 audit(1791228971.359:19404): avc: denied { write } for pid=11273 comm="syz.0.1903" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.166435][ T29] audit: type=1400 audit(1791228971.389:19405): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.177811][ T29] audit: type=1400 audit(1791228971.399:19406): avc: denied { write } for pid=3963 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.178040][ T29] audit: type=1400 audit(1791228971.399:19407): avc: denied { write } for pid=3963 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.178066][ T29] audit: type=1400 audit(1791228971.399:19408): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.178153][ T29] audit: type=1400 audit(1791228971.399:19409): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.178174][ T29] audit: type=1400 audit(1791228971.399:19410): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.178195][ T29] audit: type=1400 audit(1791228971.399:19411): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.181720][ T29] audit: type=1400 audit(1791228971.409:19412): avc: denied { write } for pid=3963 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.366656][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.581160][T11289] loop7: detected capacity change from 0 to 1024 [ 346.584981][T11289] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 346.585475][T11289] JBD2: no valid journal superblock found [ 346.585493][T11289] EXT4-fs (loop7): Could not load journal inode [ 346.704935][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.759391][T11287] loop5: detected capacity change from 0 to 512 [ 346.863124][T11291] loop0: detected capacity change from 0 to 512 [ 346.972124][T11291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 346.972203][T11291] System zones: 1-12 [ 346.972779][T11291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1908: missing EA_INODE flag [ 346.972802][T11291] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 346.973973][T11291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1908: error while reading EA inode 12 err=-117 [ 346.974023][T11291] loop0: lost filesystem error report for type 5 error -117 [ 346.977743][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 346.977761][ C1] EXT4-fs (loop0): initial error at time 1791228972: ext4_xattr_inode_iget:437: inode 12 [ 346.977812][ C1] EXT4-fs (loop0): last error at time 1791228972: ext4_xattr_inode_iget:442 [ 347.057123][T11291] EXT4-fs (loop0): 1 orphan inode deleted [ 347.064134][T11291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.358571][T11287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.359060][T11287] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.697093][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.746866][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop7 [ 348.013481][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1913'. [ 348.225733][T11318] set_capacity_and_notify: 1 callbacks suppressed [ 348.225752][T11318] loop5: detected capacity change from 0 to 512 [ 348.259781][T11318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.259838][T11318] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.295679][T11322] tmpfs: Bad value for 'mpol' [ 348.363923][T11324] loop2: detected capacity change from 0 to 512 [ 348.396771][T11326] loop7: detected capacity change from 0 to 512 [ 348.407867][T11324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.407931][T11324] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.459542][T11326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.459598][T11326] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.493952][T11324] FAULT_INJECTION: forcing a failure. [ 348.493952][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 348.493985][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.2.1917 Not tainted syzkaller #0 PREEMPT(lazy) [ 348.494068][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.494084][T11324] Call Trace: [ 348.494092][T11324] [ 348.494101][T11324] __dump_stack+0x1d/0x30 [ 348.494130][T11324] dump_stack_lvl+0x95/0xd0 [ 348.494164][T11324] dump_stack+0x15/0x1b [ 348.494199][T11324] should_fail_ex+0x262/0x280 [ 348.494227][T11324] should_failslab+0x8c/0xb0 [ 348.494330][T11324] __kvmalloc_node_noprof+0x168/0x5c0 [ 348.494355][T11324] ? ip_set_alloc+0x24/0x30 [ 348.494420][T11324] ? ip_set_alloc+0x24/0x30 [ 348.494491][T11324] ip_set_alloc+0x24/0x30 [ 348.494512][T11324] hash_mac_create+0x253/0x6c0 [ 348.494547][T11324] ? __nla_parse+0x40/0x60 [ 348.494580][T11324] ? __pfx_hash_mac_create+0x10/0x10 [ 348.494652][T11324] ip_set_create+0x3cc/0x970 [ 348.494687][T11324] ? __nla_parse+0x40/0x60 [ 348.494720][T11324] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 348.494785][T11324] netlink_rcv_skb+0x11e/0x220 [ 348.494861][T11324] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 348.494975][T11324] nfnetlink_rcv+0x15f/0x1740 [ 348.495010][T11324] ? kmem_cache_free+0x106/0x3b0 [ 348.495034][T11324] ? __kfree_skb+0x109/0x150 [ 348.495057][T11324] ? nlmon_xmit+0x4f/0x60 [ 348.495144][T11324] ? consume_skb+0x4b/0x130 [ 348.495168][T11324] ? nlmon_xmit+0x4f/0x60 [ 348.495270][T11324] ? dev_hard_start_xmit+0x34e/0x380 [ 348.495298][T11324] ? __dev_queue_xmit+0x1361/0x1ec0 [ 348.495325][T11324] ? __dev_queue_xmit+0x151/0x1ec0 [ 348.495399][T11324] ? ref_tracker_free+0x380/0x3f0 [ 348.495429][T11324] ? skb_clone+0x151/0x1f0 [ 348.495479][T11324] ? __netlink_deliver_tap+0x4e6/0x510 [ 348.495506][T11324] netlink_unicast+0x5a9/0x680 [ 348.495617][T11324] netlink_sendmsg+0x5be/0x6f0 [ 348.495659][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.495685][T11324] ____sys_sendmsg+0x532/0x580 [ 348.495738][T11324] ___sys_sendmsg+0x195/0x1e0 [ 348.495776][T11324] __x64_sys_sendmsg+0xd4/0x160 [ 348.495927][T11324] x64_sys_call+0x22ab/0x2550 [ 348.495951][T11324] do_syscall_64+0x112/0x360 [ 348.495978][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.496005][T11324] RIP: 0033:0x7f1e0031e199 [ 348.496095][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.496111][T11324] RSP: 002b:00007f1dfed77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.496130][T11324] RAX: ffffffffffffffda RBX: 00007f1e005a5fa0 RCX: 00007f1e0031e199 [ 348.496198][T11324] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 348.496214][T11324] RBP: 00007f1e003b50b8 R08: 0000000000000000 R09: 0000000000000000 [ 348.496229][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.496245][T11324] R13: 00007f1e005a6038 R14: 00007f1e005a5fa0 R15: 00007ffeefbf6208 [ 348.496265][T11324] [ 348.532117][T11324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1917'. [ 348.710521][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.726821][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.848810][T11334] loop7: detected capacity change from 0 to 164 [ 348.887137][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.016635][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.043684][T11342] loop0: detected capacity change from 0 to 128 [ 349.055712][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop0 [ 349.095722][ T338] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.189421][T11356] loop7: detected capacity change from 0 to 512 [ 349.195840][T11359] tmpfs: Bad value for 'mpol' [ 349.215863][T11356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.215943][T11356] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.264005][T11364] loop5: detected capacity change from 0 to 256 [ 349.274538][T11364] vfat: Unknown parameter 'nnonumtail' [ 349.327894][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.339847][T11364] FAULT_INJECTION: forcing a failure. [ 349.339847][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 349.339924][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.5.1930 Not tainted syzkaller #0 PREEMPT(lazy) [ 349.339954][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.339970][T11364] Call Trace: [ 349.339976][T11364] [ 349.339984][T11364] __dump_stack+0x1d/0x30 [ 349.340015][T11364] dump_stack_lvl+0x95/0xd0 [ 349.340078][T11364] dump_stack+0x15/0x1b [ 349.340103][T11364] should_fail_ex+0x262/0x280 [ 349.340147][T11364] should_failslab+0x8c/0xb0 [ 349.340186][T11364] __kmalloc_node_noprof+0xdb/0x500 [ 349.340224][T11364] ? mempool_init_node+0xb3/0x260 [ 349.340315][T11364] ? mempool_init_node+0xb3/0x260 [ 349.340376][T11364] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 349.340476][T11364] mempool_init_node+0xb3/0x260 [ 349.340511][T11364] ? __rcu_read_unlock+0x4e/0x70 [ 349.340559][T11364] ? __pfx_mempool_free_slab+0x10/0x10 [ 349.340589][T11364] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 349.340620][T11364] mempool_init_noprof+0x3a/0x50 [ 349.340671][T11364] bioset_init+0x177/0x480 [ 349.340703][T11364] ? __pfx_no_op+0x10/0x10 [ 349.340729][T11364] ? percpu_ref_init+0x1dd/0x250 [ 349.340754][T11364] mddev_init+0xc6/0x420 [ 349.340823][T11364] md_alloc+0x99/0xa00 [ 349.340855][T11364] md_alloc_and_put+0x18/0x170 [ 349.340882][T11364] add_named_array+0x1cd/0x2a0 [ 349.340953][T11364] param_attr_store+0x149/0x1d0 [ 349.340985][T11364] ? __pfx_param_attr_store+0x10/0x10 [ 349.341024][T11364] module_attr_store+0x4c/0x70 [ 349.341162][T11364] ? __pfx_module_attr_store+0x10/0x10 [ 349.341199][T11364] sysfs_kf_write+0xfe/0x120 [ 349.341235][T11364] ? __pfx_sysfs_kf_write+0x10/0x10 [ 349.341298][T11364] kernfs_fop_write_iter+0x1d2/0x2e0 [ 349.341327][T11364] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 349.341410][T11364] vfs_write+0x57f/0x9a0 [ 349.341450][T11364] ksys_write+0xdc/0x1a0 [ 349.341528][T11364] __x64_sys_write+0x40/0x50 [ 349.341643][T11364] x64_sys_call+0x154e/0x2550 [ 349.341668][T11364] do_syscall_64+0x112/0x360 [ 349.341726][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.341754][T11364] RIP: 0033:0x7f5dee98e199 [ 349.341773][T11364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.341793][T11364] RSP: 002b:00007f5ded3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.341865][T11364] RAX: ffffffffffffffda RBX: 00007f5deec15fa0 RCX: 00007f5dee98e199 [ 349.341884][T11364] RDX: 0000000000000003 RSI: 0000200000000280 RDI: 0000000000000007 [ 349.341940][T11364] RBP: 00007f5deea250b8 R08: 0000000000000000 R09: 0000000000000000 [ 349.341956][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.342033][T11364] R13: 00007f5deec16038 R14: 00007f5deec15fa0 R15: 00007ffe242a4b58 [ 349.342103][T11364] [ 349.342281][T11364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.361103][ T3539] net_ratelimit: 349 callbacks suppressed [ 349.361117][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.404992][T11366] loop7: detected capacity change from 0 to 512 [ 349.416245][T11366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 349.416288][T11366] System zones: 1-12 [ 349.417988][T11366] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1931: missing EA_INODE flag [ 349.418015][T11366] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 349.419874][T11366] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1931: error while reading EA inode 12 err=-117 [ 349.419901][T11366] loop7: lost filesystem error report for type 5 error -117 [ 349.420294][T11366] EXT4-fs (loop7): 1 orphan inode deleted [ 349.420712][T11366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.519156][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.525298][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.525489][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.797488][T11373] loop5: detected capacity change from 0 to 512 [ 349.823681][T11373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.823815][T11373] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.957633][T11385] loop6: detected capacity change from 0 to 164 [ 350.052451][T11387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.052574][T11387] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.252740][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.429967][T11401] tmpfs: Bad value for 'mpol' [ 350.484175][T11403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.484230][T11403] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.548284][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.568514][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.568622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.568764][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.587321][T11411] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 350.591569][T11411] JBD2: no valid journal superblock found [ 350.591593][T11411] EXT4-fs (loop5): Could not load journal inode [ 350.729776][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.788912][T11414] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 350.791025][T11414] JBD2: no valid journal superblock found [ 350.791055][T11414] EXT4-fs (loop6): Could not load journal inode [ 350.826364][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 350.826378][ T29] audit: type=1400 audit(1791228976.049:19696): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.839447][T11417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.839598][T11417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.839726][T11417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.043444][ T29] audit: type=1400 audit(1791228976.269:19697): avc: denied { write } for pid=3298 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.045914][ T29] audit: type=1400 audit(1791228976.269:19698): avc: denied { write } for pid=3298 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.095086][ T29] audit: type=1400 audit(1791228976.319:19699): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.119796][ T3957] Bluetooth: hci0: command 0x1003 tx timeout [ 351.119982][ T3958] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.140019][T11416] team0: Port device veth0_to_batadv added [ 351.153295][ T29] audit: type=1400 audit(1791228976.379:19700): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.180835][ T29] audit: type=1400 audit(1791228976.409:19701): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.206814][ T29] audit: type=1400 audit(1791228976.429:19702): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.230861][ T29] audit: type=1400 audit(1791228976.459:19703): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.233777][ T29] audit: type=1400 audit(1791228976.459:19704): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.236256][ T29] audit: type=1400 audit(1791228976.459:19705): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.356752][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.397929][T11422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 351.397961][T11422] System zones: 1-12 [ 351.398971][T11422] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1948: missing EA_INODE flag [ 351.398996][T11422] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 351.399092][T11422] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1948: error while reading EA inode 12 err=-117 [ 351.399209][T11422] loop0: lost filesystem error report for type 5 error -117 [ 351.399328][T11422] EXT4-fs (loop0): 1 orphan inode deleted [ 351.399717][T11422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.063708][T11437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 352.067188][T11437] JBD2: no valid journal superblock found [ 352.067202][T11437] EXT4-fs (loop2): Could not load journal inode [ 352.194881][T11442] tmpfs: Bad value for 'mpol' [ 352.324827][T11446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.324889][T11446] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.353095][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.473588][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.487802][T11458] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 352.492549][T11456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.492608][T11456] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.492984][T11458] JBD2: no valid journal superblock found [ 352.492994][T11458] EXT4-fs (loop5): Could not load journal inode [ 353.335823][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.426810][T11475] set_capacity_and_notify: 12 callbacks suppressed [ 353.426828][T11475] loop6: detected capacity change from 0 to 512 [ 353.459364][T11475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.459449][T11475] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.806192][T11484] loop5: detected capacity change from 0 to 164 [ 353.995708][T11489] loop7: detected capacity change from 0 to 512 [ 354.066028][T11489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.072221][T11489] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.202371][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.222980][T11507] loop0: detected capacity change from 0 to 512 [ 354.251302][T11507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.251400][T11507] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.426661][T11509] loop6: detected capacity change from 0 to 164 [ 354.591382][ T8481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.644811][ T70] net_ratelimit: 838 callbacks suppressed [ 354.644826][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.644938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.720789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.720919][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.897272][T11536] loop2: detected capacity change from 0 to 1024 [ 354.907226][T11536] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 354.907956][T11536] JBD2: no valid journal superblock found [ 354.907966][T11536] EXT4-fs (loop2): Could not load journal inode [ 355.073786][T11518] loop5: detected capacity change from 0 to 256 [ 355.165217][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.174535][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.174748][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.174980][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.180433][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.180594][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.181144][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.209386][T11544] loop6: detected capacity change from 0 to 164 [ 355.609327][T11548] loop7: detected capacity change from 0 to 128 [ 355.624409][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop7 [ 355.649192][T11555] tmpfs: Bad value for 'mpol' [ 355.694163][T11556] loop0: detected capacity change from 0 to 512 [ 355.799352][T11556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.799445][T11556] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.910535][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 355.910552][ T29] audit: type=1326 audit(1791228981.139:20142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.911058][T11571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.911119][T11571] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.911430][ T29] audit: type=1326 audit(1791228981.139:20143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.911461][ T29] audit: type=1326 audit(1791228981.139:20144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.911582][ T29] audit: type=1326 audit(1791228981.139:20145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.914301][ T29] audit: type=1326 audit(1791228981.139:20146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.915069][ T29] audit: type=1326 audit(1791228981.139:20148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.915123][ T29] audit: type=1326 audit(1791228981.139:20149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.915301][ T29] audit: type=1400 audit(1791228981.139:20150): avc: denied { write } for pid=11570 comm="syz.6.1991" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.916170][ T29] audit: type=1326 audit(1791228981.139:20147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 355.916949][ T29] audit: type=1326 audit(1791228981.139:20151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.0.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f030dbbe199 code=0x7ffc0000 [ 356.013067][T11571] FAULT_INJECTION: forcing a failure. [ 356.013067][T11571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 356.013102][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.6.1991 Not tainted syzkaller #0 PREEMPT(lazy) [ 356.013130][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.013144][T11571] Call Trace: [ 356.013152][T11571] [ 356.013211][T11571] __dump_stack+0x1d/0x30 [ 356.013236][T11571] dump_stack_lvl+0x95/0xd0 [ 356.013257][T11571] dump_stack+0x15/0x1b [ 356.013325][T11571] should_fail_ex+0x262/0x280 [ 356.013361][T11571] should_fail+0xb/0x20 [ 356.013387][T11571] get_futex_key+0x12d/0xb10 [ 356.013449][T11571] futex_wake+0x89/0x400 [ 356.013474][T11571] do_futex+0x3f8/0x460 [ 356.013584][T11571] __se_sys_futex+0x2f6/0x370 [ 356.013619][T11571] __x64_sys_futex+0x78/0x90 [ 356.013651][T11571] x64_sys_call+0x22e2/0x2550 [ 356.013738][T11571] do_syscall_64+0x112/0x360 [ 356.013766][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.013791][T11571] RIP: 0033:0x7f2c7ee0e199 [ 356.013850][T11571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.013871][T11571] RSP: 002b:00007f2c7d8670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.013894][T11571] RAX: ffffffffffffffda RBX: 00007f2c7f095fa8 RCX: 00007f2c7ee0e199 [ 356.013916][T11571] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c7f095fac [ 356.013931][T11571] RBP: 00007f2c7f095fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 356.013947][T11571] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 356.013967][T11571] R13: 00007f2c7f096038 R14: 00007ffdf87096a0 R15: 00007ffdf8709788 [ 356.014053][T11571] [ 356.443598][ T5271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.497873][T11595] tmpfs: Bad value for 'mpol' [ 356.547488][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.586584][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2000'. [ 356.589893][T11597] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 356.592769][T11597] JBD2: no valid journal superblock found [ 356.592781][T11597] EXT4-fs (loop6): Could not load journal inode [ 356.631525][T11601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 356.631553][T11601] System zones: 1-12 [ 356.632053][T11601] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1999: missing EA_INODE flag [ 356.632093][T11601] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 356.632750][T11601] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1999: error while reading EA inode 12 err=-117 [ 356.632777][T11601] loop0: lost filesystem error report for type 5 error -117 [ 356.637765][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 356.637786][ C0] EXT4-fs (loop0): initial error at time 1791228981: ext4_xattr_inode_iget:437: inode 12 [ 356.637835][ C0] EXT4-fs (loop0): last error at time 1791228981: ext4_xattr_inode_iget:442 [ 356.728866][T11601] EXT4-fs (loop0): 1 orphan inode deleted [ 356.729333][T11601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.194663][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 357.195894][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.196041][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.225334][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.225412][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.652906][T11619] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 357.653577][T11619] JBD2: no valid journal superblock found [ 357.653588][T11619] EXT4-fs (loop6): Could not load journal inode [ 357.785789][T11614] FAULT_INJECTION: forcing a failure. [ 357.785789][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 357.787497][T11614] CPU: 1 UID: 0 PID: 11614 Comm: syz.2.2001 Not tainted syzkaller #0 PREEMPT(lazy) [ 357.787527][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.787596][T11614] Call Trace: [ 357.787603][T11614] [ 357.787612][T11614] __dump_stack+0x1d/0x30 [ 357.787643][T11614] dump_stack_lvl+0x95/0xd0 [ 357.787671][T11614] dump_stack+0x15/0x1b [ 357.787720][T11614] should_fail_ex+0x262/0x280 [ 357.787746][T11614] ? __kernfs_new_node+0x70/0x440 [ 357.787818][T11614] should_failslab+0x8c/0xb0 [ 357.787854][T11614] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 357.787888][T11614] ? __kernfs_new_node+0x70/0x440 [ 357.787914][T11614] __kernfs_new_node+0x70/0x440 [ 357.787946][T11614] ? kernfs_activate_one+0x10c/0x140 [ 357.787976][T11614] ? __rcu_read_unlock+0x4e/0x70 [ 357.788090][T11614] ? up_write+0x19/0x60 [ 357.788161][T11614] kernfs_new_node+0xcf/0xf0 [ 357.788192][T11614] __kernfs_create_file+0x4b/0x180 [ 357.788260][T11614] ? __pfx_kobj_attr_show+0x10/0x10 [ 357.788313][T11614] ? __pfx_kobj_attr_store+0x10/0x10 [ 357.788349][T11614] sysfs_add_file_mode_ns+0x132/0x1b0 [ 357.788438][T11614] internal_create_group+0x43e/0x9e0 [ 357.788517][T11614] ? kernfs_create_dir_ns+0x158/0x170 [ 357.788549][T11614] sysfs_create_groups+0x3f/0xf0 [ 357.788573][T11614] kobject_add_internal+0x49d/0x770 [ 357.788629][T11614] kobject_init_and_add+0x13c/0x1e0 [ 357.788669][T11614] ? should_failslab+0x8c/0xb0 [ 357.788705][T11614] rpc_sysfs_xprt_switch_setup+0x10f/0x1f0 [ 357.788737][T11614] xprt_switch_alloc+0x14f/0x2d0 [ 357.788830][T11614] rpc_create_xprt+0x9f/0x620 [ 357.788860][T11614] ? kstrdup+0x88/0xd0 [ 357.788947][T11614] rpc_create+0x494/0x570 [ 357.788993][T11614] nfs_create_rpc_client+0x4d4/0x590 [ 357.789069][T11614] nfs4_alloc_client+0x4aa/0x6e0 [ 357.789128][T11614] ? ktime_get+0x212/0x240 [ 357.789161][T11614] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 357.789215][T11614] nfs_get_client+0x829/0xb80 [ 357.789285][T11614] ? nfs4_set_client+0xb0/0x320 [ 357.789313][T11614] nfs4_set_client+0x28a/0x320 [ 357.789351][T11614] nfs4_create_server+0x373/0x960 [ 357.789383][T11614] nfs4_try_get_tree+0x29/0xc0 [ 357.789433][T11614] nfs_get_tree+0xb81/0xc60 [ 357.789457][T11614] vfs_get_tree+0x57/0x1d0 [ 357.789487][T11614] do_new_mount+0x288/0x8d0 [ 357.789534][T11614] path_mount+0x4ad/0xb90 [ 357.789560][T11614] __se_sys_mount+0x28c/0x2e0 [ 357.789622][T11614] __x64_sys_mount+0x67/0x80 [ 357.789642][T11614] x64_sys_call+0xc3b/0x2550 [ 357.789670][T11614] do_syscall_64+0x112/0x360 [ 357.789756][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.789828][T11614] RIP: 0033:0x7f1e0031e199 [ 357.789845][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.789887][T11614] RSP: 002b:00007f1dfed77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.789909][T11614] RAX: ffffffffffffffda RBX: 00007f1e005a5fa0 RCX: 00007f1e0031e199 [ 357.789925][T11614] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 357.789942][T11614] RBP: 00007f1e003b50b8 R08: 0000200000000140 R09: 0000000000000000 [ 357.789957][T11614] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 357.789972][T11614] R13: 00007f1e005a6038 R14: 00007f1e005a5fa0 R15: 00007ffeefbf6208 [ 357.790040][T11614] [ 357.792250][T11614] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 358.099531][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.200099][T11634] tmpfs: Bad value for 'mpol' [ 358.423601][T11640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.423660][T11640] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.544024][T11645] set_capacity_and_notify: 6 callbacks suppressed [ 358.544043][T11645] loop0: detected capacity change from 0 to 128 [ 358.569920][T11645] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 358.573001][T11645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.579602][T11645] ext2 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.624602][T11639] loop2: detected capacity change from 0 to 512 [ 358.637174][T11642] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 358.637203][T11642] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 358.697286][T11639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.718528][T11639] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.819667][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.989003][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'. [ 359.064074][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.064228][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.112059][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.112435][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.373600][T11663] loop0: detected capacity change from 0 to 512 [ 359.453051][T11663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.453122][T11663] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.481951][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.599681][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.647111][T11673] tmpfs: Bad value for 'mpol' [ 359.678202][ T3387] net_ratelimit: 726 callbacks suppressed [ 359.678228][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.836022][T11675] loop5: detected capacity change from 0 to 164 [ 359.936207][T11685] loop2: detected capacity change from 0 to 512 [ 359.944797][T11685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 359.944827][T11685] System zones: 1-12 [ 359.945452][T11685] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.2024: missing EA_INODE flag [ 359.945477][T11685] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.946169][T11685] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2024: error while reading EA inode 12 err=-117 [ 359.946199][T11685] loop2: lost filesystem error report for type 5 error -117 [ 359.947470][T11685] EXT4-fs (loop2): 1 orphan inode deleted [ 360.648026][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.648250][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.798724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.109204][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.109368][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.109460][T11692] ================================================================== [ 361.109487][T11692] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 361.109522][T11692] [ 361.109529][T11692] write to 0xffffffff86e762c8 of 8 bytes by task 8414 on cpu 0: [ 361.109546][T11692] data_alloc+0x308/0x380 [ 361.109573][T11692] prb_reserve+0x8e3/0xaf0 [ 361.109601][T11692] vprintk_store+0x54e/0x910 [ 361.109622][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.109629][T11692] vprintk_emit+0x1a4/0x610 [ 361.109660][T11692] vprintk_default+0x26/0x30 [ 361.109690][T11692] vprintk+0x1d/0x30 [ 361.109711][T11692] _printk+0x79/0xa0 [ 361.109738][T11692] gred_dequeue+0x325/0x350 [ 361.109760][T11692] __qdisc_run+0x18b/0xc60 [ 361.109785][T11692] __dev_queue_xmit+0x11e0/0x1ec0 [ 361.109812][T11692] ip6_finish_output2+0x89c/0xdb0 [ 361.109835][T11692] ip6_finish_output+0x1e1/0x410 [ 361.109868][T11692] ip6_output+0x10a/0x280 [ 361.109895][T11692] ip6_local_out+0x77/0xd0 [ 361.109914][T11692] udp_tunnel6_xmit_skb+0x424/0x760 [ 361.109938][T11692] send6+0x36d/0x490 [ 361.109956][T11692] wg_socket_send_skb_to_peer+0xc0/0x130 [ 361.109979][T11692] wg_packet_tx_worker+0x12d/0x340 [ 361.110002][T11692] process_scheduled_works+0x56a/0xa50 [ 361.110036][T11692] worker_thread+0x569/0x750 [ 361.110069][T11692] kthread+0x223/0x270 [ 361.110091][T11692] ret_from_fork+0x146/0x330 [ 361.110122][T11692] ret_from_fork_asm+0x1a/0x30 [ 361.110146][T11692] [ 361.110151][T11692] read to 0xffffffff86e762c8 of 8 bytes by task 11692 on cpu 1: [ 361.110167][T11692] prb_reserve+0x21a/0xaf0 [ 361.110195][T11692] vprintk_store+0x54e/0x910 [ 361.110226][T11692] vprintk_emit+0x1a4/0x610 [ 361.110256][T11692] vprintk_default+0x26/0x30 [ 361.110289][T11692] vprintk+0x1d/0x30 [ 361.110310][T11692] _printk+0x79/0xa0 [ 361.110326][T11692] set_capacity_and_notify+0x1d5/0x230 [ 361.110346][T11692] loop_set_size+0x2e/0x70 [ 361.110368][T11692] loop_configure+0x826/0x9c0 [ 361.110390][T11692] lo_ioctl+0x1e3/0x1430 [ 361.110410][T11692] blkdev_ioctl+0x387/0x460 [ 361.110429][T11692] __se_sys_ioctl+0xce/0x140 [ 361.110463][T11692] __x64_sys_ioctl+0x43/0x50 [ 361.110497][T11692] x64_sys_call+0x239d/0x2550 [ 361.110525][T11692] do_syscall_64+0x112/0x360 [ 361.110551][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.110575][T11692] [ 361.110579][T11692] value changed: 0xffffffffffffc5a8 -> 0x0000000000099418 [ 361.110592][T11692] [ 361.110597][T11692] Reported by Kernel Concurrency Sanitizer on: [ 361.110609][T11692] CPU: 1 UID: 0 PID: 11692 Comm: syz.6.2025 Not tainted syzkaller #0 PREEMPT(lazy) [ 361.110635][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.110647][T11692] ================================================================== [ 361.109343][T11692] loop6: detected capacity change from 0 to 164 [ 361.593332][ T5378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.597899][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.677836][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.736502][T11696] loop0: detected capacity change from 0 to 164 [ 364.797832][ T24] net_ratelimit: 12 callbacks suppressed [ 364.797850][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.797997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.957831][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.197926][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.838636][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.838749][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.007870][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.877852][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.877931][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.047837][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.997825][ T1009] net_ratelimit: 9 callbacks suppressed [ 369.997844][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.997930][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.157828][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.237841][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.237901][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.717803][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.957906][ T3992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.037889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.038112][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog