last executing test programs: 3m16.251036973s ago: executing program 2 (id=283): perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x9, 0x2, 0x8, 0x7, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x28b6, 0x8, 0x9, 0x6, 0xffffffffffff4437, 0x145d, 0x1, 0x0, 0x9, 0x0, 0x102}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x9) 3m16.144307376s ago: executing program 2 (id=284): socket$igmp6(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m15.832902246s ago: executing program 2 (id=295): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 3m14.857893527s ago: executing program 2 (id=300): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x4, 0x7, 0x1, 0x4, 0x0, 0x0, 0x1008, 0x14, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x6000, 0x7, 0x5, 0x5, 0x8, 0x20000000, 0x4e7, 0x0, 0xffffffff, 0x0, 0x573}, r0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 3m13.540342738s ago: executing program 2 (id=304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 3m13.307887376s ago: executing program 2 (id=310): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m13.242849218s ago: executing program 32 (id=310): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.701333757s ago: executing program 4 (id=1214): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f00000018c0)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x20, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000008c0)='./file1\x00', 0x44000160) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getdents64(r2, 0x0, 0x0) 7.531351633s ago: executing program 4 (id=1216): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) fstat(r1, &(0x7f00000003c0)) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19e4ff0004"], 0x50) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7.283997241s ago: executing program 4 (id=1217): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000000000009504000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="001000000000000002004e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000002004e247f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e240a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20faff14bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14142000"/1168], 0x490) r1 = fcntl$dupfd(r0, 0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0xfffffd44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) pipe(0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="210329bd7000fbdbdf0e0100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4000) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01040700070005000200635a0b420020060000000000000000000000000000000001ff0100000000f9a722000000000000000000010000001c00000000000000000000000100004e2400004e220000000100"], 0x52) 6.456167257s ago: executing program 0 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x5, 0x0, 0x0, 0x9, 0xf60eb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x15, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, r0, 0x24000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x1}}, 0x26) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb9", 0xf}, {0x0}], 0x2}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@nogrpid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") 6.429626057s ago: executing program 3 (id=1222): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c00000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38fcd41507982019d120c39f4f3463784a1e1c1745a3d5c54b10144a895a1"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) 6.297390962s ago: executing program 3 (id=1223): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x25}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) 5.525423756s ago: executing program 5 (id=1224): setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000480)={0x0, 0x2}, 0x8) 5.468324228s ago: executing program 5 (id=1225): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.313387623s ago: executing program 5 (id=1226): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002d40)={&(0x7f0000002a40)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002c80)}, 0x8040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYBLOB="9e4d65f92b89aabee0c6d4c553b5753e35dbbbab7a90e0f74f7f33a6ff628f507cb5313959ef522b7d263da7f8713282d2680b72e062a626d51b483fb99a58f614c0009cbfa79490377ea3c72e7eac1d3e0b0a93c5ea7e0ef44625c2cf14600d4a98"], 0x20) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r2, r3, 0x2f, 0x18, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x50000, &(0x7f0000000000)={[{@data_err_abort}, {@grpquota}, {@jqfmt_vfsv1}, {@lazytime}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0xfe, 0x477, &(0x7f0000001dc0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r6, 0x4, 0xf, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40080d0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4c0000002000000}, 0x0, 0xffffffffffffffff, r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 5.093962279s ago: executing program 4 (id=1227): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100600, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0xc02, 0x3, 0x0, 0x1, 0xa99, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x2800600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 4.054614022s ago: executing program 4 (id=1228): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100600, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0xc02, 0x3, 0x0, 0x1, 0xa99, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x2800600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 3.684123214s ago: executing program 3 (id=1229): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x25}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) 3.51103954s ago: executing program 5 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) cachestat(r4, &(0x7f0000000340)={0x1, 0x401}, &(0x7f0000000380), 0x0) unshare(0x2c020400) r6 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r6, &(0x7f0000000040)={0x0, ""/6}, 0xe, 0x0, 0x3000) r7 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@quota}]}, 0x1, 0x50d, &(0x7f0000000d40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0xee00, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 3.15877132s ago: executing program 0 (id=1231): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x7fff, 0x1, 0x0, 'queue1\x00', 0xe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.848203502s ago: executing program 1 (id=1232): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = fsopen(&(0x7f00000002c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xf082668afac35163}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf25050000000500120073000000050012000400000008000a0004000000080009000000000005000400090000000c00100000800000000000000600030004000000"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000d, 0x8000000000000000, 0x0, 0xb, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100}, 0x0, 0xfffffffffffffffd, r1, 0x2) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}, 0x1c) listen(r5, 0x100101) r6 = accept4(r5, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x7f, 0x7, 0x200, 0x6, 0xa, 0x400000, 0x8, 0x9}, &(0x7f00000000c0)=0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c080}, 0xd010) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000706030000000000000000000200000805000100070000000900027a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r1) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) 1.151090843s ago: executing program 0 (id=1233): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.079560656s ago: executing program 0 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1bf8ff00000000bfa100000000000007010000f8ffffffb70200fb07000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e2202000003080000000000003800000001000000000000000000000000c129f2fb9d44d3fa", @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) 838.239643ms ago: executing program 1 (id=1235): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, 0x0, 0x0) 791.463665ms ago: executing program 1 (id=1236): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 713.250537ms ago: executing program 1 (id=1237): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x8094) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) openat$nvram(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capget(&(0x7f0000000040)={0x19980330}, 0x0) 467.879175ms ago: executing program 4 (id=1238): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x9, 0x800, 0x7, 0xfffffffffffffff0, 0x7, 0x8, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000340)={&(0x7f00000001c0)={[0x4]}, 0x8}) 451.811865ms ago: executing program 1 (id=1239): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x2, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x2a7209fb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f00000001c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400f600"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x40000, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x28, 0x38, 0x107, 0x70bd2c, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0x11, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xee00}, @generic="45e5ec1e99"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) 218.453252ms ago: executing program 5 (id=1240): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x7fff, 0x1, 0x0, 'queue1\x00', 0xe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x440, 0xd8, {}, 0x0, 0x0, 0x4b}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, 0x0, &(0x7f0000000000)) 151.224255ms ago: executing program 0 (id=1241): r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 135.006815ms ago: executing program 3 (id=1242): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x7fff, 0x1, 0x0, 'queue1\x00', 0xe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x440, 0xd8, {}, 0x0, 0x0, 0x4b}) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x6, 0x0, &(0x7f0000000000)) 88.115047ms ago: executing program 0 (id=1243): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) 87.794007ms ago: executing program 3 (id=1244): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 54.707018ms ago: executing program 5 (id=1245): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 53.954268ms ago: executing program 1 (id=1246): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, 0x0, 0x0) 0s ago: executing program 3 (id=1247): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): T28] audit: type=1326 audit(1781721447.238:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.4.846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 211.913939][ T28] audit: type=1326 audit(1781721447.238:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.4.846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 212.300506][ T6424] loop3: detected capacity change from 0 to 1024 [ 212.894466][ T28] audit: type=1326 audit(1781721447.238:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.4.846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 212.920223][ T28] audit: type=1326 audit(1781721447.248:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.4.846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 213.007660][ T28] audit: type=1326 audit(1781721447.248:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.4.846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 214.169865][ T6453] loop5: detected capacity change from 0 to 1024 [ 214.422283][ T6463] loop4: detected capacity change from 0 to 512 [ 214.984685][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 214.984700][ T28] audit: type=1326 audit(1781721452.318:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0b286892ac code=0x7ffc0000 [ 215.520695][ T28] audit: type=1326 audit(1781721452.348:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b2868930e code=0x7ffc0000 [ 215.970922][ T28] audit: type=1326 audit(1781721452.348:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b286ccaeb code=0x7ffc0000 [ 215.997343][ T28] audit: type=1326 audit(1781721452.348:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 216.515978][ T28] audit: type=1326 audit(1781721452.348:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 216.547775][ T28] audit: type=1326 audit(1781721452.348:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 216.983204][ T28] audit: type=1326 audit(1781721452.348:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 217.009071][ T28] audit: type=1326 audit(1781721452.348:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 217.067186][ T28] audit: type=1326 audit(1781721452.608:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 217.326852][ T28] audit: type=1326 audit(1781721452.608:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 218.786807][ T6487] FAULT_INJECTION: forcing a failure. [ 218.786807][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 218.939196][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.870 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.939257][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.939274][ T6487] Call Trace: [ 218.939283][ T6487] [ 218.939294][ T6487] __dump_stack+0x1d/0x30 [ 218.939373][ T6487] dump_stack_lvl+0x95/0xd0 [ 218.939394][ T6487] dump_stack+0x15/0x1b [ 218.939416][ T6487] should_fail_ex+0x25e/0x270 [ 218.939445][ T6487] should_failslab+0x8c/0xb0 [ 218.939535][ T6487] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 218.939571][ T6487] ? __alloc_skb+0x2db/0x6f0 [ 218.939597][ T6487] ? tcp_current_mss+0x302/0x3e0 [ 218.939629][ T6487] __alloc_skb+0x2db/0x6f0 [ 218.939706][ T6487] tcp_stream_alloc_skb+0x30/0x320 [ 218.939744][ T6487] tcp_sendmsg_locked+0xd2f/0x2c70 [ 218.939782][ T6487] ? __pfx_tcp_sendmsg+0x10/0x10 [ 218.939809][ T6487] ? __pfx_inet6_sendmsg+0x10/0x10 [ 218.939850][ T6487] tcp_sendmsg+0x2f/0x50 [ 218.939867][ T6487] inet6_sendmsg+0x76/0xd0 [ 218.939914][ T6487] sock_write_iter+0x21c/0x2f0 [ 218.939962][ T6487] ? __pfx_sock_write_iter+0x10/0x10 [ 218.939997][ T6487] vfs_write+0x57d/0x990 [ 218.940099][ T6487] ksys_write+0xdc/0x1a0 [ 218.940207][ T6487] __x64_sys_write+0x40/0x50 [ 218.940237][ T6487] x64_sys_call+0x27e1/0x3020 [ 218.940306][ T6487] do_syscall_64+0x136/0x3c0 [ 218.940342][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.940381][ T6487] RIP: 0033:0x7f533269ce59 [ 218.940472][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.940546][ T6487] RSP: 002b:00007f53310d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.940571][ T6487] RAX: ffffffffffffffda RBX: 00007f5332916090 RCX: 00007f533269ce59 [ 218.940588][ T6487] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000004 [ 218.940601][ T6487] RBP: 00007f53310d6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.940618][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.940633][ T6487] R13: 00007f5332916128 R14: 00007f5332916090 R15: 00007ffd5b84c218 [ 218.940694][ T6487] [ 219.260766][ T6492] loop1: detected capacity change from 0 to 1991 [ 220.857610][ T6495] loop3: detected capacity change from 0 to 1024 [ 221.104815][ T6506] FAULT_INJECTION: forcing a failure. [ 221.104815][ T6506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.118569][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.118595][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.118610][ T6506] Call Trace: [ 221.118620][ T6506] [ 221.118631][ T6506] __dump_stack+0x1d/0x30 [ 221.118671][ T6506] dump_stack_lvl+0x95/0xd0 [ 221.118691][ T6506] dump_stack+0x15/0x1b [ 221.118709][ T6506] should_fail_ex+0x25e/0x270 [ 221.118773][ T6506] should_fail_alloc_page+0xf2/0x100 [ 221.118829][ T6506] __alloc_frozen_pages_noprof+0x108/0x350 [ 221.118864][ T6506] alloc_pages_mpol+0xa9/0x1d0 [ 221.118893][ T6506] alloc_pages_noprof+0x8f/0x140 [ 221.118916][ T6506] __pud_alloc+0x47/0x460 [ 221.118997][ T6506] handle_mm_fault+0x1e22/0x2da0 [ 221.119096][ T6506] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 221.119142][ T6506] do_user_addr_fault+0x402/0x1060 [ 221.119182][ T6506] ? kstrtouint_from_user+0xa8/0xf0 [ 221.119313][ T6506] exc_page_fault+0x62/0xa0 [ 221.119339][ T6506] asm_exc_page_fault+0x26/0x30 [ 221.119361][ T6506] RIP: 0010:__get_user_4+0x14/0x30 [ 221.119392][ T6506] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 c0 12 02 00 90 90 90 90 90 90 90 90 90 90 [ 221.119411][ T6506] RSP: 0018:ffffc9001023fe48 EFLAGS: 00050283 [ 221.119459][ T6506] RAX: 0000200000000f80 RBX: ffffc9001023ff58 RCX: 0000000000000000 [ 221.119472][ T6506] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffffc9001023fe88 [ 221.119489][ T6506] RBP: ffffc9001023fed0 R08: ffff888103802d30 R09: 0000000000000000 [ 221.119508][ T6506] R10: ffffc9001023fe70 R11: 0001c9001023fe70 R12: ffff888103802200 [ 221.119527][ T6506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000200000000f80 [ 221.119585][ T6506] __se_sys_capget+0x7f/0x440 [ 221.119675][ T6506] __x64_sys_capget+0x31/0x40 [ 221.119729][ T6506] x64_sys_call+0x2bb4/0x3020 [ 221.119753][ T6506] do_syscall_64+0x136/0x3c0 [ 221.119791][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.119814][ T6506] RIP: 0033:0x7f533269ce59 [ 221.119883][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.119924][ T6506] RSP: 002b:00007f53310f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 221.119949][ T6506] RAX: ffffffffffffffda RBX: 00007f5332915fa0 RCX: 00007f533269ce59 [ 221.119967][ T6506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000f80 [ 221.119980][ T6506] RBP: 00007f53310f7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.119992][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.120067][ T6506] R13: 00007f5332916038 R14: 00007f5332915fa0 R15: 00007ffd5b84c218 [ 221.120157][ T6506] [ 222.294849][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 222.294940][ T28] audit: type=1400 audit(1781721459.608:4978): avc: denied { create } for pid=6514 comm="syz.5.881" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.375606][ T28] audit: type=1326 audit(1781721459.688:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.401063][ T28] audit: type=1326 audit(1781721459.688:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.442868][ T28] audit: type=1326 audit(1781721459.688:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.496432][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 222.513025][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 222.536292][ T4456] audit: audit_backlog=66 > audit_backlog_limit=64 [ 222.550663][ T28] audit: type=1326 audit(1781721459.688:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.554729][ T4456] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 222.576164][ T28] audit: type=1326 audit(1781721459.688:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.609282][ T28] audit: type=1326 audit(1781721459.688:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.0.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b286cce59 code=0x7ffc0000 [ 222.634786][ T4456] audit: backlog limit exceeded [ 222.646829][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 222.664307][ T6528] FAULT_INJECTION: forcing a failure. [ 222.664307][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.688275][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.5.886 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.688309][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.688326][ T6528] Call Trace: [ 222.688334][ T6528] [ 222.688343][ T6528] __dump_stack+0x1d/0x30 [ 222.688393][ T6528] dump_stack_lvl+0x95/0xd0 [ 222.688414][ T6528] dump_stack+0x15/0x1b [ 222.688435][ T6528] should_fail_ex+0x25e/0x270 [ 222.688462][ T6528] should_fail+0xb/0x20 [ 222.688484][ T6528] should_fail_usercopy+0x1a/0x20 [ 222.688585][ T6528] _copy_from_user+0x1c/0xb0 [ 222.688649][ T6528] __sys_bpf+0x1e2/0xc30 [ 222.688693][ T6528] ? ktime_get+0x200/0x240 [ 222.688790][ T6528] __x64_sys_bpf+0x69/0x80 [ 222.688840][ T6528] x64_sys_call+0x10cb/0x3020 [ 222.688869][ T6528] do_syscall_64+0x136/0x3c0 [ 222.688910][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.688997][ T6528] RIP: 0033:0x7fc19805ce59 [ 222.689019][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.689043][ T6528] RSP: 002b:00007fc196aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.689078][ T6528] RAX: ffffffffffffffda RBX: 00007fc1982d5fa0 RCX: 00007fc19805ce59 [ 222.689097][ T6528] RDX: 0000000000000094 RSI: 0000200000001100 RDI: 0000000000000005 [ 222.689190][ T6528] RBP: 00007fc196aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 222.689207][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.689224][ T6528] R13: 00007fc1982d6038 R14: 00007fc1982d5fa0 R15: 00007fffa7cdab78 [ 222.689308][ T6528] [ 222.966393][ T6537] loop1: detected capacity change from 0 to 2048 [ 223.032213][ T6537] Alternate GPT is invalid, using primary GPT. [ 223.038910][ T6537] loop1: p1 p2 p3 [ 223.043183][ T6537] loop1: partition table partially beyond EOD, truncated [ 223.151768][ T6548] syzkaller0: entered promiscuous mode [ 223.172897][ T6548] syzkaller0: entered allmulticast mode [ 223.342941][ T2008] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.352442][ T6554] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 223.369777][ T2008] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.457717][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 223.925419][ T6560] loop0: detected capacity change from 0 to 1024 [ 224.061170][ T2008] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.144495][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 224.214533][ T2008] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.346908][ T6550] loop3: detected capacity change from 0 to 512 [ 224.385212][ T6550] EXT4-fs: Ignoring removed bh option [ 224.545435][ T6550] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 224.593458][ T6550] EXT4-fs (loop3): 1 truncate cleaned up [ 224.617126][ T6550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.763996][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.838997][ T6574] FAULT_INJECTION: forcing a failure. [ 224.838997][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.901385][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.3.901 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.901492][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.901505][ T6574] Call Trace: [ 224.901513][ T6574] [ 224.901523][ T6574] __dump_stack+0x1d/0x30 [ 224.901554][ T6574] dump_stack_lvl+0x95/0xd0 [ 224.901581][ T6574] dump_stack+0x15/0x1b [ 224.901672][ T6574] should_fail_ex+0x25e/0x270 [ 224.901694][ T6574] should_fail+0xb/0x20 [ 224.901713][ T6574] should_fail_usercopy+0x1a/0x20 [ 224.901814][ T6574] _copy_from_user+0x1c/0xb0 [ 224.901842][ T6574] ___sys_sendmsg+0xc1/0x1e0 [ 224.901944][ T6574] __x64_sys_sendmsg+0xd4/0x160 [ 224.901978][ T6574] x64_sys_call+0x194c/0x3020 [ 224.902014][ T6574] do_syscall_64+0x136/0x3c0 [ 224.902057][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.902086][ T6574] RIP: 0033:0x7fd0596fce59 [ 224.902151][ T6574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.902228][ T6574] RSP: 002b:00007fd058157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.902254][ T6574] RAX: ffffffffffffffda RBX: 00007fd059975fa0 RCX: 00007fd0596fce59 [ 224.902273][ T6574] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 224.902288][ T6574] RBP: 00007fd058157090 R08: 0000000000000000 R09: 0000000000000000 [ 224.902300][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.902312][ T6574] R13: 00007fd059976038 R14: 00007fd059975fa0 R15: 00007fff748b5c78 [ 224.902424][ T6574] [ 225.411107][ T6586] vhci_hcd vhci_hcd.1: invalid port number 254 [ 225.417467][ T6586] vhci_hcd vhci_hcd.1: default hub control req: a317 v0004 i00fe l0 [ 225.496663][ T6593] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.959871][ T6601] loop3: detected capacity change from 0 to 512 [ 225.974219][ T6601] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 226.012387][ T6601] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 226.073210][ T6606] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 226.141152][ T6606] loop4: detected capacity change from 0 to 512 [ 226.177732][ T6606] EXT4-fs: Ignoring removed bh option [ 226.280707][ T6616] loop1: detected capacity change from 0 to 2048 [ 226.296269][ T6606] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 226.317835][ T6601] loop3: detected capacity change from 0 to 512 [ 226.339870][ T6601] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 226.356415][ T6607] loop0: detected capacity change from 0 to 512 [ 226.365803][ T6606] EXT4-fs (loop4): 1 truncate cleaned up [ 226.377914][ T6616] Alternate GPT is invalid, using primary GPT. [ 226.400895][ T6616] loop1: p1 p2 p3 [ 226.406605][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.426022][ T6616] loop1: partition table partially beyond EOD, truncated [ 226.427384][ T6601] FAULT_INJECTION: forcing a failure. [ 226.427384][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 226.435250][ T6607] FAULT_INJECTION: forcing a failure. [ 226.435250][ T6607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.446991][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.3.909 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.447026][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.447074][ T6601] Call Trace: [ 226.447081][ T6601] [ 226.447088][ T6601] __dump_stack+0x1d/0x30 [ 226.447119][ T6601] dump_stack_lvl+0x95/0xd0 [ 226.447193][ T6601] dump_stack+0x15/0x1b [ 226.447216][ T6601] should_fail_ex+0x25e/0x270 [ 226.447242][ T6601] should_failslab+0x8c/0xb0 [ 226.447318][ T6601] __kvmalloc_node_noprof+0x155/0x640 [ 226.447348][ T6601] ? ktime_get+0x212/0x240 [ 226.447503][ T6601] ? seq_read_iter+0x141/0x8f0 [ 226.447627][ T6601] seq_read_iter+0x141/0x8f0 [ 226.447715][ T6601] ? tick_program_event+0x79/0xc0 [ 226.447890][ T6601] seq_read+0x279/0x2c0 [ 226.447984][ T6601] ? __pfx_seq_read+0x10/0x10 [ 226.448106][ T6601] vfs_read+0x18e/0x7c0 [ 226.448198][ T6601] ? ksys_read+0xc5/0x1a0 [ 226.448333][ T6601] ksys_read+0xdc/0x1a0 [ 226.448430][ T6601] __x64_sys_read+0x40/0x50 [ 226.448528][ T6601] x64_sys_call+0x2886/0x3020 [ 226.448606][ T6601] do_syscall_64+0x136/0x3c0 [ 226.448730][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.448835][ T6601] RIP: 0033:0x7fd0596fce59 [ 226.448904][ T6601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.448998][ T6601] RSP: 002b:00007fd058157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.449064][ T6601] RAX: ffffffffffffffda RBX: 00007fd059975fa0 RCX: 00007fd0596fce59 [ 226.449107][ T6601] RDX: 000000000000002b RSI: 0000200000000d40 RDI: 0000000000000005 [ 226.449162][ T6601] RBP: 00007fd058157090 R08: 0000000000000000 R09: 0000000000000000 [ 226.449250][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.449292][ T6601] R13: 00007fd059976038 R14: 00007fd059975fa0 R15: 00007fff748b5c78 [ 226.449355][ T6601] [ 226.557488][ T6618] loop5: detected capacity change from 0 to 512 [ 226.751731][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.761452][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.0.913 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.761492][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.761549][ T6607] Call Trace: [ 226.761558][ T6607] [ 226.761582][ T6607] __dump_stack+0x1d/0x30 [ 226.761617][ T6607] dump_stack_lvl+0x95/0xd0 [ 226.761647][ T6607] dump_stack+0x15/0x1b [ 226.761675][ T6607] should_fail_ex+0x25e/0x270 [ 226.761703][ T6607] should_fail_alloc_page+0xf2/0x100 [ 226.761793][ T6607] __alloc_frozen_pages_noprof+0x108/0x350 [ 226.761829][ T6607] alloc_pages_mpol+0xa9/0x1d0 [ 226.761863][ T6607] folio_alloc_noprof+0x96/0x150 [ 226.761897][ T6607] filemap_alloc_folio_noprof+0x92/0x220 [ 226.762015][ T6607] __filemap_get_folio_mpol+0x2a0/0x840 [ 226.762069][ T6607] ? lockref_put_return+0xf7/0x130 [ 226.762123][ T6607] cont_write_begin+0x58b/0x920 [ 226.762162][ T6607] fat_write_begin+0x52/0xe0 [ 226.762240][ T6607] ? __pfx_fat_get_block+0x10/0x10 [ 226.762279][ T6607] cont_write_begin+0x18d/0x920 [ 226.762317][ T6607] fat_write_begin+0x52/0xe0 [ 226.762414][ T6607] ? __pfx_fat_get_block+0x10/0x10 [ 226.762451][ T6607] generic_cont_expand_simple+0xb0/0x150 [ 226.762565][ T6607] fat_cont_expand+0x3e/0x170 [ 226.762679][ T6607] fat_fallocate+0x177/0x1c0 [ 226.762708][ T6607] vfs_fallocate+0x3ac/0x400 [ 226.762746][ T6607] __x64_sys_fallocate+0x7a/0xd0 [ 226.762830][ T6607] x64_sys_call+0x298e/0x3020 [ 226.762865][ T6607] do_syscall_64+0x136/0x3c0 [ 226.762914][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.762972][ T6607] RIP: 0033:0x7f0b286cce59 [ 226.762995][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.763022][ T6607] RSP: 002b:00007f0b27127028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 226.763068][ T6607] RAX: ffffffffffffffda RBX: 00007f0b28945fa0 RCX: 00007f0b286cce59 [ 226.763101][ T6607] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 226.763119][ T6607] RBP: 00007f0b27127090 R08: 0000000000000000 R09: 0000000000000000 [ 226.763138][ T6607] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 226.763157][ T6607] R13: 00007f0b28946038 R14: 00007f0b28945fa0 R15: 00007ffc466e6048 [ 226.763205][ T6607] [ 227.021218][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 227.039972][ T6628] loop4: detected capacity change from 0 to 512 [ 227.058018][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 227.075817][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 227.088178][ T6628] EXT4-fs: Ignoring removed oldalloc option [ 227.121150][ T6636] vhci_hcd vhci_hcd.1: invalid port number 254 [ 227.132851][ T6636] vhci_hcd vhci_hcd.1: default hub control req: a317 v0004 i00fe l0 [ 227.145645][ T6628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.161185][ T6628] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.337365][ T6648] loop1: detected capacity change from 0 to 512 [ 227.672405][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.038778][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.074575][ T6648] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.371325][ T6658] loop5: detected capacity change from 0 to 2048 [ 228.449741][ T6658] Alternate GPT is invalid, using primary GPT. [ 228.464714][ T6662] geneve0: entered promiscuous mode [ 228.470888][ T6658] loop5: p1 p2 p3 [ 228.475772][ T6662] geneve0: left promiscuous mode [ 228.477940][ T6658] loop5: partition table partially beyond EOD, truncated [ 228.485013][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 228.567644][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.583987][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 228.701909][ T6664] bond1: entered promiscuous mode [ 228.720098][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.790176][ T28] kauditd_printk_skb: 434 callbacks suppressed [ 228.790192][ T28] audit: type=1400 audit(1781721466.118:5419): avc: denied { read write } for pid=6676 comm="syz.3.937" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.997254][ T28] audit: type=1400 audit(1781721466.118:5420): avc: denied { open } for pid=6676 comm="syz.3.937" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 229.147148][ T6683] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 229.180215][ T6683] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 229.180215][ T6683] program syz.3.937 not setting count and/or reply_len properly [ 229.787563][ T6689] loop5: detected capacity change from 0 to 512 [ 229.822949][ T6689] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.940: attempt to clear invalid blocks 2 len 1 [ 229.865225][ T6689] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 229.865571][ T6689] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 229.874792][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 229.874814][ C1] EXT4-fs (loop5): initial error at time 1781721467: ext4_clear_blocks:876: inode 13 [ 229.874856][ C1] EXT4-fs (loop5): last error at time 1781721467: ext4_clear_blocks:876: inode 13 [ 229.908540][ T6689] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 229.937704][ T6696] loop0: detected capacity change from 0 to 2048 [ 229.944435][ T6689] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.940: invalid indirect mapped block 1819239214 (level 0) [ 229.961884][ T6689] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 229.962153][ T6689] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.940: invalid indirect mapped block 1819239214 (level 1) [ 229.986405][ T6689] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 229.987698][ T6689] EXT4-fs (loop5): 1 truncate cleaned up [ 230.005741][ T6696] Alternate GPT is invalid, using primary GPT. [ 230.012716][ T6696] loop0: p1 p2 p3 [ 230.021450][ T6696] loop0: partition table partially beyond EOD, truncated [ 230.084196][ T2990] Alternate GPT is invalid, using primary GPT. [ 230.090948][ T2990] loop0: p1 p2 p3 [ 230.097028][ T2990] loop0: partition table partially beyond EOD, truncated [ 230.105666][ T6689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.174119][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.192724][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 230.206538][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 230.370288][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.389249][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 230.396086][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 230.566591][ T6711] loop0: detected capacity change from 0 to 512 [ 230.612045][ T6711] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 230.649041][ T6711] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 230.695452][ T6711] EXT4-fs (loop0): 1 truncate cleaned up [ 230.722854][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.743409][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.844011][ T6711] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 4: comm syz.0.948: path /193/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 231.096643][ T6721] loop3: detected capacity change from 0 to 256 [ 231.112141][ T6721] msdos: Bad value for 'uid' [ 231.122729][ T6721] msdos: Bad value for 'uid' [ 231.168263][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.235965][ T6727] loop5: detected capacity change from 0 to 512 [ 231.248311][ T6723] loop4: detected capacity change from 0 to 2048 [ 231.269624][ T6727] EXT4-fs: Ignoring removed bh option [ 231.292604][ T6727] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 231.305352][ T6723] Alternate GPT is invalid, using primary GPT. [ 231.313654][ T6723] loop4: p1 p2 p3 [ 231.317592][ T6723] loop4: partition table partially beyond EOD, truncated [ 231.318248][ T6727] EXT4-fs (loop5): 1 truncate cleaned up [ 231.368436][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.387968][ T6734] loop4: detected capacity change from 0 to 512 [ 231.409785][ T6734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.465623][ T6734] EXT4-fs (loop4): 1 truncate cleaned up [ 231.482618][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.486564][ T6734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.517228][ T28] audit: type=1400 audit(1781721468.848:5421): avc: denied { write } for pid=6733 comm="syz.4.958" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.598511][ T28] audit: type=1400 audit(1781721468.898:5422): avc: denied { write } for pid=6733 comm="syz.4.958" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.657774][ T28] audit: type=1400 audit(1781721468.898:5423): avc: denied { remove_name } for pid=6733 comm="syz.4.958" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.703747][ T28] audit: type=1400 audit(1781721468.898:5424): avc: denied { rmdir } for pid=6733 comm="syz.4.958" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.704663][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.787048][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 231.796292][ T6746] loop4: detected capacity change from 0 to 256 [ 231.815816][ T6746] msdos: Bad value for 'uid' [ 231.824481][ T6746] msdos: Bad value for 'uid' [ 231.886840][ T28] audit: type=1400 audit(1781721469.218:5425): avc: denied { create } for pid=6743 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 231.942504][ T6741] loop5: detected capacity change from 0 to 512 [ 232.030071][ T6751] loop4: detected capacity change from 0 to 512 [ 232.040025][ T6741] FAULT_INJECTION: forcing a failure. [ 232.040025][ T6741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.060898][ T6751] EXT4-fs: quotafile must be on filesystem root [ 232.073317][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.5.960 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.073352][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.073368][ T6741] Call Trace: [ 232.073378][ T6741] [ 232.073389][ T6741] __dump_stack+0x1d/0x30 [ 232.073430][ T6741] dump_stack_lvl+0x95/0xd0 [ 232.073455][ T6741] dump_stack+0x15/0x1b [ 232.073479][ T6741] should_fail_ex+0x25e/0x270 [ 232.073508][ T6741] should_fail_alloc_page+0xf2/0x100 [ 232.073571][ T6741] __alloc_frozen_pages_noprof+0x108/0x350 [ 232.073736][ T6741] alloc_pages_mpol+0xa9/0x1d0 [ 232.073763][ T6741] folio_alloc_noprof+0x96/0x150 [ 232.073787][ T6741] filemap_alloc_folio_noprof+0x92/0x220 [ 232.073887][ T6741] __filemap_get_folio_mpol+0x2a0/0x840 [ 232.073961][ T6741] cont_write_begin+0x58b/0x920 [ 232.073996][ T6741] ? lapic_next_event+0x11/0x20 [ 232.074026][ T6741] fat_write_begin+0x52/0xe0 [ 232.074096][ T6741] ? __pfx_fat_get_block+0x10/0x10 [ 232.074132][ T6741] cont_write_begin+0x18d/0x920 [ 232.074171][ T6741] fat_write_begin+0x52/0xe0 [ 232.074197][ T6741] ? __pfx_fat_get_block+0x10/0x10 [ 232.074299][ T6741] generic_cont_expand_simple+0xb0/0x150 [ 232.074336][ T6741] fat_cont_expand+0x3e/0x170 [ 232.074367][ T6741] fat_fallocate+0x177/0x1c0 [ 232.074398][ T6741] vfs_fallocate+0x3ac/0x400 [ 232.074505][ T6741] __x64_sys_fallocate+0x7a/0xd0 [ 232.074545][ T6741] x64_sys_call+0x298e/0x3020 [ 232.074575][ T6741] do_syscall_64+0x136/0x3c0 [ 232.074650][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.074695][ T6741] RIP: 0033:0x7fc19805ce59 [ 232.074715][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.074739][ T6741] RSP: 002b:00007fc196aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 232.074815][ T6741] RAX: ffffffffffffffda RBX: 00007fc1982d5fa0 RCX: 00007fc19805ce59 [ 232.074834][ T6741] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000008 [ 232.074850][ T6741] RBP: 00007fc196aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 232.074866][ T6741] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 232.074880][ T6741] R13: 00007fc1982d6038 R14: 00007fc1982d5fa0 R15: 00007fffa7cdab78 [ 232.074902][ T6741] [ 232.383288][ T6758] EXT4-fs: Ignoring removed bh option [ 232.397316][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.423433][ T28] audit: type=1400 audit(1781721469.758:5426): avc: denied { write } for pid=6757 comm="syz.4.966" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.457193][ T28] audit: type=1400 audit(1781721469.758:5427): avc: denied { map } for pid=6757 comm="syz.4.966" path="/80/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.480175][ T28] audit: type=1400 audit(1781721469.758:5428): avc: denied { execute } for pid=6757 comm="syz.4.966" path="/80/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.112908][ T6766] Alternate GPT is invalid, using primary GPT. [ 233.123083][ T6766] loop3: p1 p2 p3 [ 233.150589][ T6766] loop3: partition table partially beyond EOD, truncated [ 233.163579][ T6758] netlink: 44 bytes leftover after parsing attributes in process `syz.4.966'. [ 233.273047][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.288616][ T2990] Alternate GPT is invalid, using primary GPT. [ 233.295428][ T2990] loop3: p1 p2 p3 [ 233.310648][ T2990] loop3: partition table partially beyond EOD, truncated [ 233.360150][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 233.385931][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 233.492590][ T6784] 9pnet_fd: Insufficient options for proto=fd [ 233.524735][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 233.595373][ T6779] Alternate GPT is invalid, using primary GPT. [ 233.653640][ T6779] loop3: p1 p2 p3 [ 233.733185][ T6779] loop3: partition table partially beyond EOD, truncated [ 234.052150][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 234.062620][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 234.072758][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 234.380463][ T6800] FAULT_INJECTION: forcing a failure. [ 234.380463][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 234.393307][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.4.975 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.393342][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.393409][ T6800] Call Trace: [ 234.393416][ T6800] [ 234.393424][ T6800] __dump_stack+0x1d/0x30 [ 234.393454][ T6800] dump_stack_lvl+0x95/0xd0 [ 234.393481][ T6800] dump_stack+0x15/0x1b [ 234.393506][ T6800] should_fail_ex+0x25e/0x270 [ 234.393597][ T6800] ? __se_sys_memfd_create+0x1df/0x3b0 [ 234.393636][ T6800] should_failslab+0x8c/0xb0 [ 234.393706][ T6800] __kmalloc_cache_noprof+0x5f/0x400 [ 234.393727][ T6800] ? fput+0x8f/0xc0 [ 234.393755][ T6800] __se_sys_memfd_create+0x1df/0x3b0 [ 234.393822][ T6800] __x64_sys_memfd_create+0x31/0x40 [ 234.393850][ T6800] x64_sys_call+0x1f22/0x3020 [ 234.393916][ T6800] do_syscall_64+0x136/0x3c0 [ 234.393975][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.394003][ T6800] RIP: 0033:0x7f533269ce59 [ 234.394076][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.394107][ T6800] RSP: 002b:00007f53310b4e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 234.394131][ T6800] RAX: ffffffffffffffda RBX: 0000000000000691 RCX: 00007f533269ce59 [ 234.394144][ T6800] RDX: 00007f53310b4ee0 RSI: 0000000000000000 RDI: 00007f5332732f4f [ 234.394157][ T6800] RBP: 0000200000000f00 R08: 00000000ffffffff R09: 0000000000000000 [ 234.394238][ T6800] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 234.394254][ T6800] R13: 00007f53310b4ee0 R14: 00007f53310b4ea0 R15: 0000200000000380 [ 234.394277][ T6800] [ 234.766702][ T6802] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 234.783693][ T6802] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 234.817067][ T6805] set_capacity_and_notify: 6 callbacks suppressed [ 234.817108][ T6805] loop3: detected capacity change from 0 to 2048 [ 234.834107][ T6802] EXT4-fs (loop5): 1 truncate cleaned up [ 234.853673][ T6802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.877337][ T6805] Alternate GPT is invalid, using primary GPT. [ 234.890197][ T6805] loop3: p1 p2 p3 [ 234.902047][ T6805] loop3: partition table partially beyond EOD, truncated [ 234.950999][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 234.951019][ T28] audit: type=1326 audit(1781721472.288:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 234.983246][ T28] audit: type=1326 audit(1781721472.288:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.009984][ T28] audit: type=1326 audit(1781721472.288:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.059265][ T28] audit: type=1326 audit(1781721472.288:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.151960][ T28] audit: type=1326 audit(1781721472.288:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.176457][ T6802] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 4: comm syz.5.980: path /141/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 235.178187][ T28] audit: type=1326 audit(1781721472.288:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.272204][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.306939][ T28] audit: type=1326 audit(1781721472.318:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.355074][ T28] audit: type=1326 audit(1781721472.318:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.393740][ T28] audit: type=1326 audit(1781721472.318:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.422218][ T28] audit: type=1326 audit(1781721472.318:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.4.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 235.537538][ T6817] loop0: detected capacity change from 0 to 1764 [ 235.599551][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 235.785114][ T6824] loop4: detected capacity change from 0 to 512 [ 235.823980][ T6821] loop3: detected capacity change from 0 to 256 [ 235.853138][ T6824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.866595][ T6824] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.032266][ T6824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.081685][ T6832] loop4: detected capacity change from 0 to 256 [ 236.483684][ T6840] loop0: detected capacity change from 0 to 512 [ 236.490150][ T6842] loop4: detected capacity change from 0 to 2048 [ 236.534505][ T6840] capability: warning: `syz.0.991' uses deprecated v2 capabilities in a way that may be insecure [ 236.561684][ T6842] Alternate GPT is invalid, using primary GPT. [ 236.567999][ T6842] loop4: p1 p2 p3 [ 236.571827][ T6842] loop4: partition table partially beyond EOD, truncated [ 236.653143][ T6845] loop5: detected capacity change from 0 to 256 [ 236.673612][ T6848] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 236.684624][ T6845] msdos: Bad value for 'uid' [ 236.701388][ T6845] msdos: Bad value for 'uid' [ 236.998689][ T6860] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 237.732319][ T6881] loop5: detected capacity change from 0 to 256 [ 237.754724][ T6874] loop4: detected capacity change from 0 to 1997 [ 237.777688][ T6881] FAT-fs (loop5): Directory bread(block 64) failed [ 237.802873][ T6881] FAT-fs (loop5): Directory bread(block 65) failed [ 237.821309][ T6881] FAT-fs (loop5): Directory bread(block 66) failed [ 237.835673][ T6881] FAT-fs (loop5): Directory bread(block 67) failed [ 237.850928][ T6881] FAT-fs (loop5): Directory bread(block 68) failed [ 237.878567][ T6881] FAT-fs (loop5): Directory bread(block 69) failed [ 237.906035][ T6881] FAT-fs (loop5): Directory bread(block 70) failed [ 237.921294][ T6881] FAT-fs (loop5): Directory bread(block 71) failed [ 237.939450][ T6881] FAT-fs (loop5): Directory bread(block 72) failed [ 237.978279][ T6881] FAT-fs (loop5): Directory bread(block 73) failed [ 237.988972][ T6885] FAULT_INJECTION: forcing a failure. [ 237.988972][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.037266][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(lazy) [ 238.037300][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.037347][ T6885] Call Trace: [ 238.037357][ T6885] [ 238.037374][ T6885] __dump_stack+0x1d/0x30 [ 238.037399][ T6885] dump_stack_lvl+0x95/0xd0 [ 238.037419][ T6885] dump_stack+0x15/0x1b [ 238.037500][ T6885] should_fail_ex+0x25e/0x270 [ 238.037539][ T6885] should_fail+0xb/0x20 [ 238.037562][ T6885] should_fail_usercopy+0x1a/0x20 [ 238.037590][ T6885] _copy_from_user+0x1c/0xb0 [ 238.037628][ T6885] __sys_bpf+0x1e2/0xc30 [ 238.037659][ T6885] ? get_pid_task+0x92/0xc0 [ 238.037698][ T6885] ? vfs_write+0x820/0x990 [ 238.037794][ T6885] __x64_sys_bpf+0x69/0x80 [ 238.037881][ T6885] x64_sys_call+0x10cb/0x3020 [ 238.037989][ T6885] do_syscall_64+0x136/0x3c0 [ 238.038055][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.038122][ T6885] RIP: 0033:0x7feb7fbcce59 [ 238.038212][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.038236][ T6885] RSP: 002b:00007feb7e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.038261][ T6885] RAX: ffffffffffffffda RBX: 00007feb7fe45fa0 RCX: 00007feb7fbcce59 [ 238.038279][ T6885] RDX: 000000000000000c RSI: 0000200000000200 RDI: 000000000000000a [ 238.038296][ T6885] RBP: 00007feb7e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.038316][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.038374][ T6885] R13: 00007feb7fe46038 R14: 00007feb7fe45fa0 R15: 00007ffe52b67a08 [ 238.038401][ T6885] [ 238.865170][ T6905] rock: directory entry would overflow storage [ 238.871544][ T6905] rock: sig=0x5245, size=8, remaining=5 [ 239.554862][ T6915] syzkaller0: entered promiscuous mode [ 239.568389][ T6915] syzkaller0: entered allmulticast mode [ 239.659102][ T6926] netlink: 'syz.0.1023': attribute type 2 has an invalid length. [ 239.667487][ T6926] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 239.677986][ T6926] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1023'. [ 239.693654][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 239.702936][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 239.712283][ T6901] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1015'. [ 239.724177][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1024'. [ 239.794556][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 239.862125][ T6939] set_capacity_and_notify: 2 callbacks suppressed [ 239.862143][ T6939] loop1: detected capacity change from 0 to 256 [ 239.877480][ T6939] msdos: Bad value for 'uid' [ 239.883176][ T6939] msdos: Bad value for 'uid' [ 240.036361][ T6944] loop3: detected capacity change from 0 to 2048 [ 240.046246][ T6935] loop0: detected capacity change from 0 to 512 [ 240.082019][ T6934] futex_wake_op: syz.4.1026 tries to shift op by 144; fix this program [ 240.099479][ T6944] Alternate GPT is invalid, using primary GPT. [ 240.119212][ T6944] loop3: p1 p2 p3 [ 240.121052][ T6935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.137086][ T6935] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.141764][ T6944] loop3: partition table partially beyond EOD, truncated [ 240.205334][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 240.205352][ T28] audit: type=1326 audit(1781721477.538:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.288306][ T28] audit: type=1326 audit(1781721477.568:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.326275][ T28] audit: type=1326 audit(1781721477.568:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.368952][ T6935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.382696][ T28] audit: type=1326 audit(1781721477.568:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.408616][ T28] audit: type=1326 audit(1781721477.568:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.447257][ T28] audit: type=1326 audit(1781721477.568:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.477928][ T6953] loop1: detected capacity change from 0 to 2048 [ 240.497028][ T28] audit: type=1326 audit(1781721477.568:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.528123][ T28] audit: type=1326 audit(1781721477.568:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.553801][ T28] audit: type=1400 audit(1781721477.578:5798): avc: denied { ioctl } for pid=6932 comm="syz.4.1026" path="socket:[17266]" dev="sockfs" ino=17266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.602677][ T6959] netlink: 'syz.0.1034': attribute type 2 has an invalid length. [ 240.610845][ T28] audit: type=1326 audit(1781721477.578:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.5.1031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 240.646348][ T6959] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 240.664012][ T6959] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1034'. [ 240.725136][ T6965] FAULT_INJECTION: forcing a failure. [ 240.725136][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.757961][ T6953] Alternate GPT is invalid, using primary GPT. [ 240.764286][ T6971] loop0: detected capacity change from 0 to 512 [ 240.764572][ T6953] loop1: p1 p2 p3 [ 240.772706][ T6971] EXT4-fs: Ignoring removed nobh option [ 240.780139][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.4.1036 Not tainted syzkaller #0 PREEMPT(lazy) [ 240.780172][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.780205][ T6965] Call Trace: [ 240.780214][ T6965] [ 240.780224][ T6965] __dump_stack+0x1d/0x30 [ 240.780253][ T6965] dump_stack_lvl+0x95/0xd0 [ 240.780279][ T6965] dump_stack+0x15/0x1b [ 240.780305][ T6965] should_fail_ex+0x25e/0x270 [ 240.780359][ T6965] should_fail+0xb/0x20 [ 240.780460][ T6965] should_fail_usercopy+0x1a/0x20 [ 240.780498][ T6965] _copy_from_user+0x1c/0xb0 [ 240.780549][ T6965] __sys_bpf+0x1e2/0xc30 [ 240.780643][ T6965] ? get_pid_task+0x92/0xc0 [ 240.780688][ T6965] ? vfs_write+0x820/0x990 [ 240.780772][ T6965] __x64_sys_bpf+0x69/0x80 [ 240.780806][ T6965] x64_sys_call+0x10cb/0x3020 [ 240.780862][ T6965] do_syscall_64+0x136/0x3c0 [ 240.780905][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.780936][ T6965] RIP: 0033:0x7f533269ce59 [ 240.780957][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.780983][ T6965] RSP: 002b:00007f53310f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.781008][ T6965] RAX: ffffffffffffffda RBX: 00007f5332915fa0 RCX: 00007f533269ce59 [ 240.781025][ T6965] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 240.781042][ T6965] RBP: 00007f53310f7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.781059][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.781076][ T6965] R13: 00007f5332916038 R14: 00007f5332915fa0 R15: 00007ffd5b84c218 [ 240.781182][ T6965] [ 240.790323][ T6953] loop1: partition table partially beyond EOD, [ 240.948678][ T6971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.964904][ T6971] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #11: block 1: comm syz.0.1038: lblock 0 mapped to illegal pblock 1 (length 1) [ 240.979633][ T6971] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.979741][ T6953] truncated [ 240.988968][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 240.988997][ C1] EXT4-fs (loop0): initial error at time 1781721478: ext4_map_blocks:791: inode 11: block 1 [ 240.989043][ C1] EXT4-fs (loop0): last error at time 1781721478: ext4_map_blocks:791: inode 11: block 1 [ 241.009003][ T6971] EXT4-fs (loop0): Remounting filesystem read-only [ 241.009046][ T6971] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 241.009077][ T6971] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 241.113059][ T6971] EXT4-fs (loop0): 1 orphan inode deleted [ 241.124051][ T6971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 241.146675][ T6984] loop5: detected capacity change from 0 to 512 [ 241.171566][ T6984] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 241.208029][ T6984] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 241.216873][ T6984] EXT4-fs (loop5): 1 truncate cleaned up [ 241.238903][ T6984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.308322][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.328855][ T6992] loop1: detected capacity change from 0 to 2048 [ 241.330027][ T6984] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 4: comm syz.5.1043: path /152/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 241.364626][ T6992] Alternate GPT is invalid, using primary GPT. [ 241.391826][ T6992] loop1: p1 p2 p3 [ 241.400166][ T6992] loop1: partition table partially beyond EOD, truncated [ 241.443153][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.470191][ T6998] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 241.498299][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 241.513246][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 241.537415][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 241.709322][ T7001] netlink: 'syz.5.1048': attribute type 2 has an invalid length. [ 241.717379][ T7001] netlink: 'syz.5.1048': attribute type 1 has an invalid length. [ 241.725178][ T7001] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1048'. [ 241.839347][ T7013] loop5: detected capacity change from 0 to 2048 [ 241.907341][ T7013] Alternate GPT is invalid, using primary GPT. [ 241.913776][ T7013] loop5: p1 p2 p3 [ 241.920646][ T7013] loop5: partition table partially beyond EOD, truncated [ 242.014703][ T7019] geneve0: entered promiscuous mode [ 242.039452][ T7019] geneve0: left promiscuous mode [ 242.066590][ T7023] loop1: detected capacity change from 0 to 512 [ 242.085228][ T7026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1060'. [ 242.138532][ T7023] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 242.177465][ T7023] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 242.229115][ T7023] EXT4-fs (loop1): 1 truncate cleaned up [ 242.265996][ T7023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.369832][ T7023] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1059: path /204/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 242.466727][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.671299][ T7052] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1071'. [ 242.697428][ T7052] veth0_to_bond: default FDB implementation only supports local addresses [ 242.706145][ T7046] loop1: detected capacity change from 0 to 2048 [ 242.723601][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.746060][ T7052] netlink: 'syz.5.1071': attribute type 2 has an invalid length. [ 242.749108][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.763553][ T7052] netlink: 'syz.5.1071': attribute type 1 has an invalid length. [ 242.777161][ T7046] Alternate GPT is invalid, using primary GPT. [ 242.783940][ T7046] loop1: p1 p2 p3 [ 242.787980][ T7052] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1071'. [ 242.798812][ T7046] loop1: partition table partially beyond EOD, truncated [ 242.921736][ T7056] FAULT_INJECTION: forcing a failure. [ 242.921736][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.945839][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 242.961349][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 242.972866][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 242.982102][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.5.1072 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.982240][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.982291][ T7056] Call Trace: [ 242.982313][ T7056] [ 242.982344][ T7056] __dump_stack+0x1d/0x30 [ 242.982424][ T7056] dump_stack_lvl+0x95/0xd0 [ 242.982499][ T7056] dump_stack+0x15/0x1b [ 242.982577][ T7056] should_fail_ex+0x25e/0x270 [ 242.982655][ T7056] should_fail+0xb/0x20 [ 242.982690][ T7056] should_fail_usercopy+0x1a/0x20 [ 242.982716][ T7056] _copy_from_user+0x1c/0xb0 [ 242.982747][ T7056] ___sys_sendmsg+0xc1/0x1e0 [ 242.982780][ T7056] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 242.982922][ T7056] __x64_sys_sendmsg+0xd4/0x160 [ 242.983052][ T7056] x64_sys_call+0x194c/0x3020 [ 242.983139][ T7056] do_syscall_64+0x136/0x3c0 [ 242.983187][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.983300][ T7056] RIP: 0033:0x7fc19805ce59 [ 242.983354][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.983453][ T7056] RSP: 002b:00007fc196aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.983525][ T7056] RAX: ffffffffffffffda RBX: 00007fc1982d5fa0 RCX: 00007fc19805ce59 [ 242.983642][ T7056] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.983685][ T7056] RBP: 00007fc196aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 242.983729][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.983770][ T7056] R13: 00007fc1982d6038 R14: 00007fc1982d5fa0 R15: 00007fffa7cdab78 [ 242.983853][ T7056] [ 243.607721][ T36] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 244.149482][ T7074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.183837][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 244.222389][ T7070] FAULT_INJECTION: forcing a failure. [ 244.222389][ T7070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.258447][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.266669][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.286550][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.310524][ T7070] CPU: 0 UID: 0 PID: 7070 Comm: syz.4.1077 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.310554][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.310570][ T7070] Call Trace: [ 244.310578][ T7070] [ 244.310588][ T7070] __dump_stack+0x1d/0x30 [ 244.310660][ T7070] dump_stack_lvl+0x95/0xd0 [ 244.310683][ T7070] dump_stack+0x15/0x1b [ 244.310702][ T7070] should_fail_ex+0x25e/0x270 [ 244.310728][ T7070] should_fail+0xb/0x20 [ 244.310750][ T7070] should_fail_usercopy+0x1a/0x20 [ 244.310842][ T7070] _copy_from_user+0x1c/0xb0 [ 244.310869][ T7070] ___sys_sendmsg+0xc1/0x1e0 [ 244.310914][ T7070] __x64_sys_sendmsg+0xd4/0x160 [ 244.311072][ T7070] x64_sys_call+0x194c/0x3020 [ 244.311099][ T7070] do_syscall_64+0x136/0x3c0 [ 244.311131][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.311160][ T7070] RIP: 0033:0x7f533269ce59 [ 244.311250][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.311275][ T7070] RSP: 002b:00007f53310f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.311343][ T7070] RAX: ffffffffffffffda RBX: 00007f5332915fa0 RCX: 00007f533269ce59 [ 244.311357][ T7070] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 244.311370][ T7070] RBP: 00007f53310f7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.311382][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.311395][ T7070] R13: 00007f5332916038 R14: 00007f5332915fa0 R15: 00007ffd5b84c218 [ 244.311421][ T7070] [ 244.569063][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.586830][ T7081] FAT-fs (loop5): bogus number of reserved sectors [ 244.603961][ T7081] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 244.615502][ T7081] FAT-fs (loop5): Can't find a valid FAT filesystem [ 244.796871][ T7079] EXT4-fs (loop4): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 244.986741][ T7092] set_capacity_and_notify: 3 callbacks suppressed [ 244.986757][ T7092] loop4: detected capacity change from 0 to 512 [ 245.071022][ T7090] loop5: detected capacity change from 0 to 2048 [ 245.144176][ T7092] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1085: attempt to clear invalid blocks 2 len 1 [ 245.170638][ T7092] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 245.171979][ T7092] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 245.181340][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 245.181357][ C0] EXT4-fs (loop4): initial error at time 1781721482: ext4_clear_blocks:876: inode 13 [ 245.181385][ C0] EXT4-fs (loop4): last error at time 1781721482: ext4_clear_blocks:876: inode 13 [ 245.214875][ T7092] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 245.255457][ T7101] loop3: detected capacity change from 0 to 512 [ 245.284492][ T7101] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 245.294468][ T7101] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 245.303242][ T7092] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1085: invalid indirect mapped block 1819239214 (level 0) [ 245.319195][ T7101] EXT4-fs (loop3): 1 truncate cleaned up [ 245.325728][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.342636][ T7092] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 245.343397][ T7092] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1085: invalid indirect mapped block 1819239214 (level 1) [ 245.390958][ T7101] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.1086: path /215/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 245.411389][ T7092] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 245.411815][ T7092] EXT4-fs (loop4): 1 truncate cleaned up [ 245.427146][ T7092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.450592][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.499441][ T7090] Alternate GPT is invalid, using primary GPT. [ 245.508529][ T7090] loop5: p1 p2 p3 [ 245.521886][ T7090] loop5: partition table partially beyond EOD, truncated [ 245.541465][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 245.541484][ T28] audit: type=1400 audit(1781721482.878:5947): avc: denied { write } for pid=7110 comm="syz.1.1090" path="socket:[18609]" dev="sockfs" ino=18609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.616776][ T7115] 9pnet_fd: p9_fd_create_unix (7115): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 245.632661][ T7118] FAULT_INJECTION: forcing a failure. [ 245.632661][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 245.762917][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.1.1093 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.762967][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.762982][ T7118] Call Trace: [ 245.762988][ T7118] [ 245.762998][ T7118] __dump_stack+0x1d/0x30 [ 245.763030][ T7118] dump_stack_lvl+0x95/0xd0 [ 245.763056][ T7118] dump_stack+0x15/0x1b [ 245.763074][ T7118] should_fail_ex+0x25e/0x270 [ 245.763160][ T7118] should_failslab+0x8c/0xb0 [ 245.763204][ T7118] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 245.763296][ T7118] ? __alloc_skb+0x2db/0x6f0 [ 245.763328][ T7118] ? selinux_file_open+0x2e6/0x330 [ 245.763365][ T7118] __alloc_skb+0x2db/0x6f0 [ 245.763415][ T7118] ? __alloc_skb+0x205/0x6f0 [ 245.763482][ T7118] alloc_skb_with_frags+0x7e/0x3d0 [ 245.763517][ T7118] ? avc_has_perm_noaudit+0xa3/0x120 [ 245.763577][ T7118] sock_alloc_send_pskb+0x44d/0x500 [ 245.763653][ T7118] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 245.763686][ T7118] hci_sock_sendmsg+0x129/0x910 [ 245.763742][ T7118] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 245.763822][ T7118] sock_write_iter+0x2c5/0x2f0 [ 245.763875][ T7118] ? __pfx_sock_write_iter+0x10/0x10 [ 245.763917][ T7118] vfs_write+0x57d/0x990 [ 245.764091][ T7118] ksys_write+0xdc/0x1a0 [ 245.764138][ T7118] __x64_sys_write+0x40/0x50 [ 245.764215][ T7118] x64_sys_call+0x27e1/0x3020 [ 245.764246][ T7118] do_syscall_64+0x136/0x3c0 [ 245.764290][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.764322][ T7118] RIP: 0033:0x7feb7fbcce59 [ 245.764343][ T7118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.764367][ T7118] RSP: 002b:00007feb7e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.764428][ T7118] RAX: ffffffffffffffda RBX: 00007feb7fe45fa0 RCX: 00007feb7fbcce59 [ 245.764447][ T7118] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 245.764463][ T7118] RBP: 00007feb7e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.764480][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.764513][ T7118] R13: 00007feb7fe46038 R14: 00007feb7fe45fa0 R15: 00007ffe52b67a08 [ 245.764540][ T7118] [ 246.000329][ T7122] loop5: detected capacity change from 0 to 512 [ 246.017021][ T7122] EXT4-fs: Ignoring removed bh option [ 246.024996][ T7127] loop1: detected capacity change from 0 to 128 [ 246.092416][ T28] audit: type=1400 audit(1781721483.428:5948): avc: denied { wake_alarm } for pid=7126 comm="syz.1.1096" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.095947][ T7122] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 246.168391][ T7122] EXT4-fs (loop5): 1 truncate cleaned up [ 246.176172][ T7122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.210400][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.221413][ T28] audit: type=1400 audit(1781721483.478:5949): avc: denied { read write } for pid=7123 comm="syz.0.1095" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 246.261415][ T28] audit: type=1400 audit(1781721483.478:5950): avc: denied { open } for pid=7123 comm="syz.0.1095" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 246.289974][ T28] audit: type=1400 audit(1781721483.488:5951): avc: denied { watch watch_reads } for pid=7126 comm="syz.1.1096" path="/211/file0/file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 246.328399][ T7133] loop3: detected capacity change from 0 to 512 [ 246.336859][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.352862][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 246.368266][ T7133] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 246.376658][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 246.382153][ T28] audit: type=1326 audit(1781721483.718:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.5.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 246.432134][ T28] audit: type=1326 audit(1781721483.748:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.5.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 246.468413][ T7135] loop4: detected capacity change from 0 to 256 [ 246.475923][ T28] audit: type=1326 audit(1781721483.748:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.5.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 246.513062][ T7133] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 246.560024][ T28] audit: type=1326 audit(1781721483.748:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.5.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 246.577926][ T7133] EXT4-fs (loop3): 1 truncate cleaned up [ 246.592389][ T28] audit: type=1326 audit(1781721483.748:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.5.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19805ce59 code=0x7ffc0000 [ 246.619219][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.646252][ T7133] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.1098: path /218/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 246.683918][ T7142] loop0: detected capacity change from 0 to 256 [ 246.696658][ T7142] FAULT_INJECTION: forcing a failure. [ 246.696658][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 246.705035][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 246.713175][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.0.1100 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.713280][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.713403][ T7142] Call Trace: [ 246.713425][ T7142] [ 246.713456][ T7142] __dump_stack+0x1d/0x30 [ 246.713540][ T7142] dump_stack_lvl+0x95/0xd0 [ 246.713605][ T7142] dump_stack+0x15/0x1b [ 246.713667][ T7142] should_fail_ex+0x25e/0x270 [ 246.713772][ T7142] ? alloc_pipe_info+0xad/0x340 [ 246.713899][ T7142] should_failslab+0x8c/0xb0 [ 246.714000][ T7142] __kmalloc_cache_noprof+0x5f/0x400 [ 246.714075][ T7142] alloc_pipe_info+0xad/0x340 [ 246.714273][ T7142] splice_direct_to_actor+0x593/0x680 [ 246.714408][ T7142] ? __file_has_perm+0x3d9/0x430 [ 246.714555][ T7142] ? __pfx_direct_splice_actor+0x10/0x10 [ 246.714673][ T7142] do_splice_direct+0x119/0x1a0 [ 246.714830][ T7142] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 246.714907][ T7142] do_sendfile+0x37d/0x640 [ 246.715027][ T7142] __x64_sys_sendfile64+0x105/0x150 [ 246.715143][ T7142] x64_sys_call+0x2dc4/0x3020 [ 246.715250][ T7142] do_syscall_64+0x136/0x3c0 [ 246.715412][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.715488][ T7142] RIP: 0033:0x7f0b286cce59 [ 246.715543][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.715679][ T7142] RSP: 002b:00007f0b27127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 246.715745][ T7142] RAX: ffffffffffffffda RBX: 00007f0b28945fa0 RCX: 00007f0b286cce59 [ 246.715789][ T7142] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 246.715831][ T7142] RBP: 00007f0b27127090 R08: 0000000000000000 R09: 0000000000000000 [ 246.715874][ T7142] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 246.715911][ T7142] R13: 00007f0b28946038 R14: 00007f0b28945fa0 R15: 00007ffc466e6048 [ 246.716003][ T7142] [ 246.916972][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 246.928757][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 246.941985][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 246.958975][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 246.959148][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.984103][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.002466][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.030412][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.045538][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.075492][ T7149] loop1: detected capacity change from 0 to 256 [ 247.077996][ T7135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.200405][ T7157] loop3: detected capacity change from 0 to 512 [ 247.214035][ T7157] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1106: attempt to clear invalid blocks 2 len 1 [ 247.228732][ T7157] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.229026][ T7157] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, [ 247.238351][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 247.238374][ C0] EXT4-fs (loop3): initial error at time 1781721484: ext4_clear_blocks:876: inode 13 [ 247.238416][ C0] EXT4-fs (loop3): last error at time 1781721484: ext4_clear_blocks:876: inode 13 [ 247.272021][ T7157] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 247.352420][ T7157] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1106: invalid indirect mapped block 1819239214 (level 0) [ 247.366767][ T7157] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.368202][ T7157] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1106: invalid indirect mapped block 1819239214 (level 1) [ 247.391717][ T7157] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.394339][ T7157] EXT4-fs (loop3): 1 truncate cleaned up [ 247.410702][ T7157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.425194][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1106'. [ 247.481784][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.540772][ T7178] FAULT_INJECTION: forcing a failure. [ 247.540772][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.557935][ T7176] vhci_hcd vhci_hcd.1: invalid port number 254 [ 247.564292][ T7176] vhci_hcd vhci_hcd.1: default hub control req: a317 v0004 i00fe l0 [ 247.573123][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.4.1115 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.573230][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.573243][ T7178] Call Trace: [ 247.573252][ T7178] [ 247.573262][ T7178] __dump_stack+0x1d/0x30 [ 247.573305][ T7178] dump_stack_lvl+0x95/0xd0 [ 247.573331][ T7178] dump_stack+0x15/0x1b [ 247.573356][ T7178] should_fail_ex+0x25e/0x270 [ 247.573384][ T7178] should_fail+0xb/0x20 [ 247.573401][ T7178] should_fail_usercopy+0x1a/0x20 [ 247.573443][ T7178] _copy_from_user+0x1c/0xb0 [ 247.573470][ T7178] __sys_bpf+0x1e2/0xc30 [ 247.573500][ T7178] ? get_pid_task+0x92/0xc0 [ 247.573612][ T7178] ? vfs_write+0x820/0x990 [ 247.573658][ T7178] __x64_sys_bpf+0x69/0x80 [ 247.573749][ T7178] x64_sys_call+0x10cb/0x3020 [ 247.573828][ T7178] do_syscall_64+0x136/0x3c0 [ 247.573863][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.573954][ T7178] RIP: 0033:0x7f533269ce59 [ 247.573975][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.573998][ T7178] RSP: 002b:00007f53310f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.574019][ T7178] RAX: ffffffffffffffda RBX: 00007f5332915fa0 RCX: 00007f533269ce59 [ 247.574033][ T7178] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000012 [ 247.574047][ T7178] RBP: 00007f53310f7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.574064][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.574081][ T7178] R13: 00007f5332916038 R14: 00007f5332915fa0 R15: 00007ffd5b84c218 [ 247.574121][ T7178] [ 247.814677][ T7191] FAULT_INJECTION: forcing a failure. [ 247.814677][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.828017][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.5.1120 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.828117][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.828134][ T7191] Call Trace: [ 247.828142][ T7191] [ 247.828151][ T7191] __dump_stack+0x1d/0x30 [ 247.828177][ T7191] dump_stack_lvl+0x95/0xd0 [ 247.828273][ T7191] dump_stack+0x15/0x1b [ 247.828294][ T7191] should_fail_ex+0x25e/0x270 [ 247.828400][ T7191] should_fail+0xb/0x20 [ 247.828421][ T7191] should_fail_usercopy+0x1a/0x20 [ 247.828511][ T7191] _copy_from_user+0x1c/0xb0 [ 247.828541][ T7191] ___sys_sendmsg+0xc1/0x1e0 [ 247.828597][ T7191] __x64_sys_sendmsg+0xd4/0x160 [ 247.828664][ T7191] x64_sys_call+0x194c/0x3020 [ 247.828695][ T7191] do_syscall_64+0x136/0x3c0 [ 247.828743][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.828770][ T7191] RIP: 0033:0x7fc19805ce59 [ 247.828794][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.828821][ T7191] RSP: 002b:00007fc196aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.828921][ T7191] RAX: ffffffffffffffda RBX: 00007fc1982d5fa0 RCX: 00007fc19805ce59 [ 247.828947][ T7191] RDX: 0000000000040000 RSI: 0000200000000380 RDI: 0000000000000005 [ 247.829031][ T7191] RBP: 00007fc196aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 247.829045][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.829064][ T7191] R13: 00007fc1982d6038 R14: 00007fc1982d5fa0 R15: 00007fffa7cdab78 [ 247.829091][ T7191] [ 247.995411][ T7192] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1117'. [ 248.004774][ T7192] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1117'. [ 248.103629][ T7197] msdos: Bad value for 'uid' [ 248.113876][ T7197] msdos: Bad value for 'uid' [ 248.134235][ T7197] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 248.146743][ T7197] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.154806][ T7197] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1121: Block bitmap for bg 0 marked uninitialized [ 248.168610][ T7197] loop5: lost filesystem error report for type 5 error -117 [ 248.170551][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 248.172360][ T7197] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 248.177911][ C1] EXT4-fs (loop5): initial error at time 1781721485: ext4_read_block_bitmap_nowait:517 [ 248.177935][ C1] EXT4-fs (loop5): last error at time 1781721485: ext4_read_block_bitmap_nowait:517 [ 248.221453][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.230842][ T7197] loop5: lost filesystem error report for type 5 error -117 [ 248.234506][ T7192] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.249750][ T7197] EXT4-fs (loop5): 1 orphan inode deleted [ 248.258820][ T7199] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1123: attempt to clear invalid blocks 2 len 1 [ 248.272565][ T7199] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 248.273129][ T7197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 248.282377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 248.282398][ C0] EXT4-fs (loop1): initial error at time 1781721485: ext4_clear_blocks:876: inode 13 [ 248.282430][ C0] EXT4-fs (loop1): last error at time 1781721485: ext4_clear_blocks:876: inode 13 [ 248.311184][ T7199] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 248.324666][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 248.358318][ T7199] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1123: invalid indirect mapped block 1819239214 (level 0) [ 248.396120][ T7199] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 248.414563][ T7199] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1123: invalid indirect mapped block 1819239214 (level 1) [ 248.444407][ T7199] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 248.464488][ T7199] EXT4-fs (loop1): 1 truncate cleaned up [ 248.483686][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.497973][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.521405][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1123'. [ 248.531843][ T4456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.572115][ T7217] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.599844][ T7217] veth0_to_bond: default FDB implementation only supports local addresses [ 248.722917][ T7217] netlink: 'syz.4.1127': attribute type 2 has an invalid length. [ 248.742386][ T7217] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 248.841599][ T7217] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1127'. [ 249.325544][ T7241] msdos: Bad value for 'uid' [ 249.392041][ T7241] msdos: Bad value for 'uid' [ 249.496368][ T7241] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 249.552480][ T7241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 249.714093][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.723654][ T7241] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1134: Block bitmap for bg 0 marked uninitialized [ 249.737044][ T7241] loop4: lost filesystem error report for type 5 error -117 [ 249.737258][ T7241] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 249.744620][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 249.744650][ C1] EXT4-fs (loop4): initial error at time 1781721487: ext4_read_block_bitmap_nowait:517 [ 249.744677][ C1] EXT4-fs (loop4): last error at time 1781721487: ext4_read_block_bitmap_nowait:517 [ 249.860632][ T7241] loop4: lost filesystem error report for type 5 error -117 [ 249.860896][ T7241] EXT4-fs (loop4): 1 orphan inode deleted [ 249.884391][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 249.957555][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.570265][ T7259] set_capacity_and_notify: 7 callbacks suppressed [ 250.570319][ T7259] loop3: detected capacity change from 0 to 1024 [ 250.594284][ T7259] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 250.694662][ T7259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.781145][ T7267] FAULT_INJECTION: forcing a failure. [ 250.781145][ T7267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.801407][ T7264] vhci_hcd vhci_hcd.1: invalid port number 254 [ 250.869289][ T7264] vhci_hcd vhci_hcd.1: default hub control req: a317 v0004 i00fe l0 [ 250.966708][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.1.1137 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.966752][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.966770][ T7267] Call Trace: [ 250.966779][ T7267] [ 250.966790][ T7267] __dump_stack+0x1d/0x30 [ 250.966941][ T7267] dump_stack_lvl+0x95/0xd0 [ 250.966968][ T7267] dump_stack+0x15/0x1b [ 250.966995][ T7267] should_fail_ex+0x25e/0x270 [ 250.967023][ T7267] should_fail+0xb/0x20 [ 250.967041][ T7267] should_fail_usercopy+0x1a/0x20 [ 250.967071][ T7267] _copy_from_user+0x1c/0xb0 [ 250.967139][ T7267] ___sys_sendmsg+0xc1/0x1e0 [ 250.967170][ T7267] ? terminate_walk+0x1d5/0x200 [ 250.967206][ T7267] __sys_sendmmsg+0x185/0x320 [ 250.967315][ T7267] __x64_sys_sendmmsg+0x57/0x70 [ 250.967344][ T7267] x64_sys_call+0x27aa/0x3020 [ 250.967372][ T7267] do_syscall_64+0x136/0x3c0 [ 250.967426][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.967455][ T7267] RIP: 0033:0x7feb7fbcce59 [ 250.967471][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.967489][ T7267] RSP: 002b:00007feb7e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.967537][ T7267] RAX: ffffffffffffffda RBX: 00007feb7fe45fa0 RCX: 00007feb7fbcce59 [ 250.967581][ T7267] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 250.967598][ T7267] RBP: 00007feb7e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.967615][ T7267] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 250.967631][ T7267] R13: 00007feb7fe46038 R14: 00007feb7fe45fa0 R15: 00007ffe52b67a08 [ 250.967656][ T7267] [ 252.217800][ T7280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1144'. [ 252.324837][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.338033][ T7284] loop1: detected capacity change from 0 to 512 [ 252.463473][ T7280] loop0: detected capacity change from 0 to 512 [ 252.504604][ T7280] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 252.523928][ T7280] EXT4-fs (loop0): 1 truncate cleaned up [ 252.543272][ T7280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.685119][ T28] kauditd_printk_skb: 959 callbacks suppressed [ 252.685211][ T28] audit: type=1400 audit(1781721490.018:6916): avc: denied { name_bind } for pid=7289 comm="syz.3.1148" src=20258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 252.734707][ T7284] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1147: attempt to clear invalid blocks 2 len 1 [ 252.807010][ T7278] loop4: detected capacity change from 0 to 512 [ 252.820677][ T7284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 252.830555][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 252.846207][ C0] EXT4-fs (loop1): initial error at time 1781721490: ext4_clear_blocks:876: inode 13 [ 252.855741][ C0] EXT4-fs (loop1): last error at time 1781721490: ext4_clear_blocks:876: inode 13 [ 252.890782][ T7284] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 252.905759][ T7284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1147: invalid indirect mapped block 1819239214 (level 0) [ 252.928935][ T7284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 253.020121][ T7284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1147: invalid indirect mapped block 1819239214 (level 1) [ 253.053706][ T7278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 253.062748][ T7278] System zones: 1-12 [ 253.067625][ T7284] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 253.068131][ T7284] EXT4-fs (loop1): 1 truncate cleaned up [ 253.094004][ T7284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.106894][ T7278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1145: error while reading EA inode 32 err=-116 [ 253.124582][ T7278] loop4: lost filesystem error report for type 5 error -117 [ 253.126145][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 253.133546][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 253.133563][ C1] EXT4-fs (loop4): initial error at time 1781721490: ext4_xattr_inode_iget:446 [ 253.133609][ C1] EXT4-fs (loop4): last error at time 1781721490: ext4_xattr_inode_iget:446 [ 253.167951][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 253.176200][ T7278] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 253.190428][ T7278] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 253.205008][ T7278] EXT4-fs (loop4): 1 orphan inode deleted [ 253.236411][ T7278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.425379][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.444455][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.666347][ T28] audit: type=1400 audit(1781721490.998:6917): avc: denied { allowed } for pid=7300 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.710630][ T28] audit: type=1326 audit(1781721491.018:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.760366][ T28] audit: type=1326 audit(1781721491.018:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.807345][ T28] audit: type=1326 audit(1781721491.018:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.832898][ T28] audit: type=1326 audit(1781721491.018:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.834958][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.858491][ T28] audit: type=1326 audit(1781721491.068:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.893293][ T28] audit: type=1326 audit(1781721491.068:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.918844][ T28] audit: type=1326 audit(1781721491.068:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 253.944415][ T28] audit: type=1326 audit(1781721491.068:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0596fce59 code=0x7ffc0000 [ 254.019940][ T7310] program syz.4.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.031110][ T7306] loop1: detected capacity change from 0 to 512 [ 254.046201][ T7313] loop3: detected capacity change from 0 to 128 [ 254.074259][ T7315] loop0: detected capacity change from 0 to 1024 [ 254.083756][ T7306] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 254.098927][ T7306] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 254.133571][ T7306] EXT4-fs (loop1): 1 truncate cleaned up [ 254.149172][ T7320] netlink: 'syz.4.1157': attribute type 21 has an invalid length. [ 254.154843][ T7306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.170255][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 254.199405][ T7320] loop4: detected capacity change from 0 to 512 [ 254.214543][ T7322] loop0: detected capacity change from 0 to 512 [ 254.226091][ T7320] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 254.246721][ T7306] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1151: path /218/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 254.280858][ T7320] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 254.290291][ T7320] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1157: corrupted in-inode xattr: overlapping e_value [ 254.304164][ T7320] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.318999][ T7322] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 254.323206][ T7320] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1157: couldn't read orphan inode 15 (err -117) [ 254.346460][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 254.349772][ T7322] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 254.354760][ C0] EXT4-fs (loop4): initial error at time 1781721491: ext4_iget_extra_inode:5128: inode 15 [ 254.365578][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.372753][ C0] EXT4-fs (loop4): last error at time 1781721491: ext4_iget_extra_inode:5128: inode 15 [ 254.397700][ T7320] loop4: lost filesystem error report for type 5 error -117 [ 254.402163][ T7322] EXT4-fs (loop0): 1 truncate cleaned up [ 254.427048][ T7332] loop1: detected capacity change from 0 to 512 [ 254.434139][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.446910][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.464814][ T7332] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1161: attempt to clear invalid blocks 2 len 1 [ 254.479402][ T7332] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 254.480275][ T7332] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 254.489522][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 254.489547][ C0] EXT4-fs (loop1): initial error at time 1781721491: ext4_clear_blocks:876: inode 13 [ 254.489583][ C0] EXT4-fs (loop1): last error at time 1781721491: ext4_clear_blocks:876: inode 13 [ 254.518311][ T7320] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 254.523262][ T7332] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 254.523265][ T7320] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 254.546272][ T7322] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 4: comm syz.0.1158: path /244/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 254.580759][ T7332] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1161: invalid indirect mapped block 1819239214 (level 0) [ 254.592769][ T7335] raw_sendmsg: syz.5.1162 forgot to set AF_INET. Fix it! [ 254.595174][ T7332] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 254.602147][ T7332] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1161: invalid indirect mapped block 1819239214 (level 1) [ 254.625501][ T7332] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 254.626002][ T7332] EXT4-fs (loop1): 1 truncate cleaned up [ 254.641640][ T7332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.665704][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.696747][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.709223][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1161'. [ 255.929722][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.943152][ T7370] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1173'. [ 255.986160][ T7374] set_capacity_and_notify: 1 callbacks suppressed [ 255.986241][ T7374] loop1: detected capacity change from 0 to 512 [ 256.001343][ T7370] veth0_to_bond: default FDB implementation only supports local addresses [ 256.058471][ T7374] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1175: corrupted in-inode xattr: e_value size too large [ 256.088622][ T7378] FAULT_INJECTION: forcing a failure. [ 256.088622][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.241213][ T7374] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.241374][ T7374] EXT4-fs (loop1): Remounting filesystem read-only [ 256.250623][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 256.250648][ C0] EXT4-fs (loop1): initial error at time 1781721493: ext4_iget_extra_inode:5128: inode 15 [ 256.250674][ C0] EXT4-fs (loop1): last error at time 1781721493: ext4_iget_extra_inode:5128: inode 15 [ 256.716086][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.3.1176 Not tainted syzkaller #0 PREEMPT(lazy) [ 256.716124][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.716206][ T7378] Call Trace: [ 256.716215][ T7378] [ 256.716225][ T7378] __dump_stack+0x1d/0x30 [ 256.716257][ T7378] dump_stack_lvl+0x95/0xd0 [ 256.716290][ T7378] dump_stack+0x15/0x1b [ 256.716347][ T7378] should_fail_ex+0x25e/0x270 [ 256.716444][ T7378] should_fail+0xb/0x20 [ 256.716468][ T7378] should_fail_usercopy+0x1a/0x20 [ 256.716498][ T7378] _copy_to_user+0x20/0xa0 [ 256.716527][ T7378] simple_read_from_buffer+0xb5/0x130 [ 256.716644][ T7378] proc_fail_nth_read+0x10e/0x150 [ 256.716684][ T7378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.716782][ T7378] vfs_read+0x18e/0x7c0 [ 256.716810][ T7378] ? __rcu_read_unlock+0x4e/0x70 [ 256.716877][ T7378] ? __fget_files+0x184/0x1c0 [ 256.716904][ T7378] ? mutex_lock+0x57/0x90 [ 256.716952][ T7378] ksys_read+0xdc/0x1a0 [ 256.716985][ T7378] __x64_sys_read+0x40/0x50 [ 256.717019][ T7378] x64_sys_call+0x2886/0x3020 [ 256.717102][ T7378] do_syscall_64+0x136/0x3c0 [ 256.717141][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.717231][ T7378] RIP: 0033:0x7fd0596bd68e [ 256.717267][ T7378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.717299][ T7378] RSP: 002b:00007fd058156fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.717325][ T7378] RAX: ffffffffffffffda RBX: 00007fd0581576c0 RCX: 00007fd0596bd68e [ 256.717342][ T7378] RDX: 000000000000000f RSI: 00007fd0581570a0 RDI: 0000000000000007 [ 256.717355][ T7378] RBP: 00007fd058157090 R08: 0000000000000000 R09: 0000000000000000 [ 256.717367][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.717378][ T7378] R13: 00007fd059976038 R14: 00007fd059975fa0 R15: 00007fff748b5c78 [ 256.717433][ T7378] [ 256.915788][ T7370] netlink: 'syz.0.1173': attribute type 2 has an invalid length. [ 256.924148][ T7370] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 256.931969][ T7370] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1173'. [ 256.992232][ T7374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.584742][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.852325][ T7412] loop1: detected capacity change from 0 to 512 [ 257.885742][ T7412] ext4: Unknown parameter 'pcr' [ 257.934359][ T7414] loop5: detected capacity change from 0 to 2048 [ 257.970242][ T7412] syzkaller0: entered promiscuous mode [ 257.993661][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 257.993678][ T28] audit: type=1400 audit(1781721495.328:6948): avc: denied { connect } for pid=7417 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.026624][ T7412] syzkaller0: entered allmulticast mode [ 258.039722][ T7416] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1190'. [ 258.039743][ T7416] veth0_to_bond: default FDB implementation only supports local addresses [ 258.059638][ T7414] Alternate GPT is invalid, using primary GPT. [ 258.059746][ T7414] loop5: p1 p2 p3 [ 258.059753][ T7414] loop5: partition table partially beyond EOD, truncated [ 258.134677][ T7416] netlink: 'syz.0.1190': attribute type 2 has an invalid length. [ 258.134707][ T7416] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 258.134737][ T7416] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1190'. [ 258.135390][ T28] audit: type=1400 audit(1781721495.348:6949): avc: denied { setopt } for pid=7417 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.135422][ T28] audit: type=1400 audit(1781721495.348:6950): avc: denied { read write } for pid=7417 comm="syz.3.1189" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.135494][ T28] audit: type=1400 audit(1781721495.348:6951): avc: denied { open } for pid=7417 comm="syz.3.1189" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.135585][ T28] audit: type=1400 audit(1781721495.368:6952): avc: denied { connect } for pid=7417 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.135617][ T28] audit: type=1400 audit(1781721495.368:6953): avc: denied { write } for pid=7417 comm="syz.3.1189" laddr=fe80::b lport=41872 faddr=::1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.293646][ T7422] FAULT_INJECTION: forcing a failure. [ 258.293646][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.293708][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.0.1191 Not tainted syzkaller #0 PREEMPT(lazy) [ 258.293756][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.293772][ T7422] Call Trace: [ 258.293780][ T7422] [ 258.293791][ T7422] __dump_stack+0x1d/0x30 [ 258.293821][ T7422] dump_stack_lvl+0x95/0xd0 [ 258.293953][ T7422] dump_stack+0x15/0x1b [ 258.293972][ T7422] should_fail_ex+0x25e/0x270 [ 258.293993][ T7422] should_fail+0xb/0x20 [ 258.294049][ T7422] should_fail_usercopy+0x1a/0x20 [ 258.294124][ T7422] _copy_from_user+0x1c/0xb0 [ 258.294234][ T7422] ___sys_sendmsg+0xc1/0x1e0 [ 258.294287][ T7422] __x64_sys_sendmsg+0xd4/0x160 [ 258.294330][ T7422] x64_sys_call+0x194c/0x3020 [ 258.294386][ T7422] do_syscall_64+0x136/0x3c0 [ 258.294428][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.294459][ T7422] RIP: 0033:0x7f0b286cce59 [ 258.294480][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.294504][ T7422] RSP: 002b:00007f0b27127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.294525][ T7422] RAX: ffffffffffffffda RBX: 00007f0b28945fa0 RCX: 00007f0b286cce59 [ 258.294539][ T7422] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000009 [ 258.294563][ T7422] RBP: 00007f0b27127090 R08: 0000000000000000 R09: 0000000000000000 [ 258.294576][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.294588][ T7422] R13: 00007f0b28946038 R14: 00007f0b28945fa0 R15: 00007ffc466e6048 [ 258.294665][ T7422] [ 258.311705][ T28] audit: type=1400 audit(1781721495.638:6954): avc: denied { accept } for pid=7417 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.311741][ T28] audit: type=1400 audit(1781721495.638:6955): avc: denied { ioctl } for pid=7417 comm="syz.3.1189" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.621573][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.697785][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1195'. [ 258.725496][ T7433] loop0: detected capacity change from 0 to 512 [ 258.737633][ T7433] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 258.737657][ T7433] EXT4-fs (loop0): group descriptors corrupted! [ 258.933824][ T7443] FAULT_INJECTION: forcing a failure. [ 258.933824][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.947078][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.5.1199 Not tainted syzkaller #0 PREEMPT(lazy) [ 258.947235][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.947253][ T7443] Call Trace: [ 258.947262][ T7443] [ 258.947273][ T7443] __dump_stack+0x1d/0x30 [ 258.947304][ T7443] dump_stack_lvl+0x95/0xd0 [ 258.947329][ T7443] dump_stack+0x15/0x1b [ 258.947412][ T7443] should_fail_ex+0x25e/0x270 [ 258.947441][ T7443] should_fail+0xb/0x20 [ 258.947523][ T7443] should_fail_usercopy+0x1a/0x20 [ 258.947552][ T7443] _copy_from_user+0x1c/0xb0 [ 258.947609][ T7443] __sys_bpf+0x1e2/0xc30 [ 258.947639][ T7443] ? get_pid_task+0x92/0xc0 [ 258.947692][ T7443] ? vfs_write+0x820/0x990 [ 258.947736][ T7443] __x64_sys_bpf+0x69/0x80 [ 258.947769][ T7443] x64_sys_call+0x10cb/0x3020 [ 258.947798][ T7443] do_syscall_64+0x136/0x3c0 [ 258.947830][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.947927][ T7443] RIP: 0033:0x7fc19805ce59 [ 258.947949][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.947988][ T7443] RSP: 002b:00007fc196aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.948010][ T7443] RAX: ffffffffffffffda RBX: 00007fc1982d5fa0 RCX: 00007fc19805ce59 [ 258.948096][ T7443] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 258.948113][ T7443] RBP: 00007fc196aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 258.948162][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.948178][ T7443] R13: 00007fc1982d6038 R14: 00007fc1982d5fa0 R15: 00007fffa7cdab78 [ 258.948204][ T7443] [ 259.123812][ T7449] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1201'. [ 259.218381][ T7454] FAULT_INJECTION: forcing a failure. [ 259.218381][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.245382][ T7449] veth0_to_bond: default FDB implementation only supports local addresses [ 259.256929][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.1.1203 Not tainted syzkaller #0 PREEMPT(lazy) [ 259.256970][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.256987][ T7454] Call Trace: [ 259.256997][ T7454] [ 259.257006][ T7454] __dump_stack+0x1d/0x30 [ 259.257036][ T7454] dump_stack_lvl+0x95/0xd0 [ 259.257056][ T7454] dump_stack+0x15/0x1b [ 259.257078][ T7454] should_fail_ex+0x25e/0x270 [ 259.257103][ T7454] should_fail+0xb/0x20 [ 259.257120][ T7454] should_fail_usercopy+0x1a/0x20 [ 259.257173][ T7454] _copy_from_user+0x1c/0xb0 [ 259.257210][ T7454] ___sys_sendmsg+0xc1/0x1e0 [ 259.257294][ T7454] __x64_sys_sendmsg+0xd4/0x160 [ 259.257388][ T7454] x64_sys_call+0x194c/0x3020 [ 259.257419][ T7454] do_syscall_64+0x136/0x3c0 [ 259.257521][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.257550][ T7454] RIP: 0033:0x7feb7fbcce59 [ 259.257571][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.257594][ T7454] RSP: 002b:00007feb7e61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.257680][ T7454] RAX: ffffffffffffffda RBX: 00007feb7fe45fa0 RCX: 00007feb7fbcce59 [ 259.257697][ T7454] RDX: 00000000000400d4 RSI: 0000200000000240 RDI: 0000000000000003 [ 259.257709][ T7454] RBP: 00007feb7e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.257721][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.257789][ T7454] R13: 00007feb7fe46038 R14: 00007feb7fe45fa0 R15: 00007ffe52b67a08 [ 259.257827][ T7454] [ 259.439628][ T7452] netlink: 'syz.4.1201': attribute type 2 has an invalid length. [ 259.448515][ T7452] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 259.460544][ T7452] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1201'. [ 259.502526][ T7458] netlink: 'syz.4.1205': attribute type 13 has an invalid length. [ 259.504304][ T28] audit: type=1400 audit(1781721496.828:6956): avc: denied { connect } for pid=7457 comm="syz.4.1205" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.544466][ T28] audit: type=1326 audit(1781721496.838:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.4.1205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533269ce59 code=0x7ffc0000 [ 260.069093][ T7470] FAULT_INJECTION: forcing a failure. [ 260.069093][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.129347][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.1.1209 Not tainted syzkaller #0 PREEMPT(lazy) [ 260.129387][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.129400][ T7470] Call Trace: [ 260.129406][ T7470] [ 260.129502][ T7470] __dump_stack+0x1d/0x30 [ 260.129527][ T7470] dump_stack_lvl+0x95/0xd0 [ 260.129547][ T7470] dump_stack+0x15/0x1b [ 260.129570][ T7470] should_fail_ex+0x25e/0x270 [ 260.129598][ T7470] should_fail+0xb/0x20 [ 260.129623][ T7470] should_fail_usercopy+0x1a/0x20 [ 260.129648][ T7470] _copy_from_user+0x1c/0xb0 [ 260.129675][ T7470] do_tcp_setsockopt+0x440/0x16c0 [ 260.129703][ T7470] ? selinux_socket_setsockopt+0x1ea/0x220 [ 260.129730][ T7470] tcp_setsockopt+0x51/0xb0 [ 260.129756][ T7470] sock_common_setsockopt+0x69/0x80 [ 260.129910][ T7470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 260.129934][ T7470] __sys_setsockopt+0x184/0x200 [ 260.129994][ T7470] __x64_sys_setsockopt+0x64/0x80 [ 260.130025][ T7470] x64_sys_call+0x2327/0x3020 [ 260.130048][ T7470] do_syscall_64+0x136/0x3c0 [ 260.130144][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.130168][ T7470] RIP: 0033:0x7feb7fbcce59 [ 260.130184][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.130202][ T7470] RSP: 002b:00007feb7e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.130222][ T7470] RAX: ffffffffffffffda RBX: 00007feb7fe45fa0 RCX: 00007feb7fbcce59 [ 260.130246][ T7470] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 260.130262][ T7470] RBP: 00007feb7e61f090 R08: 0000000000000004 R09: 0000000000000000 [ 260.130279][ T7470] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 260.130296][ T7470] R13: 00007feb7fe46038 R14: 00007feb7fe45fa0 R15: 00007ffe52b67a08 [ 260.130321][ T7470] [ 260.152846][ T7429] program syz.3.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.481354][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.482903][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.594709][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.613719][ T7480] loop4: detected capacity change from 0 to 512 [ 260.646781][ T7480] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 260.646814][ T7480] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 260.647493][ T7480] EXT4-fs (loop4): 1 truncate cleaned up [ 260.648069][ T7480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.692897][ T7480] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 4: comm syz.4.1214: path /127/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 260.696558][ T7487] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 260.714698][ T7487] loop1: detected capacity change from 0 to 1024 [ 260.715474][ T7487] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.736454][ T7487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.762205][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.984033][ T3584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.331881][ T7496] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 261.331881][ T7496] program syz.4.1217 not setting count and/or reply_len properly [ 261.770871][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.957631][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.598273][ T7524] loop0: detected capacity change from 0 to 512 [ 263.670030][ T7524] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 263.678720][ T7524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 263.687902][ T7524] System zones: 0-1, 15-15, 18-18, 34-34 [ 263.696689][ T7524] EXT4-fs (loop0): orphan cleanup on readonly fs [ 263.704654][ T7524] __quota_error: 132 callbacks suppressed [ 263.704720][ T7524] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 263.721260][ T7524] EXT4-fs warning (device loop0): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 263.736640][ T7524] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 263.750031][ T7524] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1221: bad orphan inode 16 [ 263.761306][ T7524] loop0: lost filesystem error report for type 5 error -117 [ 263.763082][ T7524] ext4_test_bit(bit=15, block=18) = 1 [ 263.771069][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 263.771181][ C1] EXT4-fs (loop0): initial error at time 1781721501: ext4_orphan_get:1425 [ 263.771311][ C1] EXT4-fs (loop0): last error at time 1781721501: ext4_orphan_get:1425 [ 263.801982][ T7524] is_bad_inode(inode)=0 [ 263.806701][ T7524] NEXT_ORPHAN(inode)=0 [ 263.811262][ T7524] max_ino=32 [ 263.814788][ T7524] i_nlink=2 [ 263.828765][ T7524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.992848][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.068755][ T7530] loop5: detected capacity change from 0 to 512 [ 264.148871][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.289726][ T7543] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 264.289726][ T7543] The task syz.5.1226 (7543) triggered the difference, watch for misbehavior. [ 264.356581][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 264.390844][ T7500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.408613][ T28] audit: type=1400 audit(1781721501.738:7090): avc: denied { write } for pid=7529 comm="syz.5.1226" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 265.133848][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.087575][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.765051][ T7553] loop5: detected capacity change from 0 to 512 [ 266.864919][ T7553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.877472][ T7553] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.907822][ T28] audit: type=1400 audit(1781721504.238:7091): avc: denied { read } for pid=7556 comm="syz.1.1232" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 266.993263][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.052298][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.087088][ T28] audit: type=1400 audit(1781721504.238:7092): avc: denied { open } for pid=7556 comm="syz.1.1232" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.114521][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.129448][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.197933][ T7559] syz.1.1232 (7559) used greatest stack depth: 8784 bytes left [ 267.217673][ T28] audit: type=1400 audit(1781721504.268:7093): avc: denied { ioctl } for pid=7556 comm="syz.1.1232" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.429937][ T28] audit: type=1400 audit(1781721504.278:7094): avc: denied { name_connect } for pid=7556 comm="syz.1.1232" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 267.510590][ T28] audit: type=1400 audit(1781721504.488:7095): avc: denied { getopt } for pid=7556 comm="syz.1.1232" laddr=fe80::13 lport=37234 faddr=fe80::3a fport=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 267.650812][ T7576] netlink: 'syz.1.1237': attribute type 2 has an invalid length. [ 267.658959][ T7576] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 267.669002][ T7576] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1237'. [ 267.724537][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.777704][ T7575] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1237'. [ 267.787032][ T7575] veth0_to_bond: default FDB implementation only supports local addresses [ 268.055306][ T7553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.144786][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.236629][ T7591] loop0: detected capacity change from 0 to 1764 [ 268.274720][ T2990] ================================================================== [ 268.282867][ T2990] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 268.290810][ T2990] [ 268.293163][ T2990] write to 0xffff8881089bb000 of 4 bytes by task 4520 on cpu 1: [ 268.300826][ T2990] d_make_discardable+0x4f/0x90 [ 268.305715][ T2990] simple_unlink+0x68/0x80 [ 268.310210][ T2990] shmem_unlink+0x12d/0x140 [ 268.314752][ T2990] vfs_unlink+0x1c3/0x490 [ 268.319123][ T2990] filename_unlinkat+0x1dc/0x410 [ 268.324110][ T2990] __se_sys_unlink+0x2b/0xe0 [ 268.328755][ T2990] __x64_sys_unlink+0x1f/0x30 [ 268.333488][ T2990] x64_sys_call+0x2eb6/0x3020 [ 268.338242][ T2990] do_syscall_64+0x136/0x3c0 [ 268.342883][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.348816][ T2990] [ 268.351164][ T2990] read to 0xffff8881089bb000 of 4 bytes by task 2990 on cpu 0: [ 268.358726][ T2990] step_into_slowpath+0x139/0x4c0 [ 268.363792][ T2990] path_lookupat+0x2eb/0x4c0 [ 268.368405][ T2990] filename_lookup+0x18f/0x390 [ 268.373190][ T2990] do_readlinkat+0x74/0x2f0 [ 268.377718][ T2990] __x64_sys_readlink+0x47/0x60 [ 268.382595][ T2990] x64_sys_call+0x2b51/0x3020 [ 268.387301][ T2990] do_syscall_64+0x136/0x3c0 [ 268.391920][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.397866][ T2990] [ 268.400208][ T2990] value changed: 0x08300080 -> 0x00004080 [ 268.405955][ T2990] [ 268.408293][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 268.414463][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 268.423338][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.433409][ T2990] ================================================================== [ 268.631946][ T7603] mmap: syz.0.1243 (7603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 269.182190][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.141679][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.220825][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.781050][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.260702][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.311010][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.340800][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.820971][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.380865][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.431361][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.460994][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.860863][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.500754][ T283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog