last executing test programs: 6m11.6909754s ago: executing program 2 (id=549): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x10ecc8, 0x1224, 0xfffffdff, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syncfs(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x44, 0x80, 0x7, 0x0, 0x861d, 0x480, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x110084, 0x2, 0x92b8, 0x7, 0x5, 0x81, 0x5, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18dc00000000000000004b00"], 0x18}, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) close(r0) gettid() unshare(0x6020400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1a43}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) 6m11.387263774s ago: executing program 2 (id=553): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nomblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf2) pipe2(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000001d40), 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newqdisc={0x668, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x638, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xfff}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "0c970b6bcb62c88383b16895e5b8c29fd8ce21cf68d0a2eecb283fb0798996c5158611f568c1f712c2f8d0fd5cb79305a7e9e03f557c6d086d100624c8f320758ee7ad043d19ee89217bdc571d6200df8267f75b4024d301b08a0c161fc0fbaa65dc8caf3d24c9b1ece8a9f6a0a1981d22376f4cc688ec9dfcd85879fe0f915b2eb057add39543bc17448feb8966236a7b0f7c237fc3e4ba905cb8d2b8848023278460f4f445988b6780220f3f3472970b02573d41a7a4d8c59de72c770e54e587943a051a3cd9a0c01625d131318223253dea73ccdecaa4f971e5f2c6548a4ec40388911b88ec2c42bb1f924f9a807a78ede2f6c1175fc08e4a41c9518641dc"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3ff, 0x4, 0x16, 0x1a, 0x1c, 0x20, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x668}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_skbmod={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r6, &(0x7f0000000b80)=ANY=[], 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f00000002c0)) fallocate(r0, 0x3, 0x6ae8, 0xf3d) 6m10.951166964s ago: executing program 2 (id=558): unshare(0x2a020480) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 6m10.497471515s ago: executing program 2 (id=566): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001448b9f333000000030000000000000001000006040000000100000006000000005f00"], 0x0, 0x2f, 0x0, 0x0, 0x4}, 0x28) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r4 = socket(0x27, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x4) 6m10.357186942s ago: executing program 2 (id=568): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@alu={0x0, 0x0, 0x5, 0x5, 0xa, 0x8, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m9.607666957s ago: executing program 2 (id=573): sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x24000000) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="8379eba7aba5122f76b5daed556bf7de8718037811131465d276f4e0ee41bcf31ba31f1627808c04e6f7eab886d247fead89c226eb1d584cc08a4ddc9145cb9398fba4eb9f0157460b8c527fce0a72e8f33b9f09166a7be595a9b8f54291ef5497fef261dd7b047ca260c4d9270f8f6cb8d078", @ANYBLOB="b7c4e1eb581d889a34b8e58cc3c41d1a07862d8b6f276c262fc13371877ec634d41c3af47addf8c4d1e92629a1", @ANYRES64=r1, @ANYRESDEC=r0], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000750000000000000002000400850000002900000095"], &(0x7f0000000040)='syzkaller\x00', 0x4a9f, 0x0, 0x0, 0x40f00}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="147cc9d42c00007c294d67d8af01408d947fa1c8aac9c900c75270fdcd7878ef4fc20b6bf3eb0001f6dd20177f9b186e5cbfa9a2fb26ceb17744b3076db1b8f4a8fe29b61ffd2100"/91], 0x14}, 0x1, 0x0, 0x0, 0x40830}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x80}, 0x28) sendmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$kcm(0x21, 0x2, 0xa) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) 6m9.55653561s ago: executing program 32 (id=573): sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x24000000) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="8379eba7aba5122f76b5daed556bf7de8718037811131465d276f4e0ee41bcf31ba31f1627808c04e6f7eab886d247fead89c226eb1d584cc08a4ddc9145cb9398fba4eb9f0157460b8c527fce0a72e8f33b9f09166a7be595a9b8f54291ef5497fef261dd7b047ca260c4d9270f8f6cb8d078", @ANYBLOB="b7c4e1eb581d889a34b8e58cc3c41d1a07862d8b6f276c262fc13371877ec634d41c3af47addf8c4d1e92629a1", @ANYRES64=r1, @ANYRESDEC=r0], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000750000000000000002000400850000002900000095"], &(0x7f0000000040)='syzkaller\x00', 0x4a9f, 0x0, 0x0, 0x40f00}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="147cc9d42c00007c294d67d8af01408d947fa1c8aac9c900c75270fdcd7878ef4fc20b6bf3eb0001f6dd20177f9b186e5cbfa9a2fb26ceb17744b3076db1b8f4a8fe29b61ffd2100"/91], 0x14}, 0x1, 0x0, 0x0, 0x40830}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x80}, 0x28) sendmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$kcm(0x21, 0x2, 0xa) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) 5m4.57739997s ago: executing program 0 (id=1131): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0xffffffff) ptrace$pokeuser(0x6, r6, 0x388, 0x40000000) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) 5m4.126194751s ago: executing program 0 (id=1137): socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x100141c, &(0x7f0000000200)={0x0, 0x8132, 0x1, 0x0, 0x139}, 0x0, 0x0, 0x0) eventfd2(0xbd49, 0x800) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) setns(0xc9, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000110000007161311e0000d8ca2c626770", @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000002000000091118100000000003c107d2227529531e9349500000000000000de3963b1f859a21d8b079597be0c3f8fcfda96ea1cbcd3e6112e7a851b5fb91ec32742d51318b367e1078fa31ec40cd279a1c58bb7c080620c4118eb8452e0823a9027888647e96ecab626088f63dfa7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mknodat(0xffffffffffffffff, &(0x7f0000000340)='./trace/trace\x00', 0x1000, 0x9) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0xfd, 0x104}}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800010000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m3.899338551s ago: executing program 0 (id=1141): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 5m3.097307059s ago: executing program 0 (id=1148): syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x10400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x3}, 0x0, 0x6, 0x11000, 0x4, 0x180003, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='off', 0x3) write(r1, &(0x7f0000000180)='on', 0x2) 5m2.717505416s ago: executing program 0 (id=1150): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x552, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @mcast2, 0xf}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x3, 0x4}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000004378919f63a6a47000000002000000000000000000000203000000000000000000000b000000"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000ee", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x4) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x804) mlockall(0x7) ioctl$sock_ifreq(r1, 0x891e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) 5m2.687117378s ago: executing program 33 (id=1150): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x552, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @mcast2, 0xf}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x3, 0x4}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000004378919f63a6a47000000002000000000000000000000203000000000000000000000b000000"], 0x0, 0x3e}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000ee", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x4) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x804) mlockall(0x7) ioctl$sock_ifreq(r1, 0x891e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) 4m51.600102517s ago: executing program 5 (id=1232): socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000002000800850000003600000a00000002000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 4m51.459563903s ago: executing program 5 (id=1234): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xc, 0x102001) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setns(0xc9, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x7, 0x8}) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) 4m50.585570244s ago: executing program 5 (id=1240): socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fffffbfffffffff, 0x3}, 0x10bcc8, 0x8000, 0x2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x27fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x10, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xb1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xbe}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7ffe}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x88ada0d}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7fff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008011) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x4}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) write(r2, &(0x7f0000001f00)="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", 0x39d) 4m50.537504996s ago: executing program 5 (id=1242): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f1c0000000000000007000000", @ANYRES32=r1], 0x24}}, 0x0) 4m50.499563858s ago: executing program 5 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000009500002400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="010025bd70010000df252000000008000300", @ANYRES32, @ANYBLOB="0c0006000000f400", @ANYRES32, @ANYBLOB="000800030000000000000000000000002eb6ce6569b292aba0e0fa24219f124b9599ba4f3c944aea6f93044d8df1f1cce39eb11dc54d6f38", @ANYRES32=r5, @ANYBLOB="1c002d800500040000000000080003000000000008000200010000000c00060000000000000000002c002d80050004000100000008000200010000000800020001000000050001000600000005000100040000001c002d8005000400000000000800030008000000050004000000000024002d8005000100030000000500010006000000080002"], 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x24000084) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x40, 0x800, 0x7f, {{0x24, 0x4, 0x0, 0x8, 0x90, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x36, [@multicast1, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0x6, [{@broadcast, 0x6}, {@loopback, 0xfffffffe}, {@multicast1, 0x8d61}, {@loopback, 0xe44}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@initdev={0xac, 0x1e, 0x6, 0x0}, 0x4}, {@private=0xa010100, 0x80000000}]}, @ra={0x94, 0x4}, @generic={0xfbc05755bfc17a31, 0x6, "9641e70c"}, @ssrr={0x89, 0x2b, 0x86, [@local, @rand_addr=0x64010100, @multicast2, @local, @empty, @multicast1, @local, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@getqdisc={0x34, 0x26, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0x5, 0xf}, {0x6, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048080}, 0x4051) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) 4m49.60126371s ago: executing program 5 (id=1244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nomblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pipe2(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000001d40), 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_skbmod={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r6, &(0x7f0000000b80)=ANY=[], 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f00000002c0)) fallocate(r0, 0x3, 0x6ae8, 0xf3d) 4m34.611606451s ago: executing program 34 (id=1244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nomblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$eJzs3c9rHGUfAPDvbHbTn+/bFEp5+yJS6MFK7aZJ/FHBQz2KFgvquYZkG0o23ZLdlCYWbA/24kWKIGJBvOvdg4fiRW/+FQUtFCmhgl5WZjObbJJNskk3Tdr9fGCS55lndp/5zszz8Mw+u0wAPet4+icXcSwivkgiDrWU5SMrPL6w3fyjG2PpkkS9/sGfSSTZuub2Sfb/QJb5X0T8/FnEqdzqequzc5Oj5XJpOssP1qauDlZn505fnhqdKE2UrgyPjJx9bWT4zTde71qsL1/46+v3771z9vMT81/98ODwnSTOxcGsrDWOTdmzLHezNXO8Xs+OSSHOrXjZ0JYq272Snd4BtqQva+eFiDhWOFRotnrg+fdpRNSBHpVssv3v0V/Ac6I5Dmje22/5PvgZ9fDthRug1fHnFz4bib2Ne6P988myO6P0fnegC/Wndfz4x9076RJP8jkEwCbdvBURZ/L51f1fkvV/W3emg21W1qH/g6fnXjr+eaXd+Ce3OP6JNuOfA23a7lZs3P5zD7pQzZrS8d9bbce/i5NWA31Z7j+NMV8huXS5XEr7tv9GxMko7Enz683nnJ2/X1+rrHX8ly5p/c2xYLYfD/LL55hifLQ2+iQxt3p4K+L/bce/yeL5T9qc//R4fNRhHUdLd19cq2zj+LdX/buIl9qe/6UZrWT9+cnBxvUw2LwqVnt8++hva9XfPv5fftqGUNtKz//+FfH3N0oW4x9IWudrq5uv49u9/5TWKluIP61hc9d/f/JhI92frbs+WqtND0X0J++tXj+89Npmvrl9Gv/JE+v3f+2u/30R8XGH8d8+8v0L68e/c9d/Gv/4+tf/ivO/+cT9dz/5Zq36O+v/Xm2kTmZrOun/Ot3BJzl2AAAAAAAAsNvkIuJgJLli7M3SuVyxuPD9jiOxP1euVGunLlVmroxH47eyA1HINWe6D7V8H2Io+z5sMz+8Ij8SEYcj4su+fY18caxSHt/p4AEAAAAAAAAAAAAAAAAAAGCXOLD4+/9Y9vv/1O99O713wLbLLzz/G+hBGz7yvxtPegJ2pQ3bP/Dc0v6hd2n/0Lu0f+hJjSk+7R96l/YPvUv7h96l/QMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXXTh/Pl3q849ujKX58WuzM5OVa6fHS9XJ4tTMWHGsMn21OFGpTJRLxbHK1EbvV65Urg4Nx8z1wVqpWhuszs5dnKrMXKldvDw1OlG6WPKccQAAAAAAAAAAAAAAAAAAAFitOjs3OVoul6a7kCiUy6VcRHSycUSXKn3mEn83Eo/rC7byPul5u5nv7DhvTyKJpTX5XXFUtzfx6+7Yjaea2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/BsAAP//2sc0sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pipe2(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000001d40), 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_skbmod={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r6, &(0x7f0000000b80)=ANY=[], 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f00000002c0)) fallocate(r0, 0x3, 0x6ae8, 0xf3d) 6.423577089s ago: executing program 3 (id=3693): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x129d1, 0x0, 0x62f, 0x0, 0x8000000, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.404476777s ago: executing program 3 (id=3703): openat(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 3.61988999s ago: executing program 1 (id=3715): getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xa0000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x1) getdents64(r5, &(0x7f0000000540)=""/1000, 0x3e8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 3.502019916s ago: executing program 3 (id=3717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) fcntl$setlease(r1, 0x400, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000100000000000700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500"/81], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x6, 0x17, 0x0, &(0x7f00000000c0)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.301771035s ago: executing program 3 (id=3719): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14413, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$eJzs289qE10Yx/Ff+/a1tbWd+K/agvigG90MbbyCIC2IAaU2ooLC1E40ZExKZqhExHbnVvAuikt3ingD3bjyAtx1I7jpQhzJZNombUS6sIP2+9mcp5z+wjk5T8JZZDbuvHpSLYdu2YvU32fql1a1KeVaVaovHfuT+og6rery62+fz926e+96oVicmTObLcxfyZvZ2PkPT5+/ufAxGrn9duzdoNZzDza+5r+sj69PbPyYf1wJrRJarR6ZZwv1euQtBL4tVsKqa3Yz8L3Qt0ot9Btd8+WgvrTUNK+2ODq81PDD0Lxa06p+06K6RY2meY+8Ss1c17XRYeF3Smtzc14h61Xgz2o0Ct6MpMk9M6W1TBYEAAAyxf3/MOP+fxi07v/3089vN+7/AAAAAAAAAAAAAAAAAAAAAAD8DTbj2Inj2Nka/5eSJ3zi9O+jkoYljUg6JmlU0pgkR1JO0nFJJySdlHRK0mlJ45LOSDoraaLjtbLeK/bi/A+3jgf3hqTg5XJpudQe2/OFsioK5GtKjr4nZ5lq17PXijNTlsjpfbCS5leWS/9156fltBqmV366nbfu/GDSd9v5vJxWg/XK53vmh3TpYkfelaNPD1VXoMWkJ3fyL6bNrt4o7spPJv/3r3NtW8/zc91fzbfz++iPXe/vgCYHst07pLD5rOoFgd+goKCg2C6y/mbCQdg59KxXAgAAAAAAAAAAAAAAAADYj4P4OWHWewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/AwAAP//cgEz4A==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r5) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x16, 0x1, 0x13, 0x1b, 0x0, 0x9, 0x3, 0x4e, 0x1}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x5a, 0x2, 0xfffe}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r8, 0x0, 0x9, 0x10001) r9 = socket$kcm(0x10, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) write(r2, &(0x7f0000000000)=' \x00 127.0.0.1 2000000000 \\calhost\n', 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 3.069270336s ago: executing program 4 (id=3721): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x1e00, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f1c0000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x8}, 0x40012020) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000018c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x579ab4e089248359}, 0x44011) close(r4) 2.678768014s ago: executing program 1 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000017000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ustat(0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.604313427s ago: executing program 6 (id=3724): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x26, 0x21, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 2.5484345s ago: executing program 7 (id=3725): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x20040400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 2.512920682s ago: executing program 4 (id=3726): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x7, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x0, @mcast1, @empty, [@srh={0x2f, 0x0, 0x4, 0x16, 0x3, 0x8, 0x2}], "13d865589a0a7f6b"}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.504421212s ago: executing program 6 (id=3727): openat(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 2.412929327s ago: executing program 1 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/339], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r9, 0x8954, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) 2.369405659s ago: executing program 7 (id=3729): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x300000000000000) r0 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1, 0xb41bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x2, @perf_bp={0x0, 0xd}, 0xa84, 0x4, 0x43a1bd76, 0x4, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x25) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r6, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@acl}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x9fe}}, {@inlinecrypt}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") 2.186325237s ago: executing program 1 (id=3730): mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='1af4 1', 0x6) socket(0x2d, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20f0004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000020000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0015005b0735003b000000"], 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x20040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 1.938432278s ago: executing program 1 (id=3731): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x87, 0x1, 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f0000000040)) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x1) timer_create(0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/times\x00', 0x1, 0x0) 1.91863567s ago: executing program 3 (id=3732): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x129d1, 0x0, 0x62f, 0x0, 0x8000000, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.860698703s ago: executing program 1 (id=3733): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x20000014) r1 = socket$can_bcm(0x1d, 0x2, 0x2) flistxattr(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001300)={0x0, 0xffff, 0x7fff}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r2 = open(&(0x7f0000000100)='./file1\x00', 0x107000, 0xf1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9360, 0x0) read$msr(r2, 0x0, 0x0) close(0x3) sendmsg$can_bcm(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x108000, 0x0) 1.781143377s ago: executing program 7 (id=3734): getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xa0000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x1) getdents64(r5, &(0x7f0000000540)=""/1000, 0x3e8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 1.454725381s ago: executing program 6 (id=3735): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xe, 0x4, 0x8, 0x7, 0x4400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000}, 0x50) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x100000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x88c1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x80) 1.069648669s ago: executing program 4 (id=3736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 865.333609ms ago: executing program 4 (id=3737): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x26, 0x21, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 818.343651ms ago: executing program 3 (id=3738): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14413, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r5) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x16, 0x1, 0x13, 0x1b, 0x0, 0x9, 0x3, 0x4e, 0x1}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x5a, 0x2, 0xfffe}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r8, 0x0, 0x9, 0x10001) r9 = socket$kcm(0x10, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) write(r2, &(0x7f0000000000)=' \x00 127.0.0.1 2000000000 \\calhost\n', 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 710.287816ms ago: executing program 6 (id=3739): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffdc9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044041}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 654.958739ms ago: executing program 4 (id=3740): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffdc9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@fadd={0x58, 0x114, 0x6, {{0x80, 0x7}, &(0x7f0000001480)=0x5, &(0x7f00000014c0)=0x6, 0x5, 0x7, 0x5, 0x1, 0x1, 0x4ed4669f}}, @rdma_dest={0x18, 0x114, 0x2, {0xb097, 0x7f}}, @cswp={0x58, 0x114, 0x7, {{0x26, 0x5}, &(0x7f0000001500)=0x8000, &(0x7f0000001540)=0x4, 0x0, 0xae, 0x6, 0x77f69f83, 0x70, 0x400}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7fffffff, 0x8}, &(0x7f0000001580)=0x8, &(0x7f00000015c0)=0xb, 0x1, 0x1, 0x2, 0x5, 0x51}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0xfffffffa}, &(0x7f0000001600)=0x1, &(0x7f0000001640)=0x5, 0x3ff, 0x9, 0xc2, 0x1, 0x0, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xa}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x5}, {&(0x7f0000001680)=""/114, 0x72}, &(0x7f0000001880)=[{&(0x7f0000001700)=""/177, 0xb1}, {&(0x7f00000017c0)=""/183, 0xb7}], 0x2, 0x64, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x2}, &(0x7f00000018c0)=0xfffffffffffffff8, &(0x7f0000001900)=0x1, 0x7, 0x8000000000000001, 0x6, 0x0, 0x20, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x2}, &(0x7f0000001940)=0x8001, &(0x7f0000001980)=0x84bf, 0x8, 0xd, 0xcb, 0x0, 0x24, 0x2c}}], 0x2a0, 0x20044041}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 595.938842ms ago: executing program 7 (id=3741): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='1af4 1', 0x6) socket(0x2d, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20f0004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000020000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0015005b0735003b000000"], 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x20040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 425.38552ms ago: executing program 7 (id=3742): r0 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0x4004550d, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x7, 0x0, 0x66ee, 0x0}) 417.58339ms ago: executing program 7 (id=3743): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x108000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0xebff) write(r1, &(0x7f00000002c0)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@i_version}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x50b, 0x70bd25, 0x1000000, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0x8}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000804) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_out(r2, 0x5462, &(0x7f00000000c0)) socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) 211.586339ms ago: executing program 6 (id=3744): openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/times\x00', 0x1, 0x0) 47.053818ms ago: executing program 6 (id=3745): openat(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 0s ago: executing program 4 (id=3746): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @local, @empty, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff68, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0xff0f}, 0x6048800) kernel console output (not intermixed with test programs): us mode [ 381.672318][ T6887] veth0_macvtap: left promiscuous mode [ 381.672382][ T6887] veth1_vlan: left promiscuous mode [ 381.672616][ T6887] veth0_vlan: left promiscuous mode [ 382.047496][ T6887] team0 (unregistering): Port device team_slave_1 removed [ 382.068766][ T6887] team0 (unregistering): Port device team_slave_0 removed [ 382.440262][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.440305][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.440411][T13525] bridge_slave_0: entered allmulticast mode [ 382.440989][T13525] bridge_slave_0: entered promiscuous mode [ 382.473010][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.473045][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.473243][T13525] bridge_slave_1: entered allmulticast mode [ 382.476403][T13525] bridge_slave_1: entered promiscuous mode [ 382.539274][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.553121][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.582198][ T6887] IPVS: stop unused estimator thread 0... [ 382.637182][T13525] team0: Port device team_slave_0 added [ 382.651566][T13525] team0: Port device team_slave_1 added [ 382.741246][ T29] audit: type=1400 audit(1790390989.092:5130): avc: denied { write } for pid=13566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.755634][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.755676][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.755845][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.766574][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.766591][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.766628][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.921952][T13525] hsr_slave_0: entered promiscuous mode [ 382.928932][T13525] hsr_slave_1: entered promiscuous mode [ 382.929192][T13525] debugfs: 'hsr0' already exists in 'hsr' [ 382.929208][T13525] Cannot create hsr debugfs directory [ 382.970407][ T29] audit: type=1400 audit(1790390989.322:5131): avc: denied { write } for pid=13583 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.259418][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 383.389647][T13589] loop6: detected capacity change from 0 to 128 [ 383.436400][T13592] loop3: detected capacity change from 0 to 128 [ 383.692521][ T29] audit: type=1400 audit(1790390990.042:5132): avc: denied { write } for pid=13598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.892480][ T29] audit: type=1400 audit(1790390990.242:5133): avc: denied { write } for pid=13618 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.029860][T13621] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.2922:13621 [ 384.031557][T13525] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.049724][T13525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.056143][T13525] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.069579][T13525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.077238][T13525] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.096126][T13525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.110150][T13621] smpboot: CPU 1 is now offline [ 384.121260][T13525] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.149129][T13623] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.2923:13623 [ 384.150816][T13525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.209919][T13626] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 384.250602][T13623] smpboot: CPU 1 is now offline [ 384.339090][T13623] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 384.472189][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.510369][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.527308][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.527354][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.541818][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.541924][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.597425][ T29] audit: type=1400 audit(1790390990.952:5134): avc: denied { write } for pid=13636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.859289][ T29] audit: type=1400 audit(1790390991.212:5135): avc: denied { write } for pid=13653 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.878550][T13648] loop1: detected capacity change from 0 to 128 [ 385.492805][T13675] loop7: detected capacity change from 0 to 128 [ 385.571955][T13685] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.2932:13685 [ 385.597226][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 385.606402][T13685] smpboot: CPU 1 is now offline [ 385.628141][T13685] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 385.685407][ T29] audit: type=1400 audit(1790390992.042:5136): avc: denied { write } for pid=13664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.722747][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.779906][ T29] audit: type=1400 audit(1790390992.132:5137): avc: denied { write } for pid=13698 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.011285][T13711] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2934'. [ 386.164247][T13525] veth0_vlan: entered promiscuous mode [ 386.180608][T13525] veth1_vlan: entered promiscuous mode [ 386.211970][T13525] veth0_macvtap: entered promiscuous mode [ 386.226658][T13525] veth1_macvtap: entered promiscuous mode [ 386.246798][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.261292][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.303508][ T1668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.303711][ T1668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.303754][ T1668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.303856][ T1668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.932360][T13728] loop4: detected capacity change from 0 to 128 [ 387.303085][ T29] audit: type=1326 audit(1790390993.622:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.7.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x0 [ 387.398631][ T6888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.586632][ T6888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.668602][T13734] loop7: detected capacity change from 0 to 1024 [ 387.696352][ T6888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.745600][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.745642][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.745781][T13730] bridge_slave_0: entered allmulticast mode [ 387.746317][T13730] bridge_slave_0: entered promiscuous mode [ 387.753645][T13734] EXT4-fs (loop7): orphan cleanup on readonly fs [ 387.762259][T13734] EXT4-fs error (device loop7): ext4_quota_enable:7260: inode #4: comm syz.7.2938: iget: bad extended attribute block 196608 [ 387.762390][T13734] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 387.763165][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 387.763234][ C0] EXT4-fs (loop7): initial error at time 1790390994: ext4_quota_enable:7260: inode 4 [ 387.763347][ C0] EXT4-fs (loop7): last error at time 1790390994: ext4_quota_enable:7260: inode 4 [ 387.765700][T13734] EXT4-fs error (device loop7): ext4_quota_enable:7263: comm syz.7.2938: Bad quota inode: 4, type: 1 [ 387.765787][T13734] loop7: lost filesystem error report for type 5 error -117 [ 387.768513][T13734] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 387.769598][T13734] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 387.770725][T13734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.781775][ T6888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.899326][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.899365][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.899497][T13730] bridge_slave_1: entered allmulticast mode [ 387.923383][T13730] bridge_slave_1: entered promiscuous mode [ 387.953744][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.955184][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.988511][ T29] audit: type=1400 audit(1790390994.342:5139): avc: denied { write } for pid=13732 comm="syz.7.2938" lport=37134 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 387.988872][ T6888] bridge_slave_1: left allmulticast mode [ 387.988894][ T6888] bridge_slave_1: left promiscuous mode [ 387.989056][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.989831][ T6888] bridge_slave_0: left allmulticast mode [ 387.989852][ T6888] bridge_slave_0: left promiscuous mode [ 387.989955][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.990432][ T29] audit: type=1400 audit(1790390994.342:5140): avc: denied { setopt } for pid=13732 comm="syz.7.2938" lport=37134 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 388.135151][ T6888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.136615][ T6888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.137467][ T6888] bond0 (unregistering): Released all slaves [ 388.172858][ T6888] tipc: Disabling bearer [ 388.172955][ T6888] tipc: Disabling bearer [ 388.173525][ T6888] tipc: Left network mode [ 388.180198][T13730] team0: Port device team_slave_0 added [ 388.206019][T13730] team0: Port device team_slave_1 added [ 388.219923][ T6888] hsr_slave_0: left promiscuous mode [ 388.220276][ T6888] hsr_slave_1: left promiscuous mode [ 388.220820][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.220835][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.221240][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.221258][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.221783][ T6888] batman_adv: batadv0: Interface deactivated: veth0 [ 388.221801][ T6888] batman_adv: batadv0: Removing interface: veth0 [ 388.270386][ T6888] veth1_macvtap: left promiscuous mode [ 388.270442][ T6888] veth0_macvtap: left promiscuous mode [ 388.270583][ T6888] veth1_vlan: left promiscuous mode [ 388.270624][ T6888] veth0_vlan: left promiscuous mode [ 388.309784][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.400897][ T6888] team0 (unregistering): Port device team_slave_1 removed [ 388.414325][ T6888] team0 (unregistering): Port device team_slave_0 removed [ 388.536246][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.536267][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.536308][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.604575][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.604594][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.611050][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.679073][T13730] hsr_slave_0: entered promiscuous mode [ 388.679484][T13730] hsr_slave_1: entered promiscuous mode [ 388.679727][T13730] debugfs: 'hsr0' already exists in 'hsr' [ 388.679745][T13730] Cannot create hsr debugfs directory [ 388.855963][T13703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.885885][ T6888] IPVS: stop unused estimator thread 0... [ 389.416348][ T29] audit: type=1400 audit(1790390995.772:5141): avc: denied { write } for pid=13766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.449240][T13730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.457881][T13730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.470548][T13730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.477376][T13730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.485810][T13730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.501724][T13730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.509391][T13730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.528540][T13730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.548302][ T29] audit: type=1400 audit(1790390995.902:5142): avc: denied { write } for pid=13790 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.725702][T13730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.758676][T13730] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.774755][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.774790][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.800118][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.800157][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.968389][ T29] audit: type=1400 audit(1790390996.322:5143): avc: denied { write } for pid=13800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.029149][ T29] audit: type=1400 audit(1790390996.382:5144): avc: denied { write } for pid=13824 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.139781][T13730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.165065][ T29] audit: type=1326 audit(1790390996.512:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.165140][ T29] audit: type=1326 audit(1790390996.522:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.222594][ T29] audit: type=1326 audit(1790390996.572:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.222671][ T29] audit: type=1326 audit(1790390996.572:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.223826][ T29] audit: type=1326 audit(1790390996.582:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.224252][ T29] audit: type=1326 audit(1790390996.582:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.7.2949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 390.362740][T13833] FAULT_INJECTION: forcing a failure. [ 390.362740][T13833] name failslab, interval 1, probability 0, space 0, times 0 [ 390.362780][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.7.2949 Not tainted syzkaller #0 PREEMPT(lazy) [ 390.362858][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.362877][T13833] Call Trace: [ 390.362886][T13833] [ 390.362897][T13833] __dump_stack+0x1d/0x30 [ 390.362931][T13833] dump_stack_lvl+0x95/0xd0 [ 390.362960][T13833] dump_stack+0x15/0x1b [ 390.362999][T13833] should_fail_ex+0x262/0x280 [ 390.363025][T13833] ? audit_log_start+0x34c/0x730 [ 390.363127][T13833] should_failslab+0x8c/0xb0 [ 390.363166][T13833] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 390.363197][T13833] ? audit_log_start+0x34c/0x730 [ 390.363229][T13833] audit_log_start+0x34c/0x730 [ 390.363337][T13833] audit_seccomp+0x49/0x110 [ 390.363358][T13833] __seccomp_filter+0x909/0x1360 [ 390.363401][T13833] ? __rcu_read_unlock+0x4e/0x70 [ 390.363445][T13833] ? __se_sys_futex+0x2f6/0x370 [ 390.363486][T13833] ? xfd_validate_state+0x45/0xf0 [ 390.363518][T13833] __seccomp_permit_syscall+0x7d/0x150 [ 390.363618][T13833] do_syscall_64+0xca/0x360 [ 390.363745][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.363775][T13833] RIP: 0033:0x7fe32b91e159 [ 390.363791][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.363810][T13833] RSP: 002b:00007fe32a377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 390.363831][T13833] RAX: ffffffffffffffda RBX: 00007fe32bba5fa0 RCX: 00007fe32b91e159 [ 390.363930][T13833] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 390.363947][T13833] RBP: 00007fe32b9b503b R08: 0000200000000cc0 R09: 0000000000000000 [ 390.363964][T13833] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 390.364022][T13833] R13: 00007fe32bba6038 R14: 00007fe32bba5fa0 R15: 00007ffca352c298 [ 390.364041][T13833] [ 390.650487][T13730] veth0_vlan: entered promiscuous mode [ 390.661542][T13730] veth1_vlan: entered promiscuous mode [ 390.699284][T13836] loop1: detected capacity change from 0 to 764 [ 390.721838][T13730] veth0_macvtap: entered promiscuous mode [ 390.739916][T13730] veth1_macvtap: entered promiscuous mode [ 390.749511][T13730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.777168][T13730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.779731][ T6888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.779784][ T6888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.779896][ T6888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.779940][ T6888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.355550][T13862] loop3: detected capacity change from 0 to 164 [ 391.974096][T13887] FAULT_INJECTION: forcing a failure. [ 391.974096][T13887] name failslab, interval 1, probability 0, space 0, times 0 [ 391.974134][T13887] CPU: 1 UID: 0 PID: 13887 Comm: syz.3.2960 Not tainted syzkaller #0 PREEMPT(lazy) [ 391.974160][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.974174][T13887] Call Trace: [ 391.974182][T13887] [ 391.974212][T13887] __dump_stack+0x1d/0x30 [ 391.974290][T13887] dump_stack_lvl+0x95/0xd0 [ 391.974368][T13887] dump_stack+0x15/0x1b [ 391.974412][T13887] should_fail_ex+0x262/0x280 [ 391.974441][T13887] ? audit_log_start+0x34c/0x730 [ 391.974464][T13887] should_failslab+0x8c/0xb0 [ 391.974540][T13887] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 391.974607][T13887] ? audit_log_start+0x34c/0x730 [ 391.974671][T13887] audit_log_start+0x34c/0x730 [ 391.974696][T13887] audit_seccomp+0x49/0x110 [ 391.974779][T13887] __seccomp_filter+0x909/0x1360 [ 391.974869][T13887] ? __rcu_read_unlock+0x4e/0x70 [ 391.974913][T13887] ? __se_sys_futex+0x2f6/0x370 [ 391.975004][T13887] ? xfd_validate_state+0x45/0xf0 [ 391.975036][T13887] __seccomp_permit_syscall+0x7d/0x150 [ 391.975070][T13887] do_syscall_64+0xca/0x360 [ 391.975139][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.975165][T13887] RIP: 0033:0x7f17ac81e159 [ 391.975186][T13887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.975212][T13887] RSP: 002b:00007f17ab277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 391.975272][T13887] RAX: ffffffffffffffda RBX: 00007f17acaa5fa0 RCX: 00007f17ac81e159 [ 391.975292][T13887] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 391.975311][T13887] RBP: 00007f17ac8b503b R08: 0000200000000cc0 R09: 0000000000000000 [ 391.975331][T13887] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 391.975350][T13887] R13: 00007f17acaa6038 R14: 00007f17acaa5fa0 R15: 00007ffe84439278 [ 391.975377][T13887] [ 393.290937][T13912] FAULT_INJECTION: forcing a failure. [ 393.290937][T13912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.290967][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.1.2967 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.291011][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.291024][T13912] Call Trace: [ 393.291031][T13912] [ 393.291039][T13912] __dump_stack+0x1d/0x30 [ 393.291065][T13912] dump_stack_lvl+0x95/0xd0 [ 393.291149][T13912] dump_stack+0x15/0x1b [ 393.291171][T13912] should_fail_ex+0x262/0x280 [ 393.291205][T13912] should_fail+0xb/0x20 [ 393.291309][T13912] should_fail_usercopy+0x1a/0x20 [ 393.291346][T13912] _copy_from_iter+0xcc/0xe70 [ 393.291397][T13912] ? __alloc_skb+0x516/0x6f0 [ 393.291440][T13912] ? __alloc_skb+0x209/0x6f0 [ 393.291492][T13912] netlink_sendmsg+0x4a4/0x6f0 [ 393.291534][T13912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.291651][T13912] ____sys_sendmsg+0x532/0x580 [ 393.291687][T13912] ___sys_sendmsg+0x195/0x1e0 [ 393.291720][T13912] __x64_sys_sendmsg+0xd4/0x160 [ 393.291812][T13912] x64_sys_call+0x22ab/0x2550 [ 393.291848][T13912] do_syscall_64+0x112/0x360 [ 393.291966][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.291997][T13912] RIP: 0033:0x7fbd0eefe159 [ 393.292019][T13912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.292124][T13912] RSP: 002b:00007fbd0d936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.292148][T13912] RAX: ffffffffffffffda RBX: 00007fbd0f186090 RCX: 00007fbd0eefe159 [ 393.292203][T13912] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 393.292222][T13912] RBP: 00007fbd0d936090 R08: 0000000000000000 R09: 0000000000000000 [ 393.292241][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.292259][T13912] R13: 00007fbd0f186128 R14: 00007fbd0f186090 R15: 00007ffce50e0128 [ 393.292287][T13912] [ 393.451071][T13913] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.2968:13913 [ 393.565196][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 393.575205][T13913] smpboot: CPU 1 is now offline [ 393.621965][T13917] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 393.791220][T13915] loop3: detected capacity change from 0 to 764 [ 394.056810][T13927] loop4: detected capacity change from 0 to 1024 [ 394.061485][T13927] EXT4-fs: Ignoring removed bh option [ 394.069692][T13927] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 394.090020][T13927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.261975][T13935] loop1: detected capacity change from 0 to 128 [ 394.759547][T13939] loop7: detected capacity change from 0 to 1024 [ 394.760109][T13939] EXT4-fs: Ignoring removed bh option [ 394.776309][T13939] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 394.796579][T13939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.842663][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 394.842684][ T29] audit: type=1400 audit(1790391002.194:5336): avc: denied { write } for pid=13938 comm="syz.7.2977" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.170751][T13949] IPVS: length: 24 != 3170136 [ 395.351435][T13957] loop1: detected capacity change from 0 to 1024 [ 395.357057][T13957] EXT4-fs: Ignoring removed bh option [ 395.360045][T13957] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 395.384703][T13957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.410766][ T29] audit: type=1400 audit(1790391003.767:5337): avc: denied { write } for pid=13956 comm="syz.1.2982" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.447259][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.565078][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.651986][ T29] audit: type=1326 audit(1790391004.007:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.655227][ T29] audit: type=1326 audit(1790391004.017:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.658315][ T29] audit: type=1326 audit(1790391004.017:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.674642][ T29] audit: type=1326 audit(1790391004.037:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.675502][ T29] audit: type=1326 audit(1790391004.037:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.680789][ T29] audit: type=1326 audit(1790391004.037:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.680975][ T29] audit: type=1326 audit(1790391004.037:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.681228][ T29] audit: type=1326 audit(1790391004.037:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.1.2984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0eefe159 code=0x7ffc0000 [ 395.794191][T13973] FAULT_INJECTION: forcing a failure. [ 395.794191][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 395.794355][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.1.2984 Not tainted syzkaller #0 PREEMPT(lazy) [ 395.794430][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.794482][T13973] Call Trace: [ 395.794504][T13973] [ 395.794528][T13973] __dump_stack+0x1d/0x30 [ 395.794615][T13973] dump_stack_lvl+0x95/0xd0 [ 395.794697][T13973] dump_stack+0x15/0x1b [ 395.794794][T13973] should_fail_ex+0x262/0x280 [ 395.794909][T13973] ? __alloc_skb+0x2e0/0x6f0 [ 395.795070][T13973] should_failslab+0x8c/0xb0 [ 395.795181][T13973] kmem_cache_alloc_node_noprof+0x82/0x400 [ 395.795310][T13973] ? should_fail_ex+0xdb/0x280 [ 395.795373][T13973] ? __alloc_skb+0x2e0/0x6f0 [ 395.795492][T13973] __alloc_skb+0x2e0/0x6f0 [ 395.795619][T13973] ? __alloc_skb+0x209/0x6f0 [ 395.795755][T13973] audit_log_start+0x3aa/0x730 [ 395.795849][T13973] audit_seccomp+0x49/0x110 [ 395.795924][T13973] __seccomp_filter+0x909/0x1360 [ 395.796034][T13973] ? __rcu_read_unlock+0x4e/0x70 [ 395.796147][T13973] ? xfd_validate_state+0x45/0xf0 [ 395.796315][T13973] __seccomp_permit_syscall+0x7d/0x150 [ 395.796485][T13973] do_syscall_64+0xca/0x360 [ 395.796605][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.796715][T13973] RIP: 0033:0x7fbd0eefe159 [ 395.796731][T13973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.796767][T13973] RSP: 002b:00007fbd0d9570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 395.796842][T13973] RAX: ffffffffffffffda RBX: 00007fbd0f185fa8 RCX: 00007fbd0eefe159 [ 395.796920][T13973] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd0f185fac [ 395.796972][T13973] RBP: 00007fbd0f185fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 395.797093][T13973] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 395.797144][T13973] R13: 00007fbd0f186038 R14: 00007ffce50e0040 R15: 00007ffce50e0128 [ 395.797209][T13973] [ 396.149673][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.618356][T13937] loop3: detected capacity change from 0 to 8192 [ 397.015655][T13992] loop4: detected capacity change from 0 to 128 [ 397.652284][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'. [ 397.662107][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'. [ 397.746812][T14011] FAULT_INJECTION: forcing a failure. [ 397.746812][T14011] name failslab, interval 1, probability 0, space 0, times 0 [ 397.746853][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.7.2996 Not tainted syzkaller #0 PREEMPT(lazy) [ 397.746885][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.746905][T14011] Call Trace: [ 397.746915][T14011] [ 397.746926][T14011] __dump_stack+0x1d/0x30 [ 397.746960][T14011] dump_stack_lvl+0x95/0xd0 [ 397.747035][T14011] dump_stack+0x15/0x1b [ 397.747064][T14011] should_fail_ex+0x262/0x280 [ 397.747111][T14011] ? audit_log_start+0x34c/0x730 [ 397.747134][T14011] should_failslab+0x8c/0xb0 [ 397.747171][T14011] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 397.747208][T14011] ? audit_log_start+0x34c/0x730 [ 397.747324][T14011] audit_log_start+0x34c/0x730 [ 397.747355][T14011] ? __rcu_read_unlock+0x4e/0x70 [ 397.747437][T14011] audit_seccomp+0x49/0x110 [ 397.747463][T14011] __seccomp_filter+0x909/0x1360 [ 397.747508][T14011] ? __schedule+0x79e/0xd20 [ 397.747538][T14011] ? bh_worker+0x366/0x3b0 [ 397.747568][T14011] __seccomp_permit_syscall+0x7d/0x150 [ 397.747606][T14011] do_syscall_64+0xca/0x360 [ 397.747659][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.747691][T14011] RIP: 0033:0x7fe32b91e159 [ 397.747714][T14011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.747767][T14011] RSP: 002b:00007fe32a377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 397.747795][T14011] RAX: ffffffffffffffda RBX: 00007fe32bba5fa0 RCX: 00007fe32b91e159 [ 397.747814][T14011] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 397.747834][T14011] RBP: 00007fe32b9b503b R08: 0000200000000cc0 R09: 0000000000000000 [ 397.747854][T14011] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 397.747949][T14011] R13: 00007fe32bba6038 R14: 00007fe32bba5fa0 R15: 00007ffca352c298 [ 397.747976][T14011] [ 398.049048][T14020] loop7: detected capacity change from 0 to 256 [ 398.049583][T14020] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.176223][T14023] loop6: detected capacity change from 0 to 128 [ 398.218417][T14022] loop3: detected capacity change from 0 to 764 [ 398.971703][T14030] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3004:14030 [ 399.023555][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 399.026895][T14030] smpboot: CPU 1 is now offline [ 399.049956][T14031] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 399.122935][T14034] tipc: Enabling of bearer rejected, already enabled [ 399.797510][T14051] FAULT_INJECTION: forcing a failure. [ 399.797510][T14051] name failslab, interval 1, probability 0, space 0, times 0 [ 399.797598][T14051] CPU: 1 UID: 0 PID: 14051 Comm: syz.3.3011 Not tainted syzkaller #0 PREEMPT(lazy) [ 399.797660][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.797758][T14051] Call Trace: [ 399.797769][T14051] [ 399.797782][T14051] __dump_stack+0x1d/0x30 [ 399.797817][T14051] dump_stack_lvl+0x95/0xd0 [ 399.797850][T14051] dump_stack+0x15/0x1b [ 399.797892][T14051] should_fail_ex+0x262/0x280 [ 399.797926][T14051] ? audit_log_start+0x34c/0x730 [ 399.797956][T14051] should_failslab+0x8c/0xb0 [ 399.798025][T14051] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 399.798067][T14051] ? audit_log_start+0x34c/0x730 [ 399.798133][T14051] audit_log_start+0x34c/0x730 [ 399.798168][T14051] audit_seccomp+0x49/0x110 [ 399.798195][T14051] __seccomp_filter+0x909/0x1360 [ 399.798243][T14051] ? __rcu_read_unlock+0x4e/0x70 [ 399.798295][T14051] ? __se_sys_futex+0x2f6/0x370 [ 399.798336][T14051] ? xfd_validate_state+0x45/0xf0 [ 399.798379][T14051] __seccomp_permit_syscall+0x7d/0x150 [ 399.798491][T14051] do_syscall_64+0xca/0x360 [ 399.798606][T14051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.798638][T14051] RIP: 0033:0x7f17ac81e159 [ 399.798661][T14051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.798688][T14051] RSP: 002b:00007f17ab277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 399.798735][T14051] RAX: ffffffffffffffda RBX: 00007f17acaa5fa0 RCX: 00007f17ac81e159 [ 399.798818][T14051] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 399.798838][T14051] RBP: 00007f17ac8b503b R08: 0000200000000cc0 R09: 0000000000000000 [ 399.798859][T14051] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 399.798877][T14051] R13: 00007f17acaa6038 R14: 00007f17acaa5fa0 R15: 00007ffe84439278 [ 399.798903][T14051] [ 399.809038][T14049] loop1: detected capacity change from 0 to 128 [ 399.983303][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 399.983339][ T29] audit: type=1326 audit(1790391009.339:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.3.3011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 400.815605][T14070] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3019:14070 [ 400.841885][T14067] loop1: detected capacity change from 0 to 8192 [ 400.859854][T14070] smpboot: CPU 1 is now offline [ 400.895594][T14070] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 401.566589][ T29] audit: type=1326 audit(1790391010.929:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.582243][ T29] audit: type=1326 audit(1790391010.929:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.593094][ T29] audit: type=1326 audit(1790391010.959:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.595166][ T29] audit: type=1326 audit(1790391010.959:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.598934][ T29] audit: type=1326 audit(1790391010.959:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.599080][ T29] audit: type=1326 audit(1790391010.959:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.599174][ T29] audit: type=1326 audit(1790391010.959:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.605229][ T29] audit: type=1326 audit(1790391010.959:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.605383][ T29] audit: type=1326 audit(1790391010.959:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14083 comm="syz.7.3024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32b91e159 code=0x7ffc0000 [ 401.672980][T14084] FAULT_INJECTION: forcing a failure. [ 401.672980][T14084] name failslab, interval 1, probability 0, space 0, times 0 [ 401.673056][T14084] CPU: 1 UID: 0 PID: 14084 Comm: syz.7.3024 Not tainted syzkaller #0 PREEMPT(lazy) [ 401.673156][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.673174][T14084] Call Trace: [ 401.673184][T14084] [ 401.673195][T14084] __dump_stack+0x1d/0x30 [ 401.673227][T14084] dump_stack_lvl+0x95/0xd0 [ 401.673258][T14084] dump_stack+0x15/0x1b [ 401.673347][T14084] should_fail_ex+0x262/0x280 [ 401.673444][T14084] ? audit_log_start+0x34c/0x730 [ 401.673489][T14084] should_failslab+0x8c/0xb0 [ 401.673523][T14084] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 401.673554][T14084] ? audit_log_start+0x34c/0x730 [ 401.673628][T14084] audit_log_start+0x34c/0x730 [ 401.673658][T14084] audit_seccomp+0x49/0x110 [ 401.673733][T14084] __seccomp_filter+0x909/0x1360 [ 401.673775][T14084] ? __rcu_read_unlock+0x4e/0x70 [ 401.673816][T14084] ? __se_sys_futex+0x2f6/0x370 [ 401.673855][T14084] ? xfd_validate_state+0x45/0xf0 [ 401.673986][T14084] __seccomp_permit_syscall+0x7d/0x150 [ 401.674021][T14084] do_syscall_64+0xca/0x360 [ 401.674139][T14084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.674173][T14084] RIP: 0033:0x7fe32b91e159 [ 401.674195][T14084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.674222][T14084] RSP: 002b:00007fe32a377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 401.674279][T14084] RAX: ffffffffffffffda RBX: 00007fe32bba5fa0 RCX: 00007fe32b91e159 [ 401.674301][T14084] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 401.674321][T14084] RBP: 00007fe32b9b503b R08: 0000200000000cc0 R09: 0000000000000000 [ 401.674341][T14084] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 401.674358][T14084] R13: 00007fe32bba6038 R14: 00007fe32bba5fa0 R15: 00007ffca352c298 [ 401.674378][T14084] [ 402.184305][T14098] loop1: detected capacity change from 0 to 1024 [ 402.184813][T14098] EXT4-fs: Ignoring removed bh option [ 402.190188][T14098] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 402.221534][T14098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.242968][T14055] loop4: detected capacity change from 0 to 4096 [ 402.251237][T14103] loop7: detected capacity change from 0 to 256 [ 402.251755][T14103] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.474149][T14055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.675535][T14111] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3033:14111 [ 402.735039][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 402.746108][T14111] smpboot: CPU 1 is now offline [ 402.777469][T14114] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3034:14114 [ 402.795197][T14115] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 402.819609][T14114] smpboot: CPU 1 is now offline [ 402.856057][T14114] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 403.049532][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.200836][T14124] FAULT_INJECTION: forcing a failure. [ 403.200836][T14124] name failslab, interval 1, probability 0, space 0, times 0 [ 403.200883][T14124] CPU: 0 UID: 0 PID: 14124 Comm: syz.4.3037 Not tainted syzkaller #0 PREEMPT(lazy) [ 403.200918][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.200937][T14124] Call Trace: [ 403.200946][T14124] [ 403.200958][T14124] __dump_stack+0x1d/0x30 [ 403.201020][T14124] dump_stack_lvl+0x95/0xd0 [ 403.201050][T14124] dump_stack+0x15/0x1b [ 403.201078][T14124] should_fail_ex+0x262/0x280 [ 403.201111][T14124] ? audit_log_start+0x34c/0x730 [ 403.201155][T14124] should_failslab+0x8c/0xb0 [ 403.201193][T14124] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 403.201236][T14124] ? audit_log_start+0x34c/0x730 [ 403.201272][T14124] audit_log_start+0x34c/0x730 [ 403.201366][T14124] audit_seccomp+0x49/0x110 [ 403.201390][T14124] __seccomp_filter+0x909/0x1360 [ 403.201463][T14124] ? __rcu_read_unlock+0x4e/0x70 [ 403.201505][T14124] ? __se_sys_futex+0x2f6/0x370 [ 403.201542][T14124] ? xfd_validate_state+0x45/0xf0 [ 403.201628][T14124] __seccomp_permit_syscall+0x7d/0x150 [ 403.201741][T14124] do_syscall_64+0xca/0x360 [ 403.201786][T14124] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 403.201828][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.201861][T14124] RIP: 0033:0x7fdf85d7e159 [ 403.201932][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.201953][T14124] RSP: 002b:00007fdf847d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 403.202049][T14124] RAX: ffffffffffffffda RBX: 00007fdf86005fa0 RCX: 00007fdf85d7e159 [ 403.202099][T14124] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 403.202119][T14124] RBP: 00007fdf85e1503b R08: 0000200000000cc0 R09: 0000000000000000 [ 403.202138][T14124] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 403.202156][T14124] R13: 00007fdf86006038 R14: 00007fdf86005fa0 R15: 00007fffd5320eb8 [ 403.202185][T14124] [ 403.290382][T14120] loop6: detected capacity change from 0 to 764 [ 404.169806][T14143] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3045:14143 [ 404.216496][T14143] smpboot: CPU 1 is now offline [ 404.221364][T14143] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 404.248999][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.829670][T14157] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3047'. [ 404.941886][T14164] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 404.945965][T14164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 405.208306][T14170] loop7: detected capacity change from 0 to 764 [ 405.373374][T14155] loop1: detected capacity change from 0 to 4096 [ 405.441356][T14155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.482965][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 405.482986][ T29] audit: type=1400 audit(1790391014.839:5642): avc: denied { write } for pid=14153 comm="syz.1.3048" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.621353][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.071174][T14184] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.3058:14184 [ 406.088394][T14184] smpboot: CPU 1 is now offline [ 406.157922][T14187] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 407.662937][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3066'. [ 407.677276][T14149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.850735][T14215] loop6: detected capacity change from 0 to 256 [ 407.851260][T14215] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.881722][T14213] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3070:14213 [ 407.916486][ T22] process 14215 (syz.6.3071) no longer affine to cpu1 [ 407.982210][T14213] smpboot: CPU 1 is now offline [ 408.032205][T14216] loop4: detected capacity change from 0 to 764 [ 408.082785][T14217] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 408.911010][T14237] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 408.920063][T14237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 409.133821][T14241] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 409.229089][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3081'. [ 409.377880][ T6887] IPVS: starting estimator thread 0... [ 409.464816][T14258] IPVS: using max 2208 ests per chain, 110400 per kthread [ 410.260528][ T6883] IPVS: starting estimator thread 0... [ 410.346711][T14268] loop6: detected capacity change from 0 to 764 [ 410.359095][T14282] IPVS: using max 2256 ests per chain, 112800 per kthread [ 410.401732][T14281] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3093'. [ 410.571542][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3096'. [ 411.250183][T14314] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3104:14314 [ 411.262269][ T22] process 14301 (syz.3.3099) no longer affine to cpu1 [ 411.279592][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 411.291241][T14314] smpboot: CPU 1 is now offline [ 411.335267][T14318] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 411.601890][T14320] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3105'. [ 411.641753][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3107'. [ 411.773372][T14334] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3106'. [ 412.225635][T14350] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3115:14350 [ 412.274253][ T22] process 14343 (syz.3.3113) no longer affine to cpu1 [ 412.278871][T14342] process 14347 (syz.3.3113) no longer affine to cpu1 [ 412.327265][T14350] smpboot: CPU 1 is now offline [ 412.349301][T14352] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 412.664694][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3120'. [ 413.021976][T14369] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 413.065278][T14369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 413.670074][T14384] loop7: detected capacity change from 0 to 128 [ 414.113558][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3131'. [ 414.197206][T14379] tipc: Enabling of bearer rejected, already enabled [ 414.348571][T14400] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.3132:14400 [ 414.386558][T14400] smpboot: CPU 1 is now offline [ 414.437925][T14400] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 414.672752][T14409] loop1: detected capacity change from 0 to 256 [ 414.685471][T14409] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.862654][T14407] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 414.925323][T14407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.937060][T14404] loop3: detected capacity change from 0 to 512 [ 415.458227][T14404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.466224][T14404] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.518375][ T29] audit: type=1400 audit(1790391025.865:5643): avc: denied { write } for pid=14403 comm="syz.3.3134" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.582044][T13730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.497779][T14435] loop4: detected capacity change from 0 to 128 [ 416.733993][T14435] tipc: Started in network mode [ 416.763211][T14435] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 416.782835][T14435] tipc: Enabled bearer , priority 10 [ 416.965674][T14448] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3148'. [ 416.973158][T14453] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 417.033463][T14455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 417.499636][T14474] loop3: detected capacity change from 0 to 256 [ 417.501018][T14474] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.746728][T14481] loop4: detected capacity change from 0 to 256 [ 417.750624][T14481] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.758809][T14477] loop1: detected capacity change from 0 to 128 [ 417.785077][ T37] tipc: Node number set to 8432298 [ 418.428053][T14491] loop4: detected capacity change from 0 to 128 [ 418.468182][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3161'. [ 418.548588][T14495] loop3: detected capacity change from 0 to 256 [ 418.549049][T14495] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.407162][T14515] loop4: detected capacity change from 0 to 256 [ 419.411113][T14515] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.833784][T14511] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 419.856996][T14511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.170033][T14532] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3176:14532 [ 420.404236][T14535] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 420.493923][T14532] smpboot: CPU 1 is now offline [ 420.522874][T14538] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 421.590298][T14584] loop4: detected capacity change from 0 to 256 [ 421.590698][T14584] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.804873][T14586] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 422.114957][T14597] loop7: detected capacity change from 0 to 128 [ 422.141840][T14595] IPVS: length: 24 != 3170136 [ 422.645515][T14610] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3200'. [ 423.477031][T14631] IPVS: length: 24 != 3170136 [ 423.628619][T14637] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 423.727514][T14649] loop6: detected capacity change from 0 to 256 [ 423.727970][T14649] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 425.454572][T14679] IPVS: length: 24 != 3170136 [ 425.576198][T14686] IPVS: length: 24 != 3170136 [ 425.884917][T14694] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 425.894591][T14694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 426.021086][T14709] loop4: detected capacity change from 0 to 764 [ 426.461393][T14730] IPVS: length: 24 != 3170136 [ 426.567763][T14736] loop1: detected capacity change from 0 to 256 [ 426.568233][T14736] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 426.610489][T14720] loop4: detected capacity change from 0 to 128 [ 426.880171][T14740] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 427.052066][ T29] audit: type=1326 audit(1790391037.405:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.054735][ T29] audit: type=1326 audit(1790391037.415:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.059054][ T29] audit: type=1326 audit(1790391037.415:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.059787][ T29] audit: type=1326 audit(1790391037.415:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.059887][ T29] audit: type=1326 audit(1790391037.415:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.059978][ T29] audit: type=1326 audit(1790391037.415:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.062253][ T29] audit: type=1326 audit(1790391037.415:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.062895][ T29] audit: type=1326 audit(1790391037.415:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.063905][ T29] audit: type=1326 audit(1790391037.415:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.064063][ T29] audit: type=1326 audit(1790391037.415:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685acde159 code=0x7ffc0000 [ 427.391292][T14720] tipc: Enabling of bearer rejected, already enabled [ 427.699522][T14758] loop7: detected capacity change from 0 to 256 [ 427.701493][T14758] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.289359][T14770] loop6: detected capacity change from 0 to 1024 [ 428.289927][T14770] EXT4-fs: Ignoring removed bh option [ 428.315027][T14770] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 428.338593][T14770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.466963][T14780] IPVS: length: 24 != 3170136 [ 428.497649][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.556641][T14783] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.3256:14783 [ 428.578438][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 428.580544][T14783] smpboot: CPU 1 is now offline [ 428.628609][T14787] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 428.699223][T14789] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3258:14789 [ 428.750029][T14789] smpboot: CPU 1 is now offline [ 428.766181][T14789] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 428.963820][T14800] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3259'. [ 429.051270][T14806] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3262:14806 [ 429.106575][T14808] loop1: detected capacity change from 0 to 256 [ 429.122259][T14806] smpboot: CPU 1 is now offline [ 429.142132][T14808] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.179323][T14806] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 429.814599][T14820] loop4: detected capacity change from 0 to 1024 [ 429.815260][T14820] EXT4-fs: Ignoring removed bh option [ 429.818955][T14820] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 429.839704][T14820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.961632][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.206723][T14824] IPVS: length: 24 != 3170136 [ 430.237469][T14827] loop4: detected capacity change from 0 to 128 [ 430.301821][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3272'. [ 430.308038][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3272'. [ 430.740588][T14849] IPVS: length: 24 != 3170136 [ 430.809344][T14852] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3276:14852 [ 430.809794][T14844] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3274'. [ 430.846730][T14852] smpboot: CPU 1 is now offline [ 430.877627][T14852] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 431.027172][T14860] loop7: detected capacity change from 0 to 1024 [ 431.030442][T14860] EXT4-fs: Ignoring removed bh option [ 431.045761][T14860] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 431.066519][T14860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.164719][T14873] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3283:14873 [ 431.184134][T14873] smpboot: CPU 1 is now offline [ 431.217409][T14873] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 431.262403][T14870] IPVS: length: 24 != 3170136 [ 431.559343][T14884] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3286:14884 [ 431.586416][T14884] smpboot: CPU 1 is now offline [ 431.608105][T14884] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 431.667724][T14886] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 431.671120][T14886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 431.971918][T14891] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3289'. [ 431.991901][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.233023][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 432.233097][ T29] audit: type=1400 audit(1790391042.595:5720): avc: denied { bind } for pid=14899 comm="syz.4.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 432.233124][ T29] audit: type=1400 audit(1790391042.595:5721): avc: denied { name_bind } for pid=14899 comm="syz.4.3291" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 432.233166][ T29] audit: type=1400 audit(1790391042.595:5722): avc: denied { node_bind } for pid=14899 comm="syz.4.3291" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 432.387484][T14909] loop3: detected capacity change from 0 to 256 [ 432.388663][T14909] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.632494][T14913] loop6: detected capacity change from 0 to 256 [ 432.640544][T14913] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 433.126977][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.129914][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3298'. [ 433.380298][T14926] loop4: detected capacity change from 0 to 1024 [ 433.380817][T14926] EXT4-fs: Ignoring removed bh option [ 433.451450][T14926] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 433.510966][T14926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.546986][ T29] audit: type=1400 audit(1790391043.905:5723): avc: denied { write } for pid=14925 comm="syz.4.3300" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.686683][T14935] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3301'. [ 433.702384][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.463855][T14961] loop3: detected capacity change from 0 to 256 [ 434.466747][T14961] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.426731][T14984] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3316:14984 [ 435.442543][T14968] process 14970 (syz.6.3312) no longer affine to cpu1 [ 435.442568][T14968] process 14974 (syz.6.3312) no longer affine to cpu1 [ 435.490195][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 435.500228][T14984] smpboot: CPU 1 is now offline [ 435.525960][T14975] loop1: detected capacity change from 0 to 128 [ 435.542116][T14979] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3315'. [ 435.583841][T14986] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 435.612919][T14988] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3317:14988 [ 435.656489][T14988] smpboot: CPU 1 is now offline [ 435.677569][T14988] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 436.158778][T15014] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3327:15014 [ 436.179133][T15014] smpboot: CPU 1 is now offline [ 436.189523][T15004] IPVS: length: 24 != 3170136 [ 436.208316][T15014] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 436.371277][T15024] loop3: detected capacity change from 0 to 764 [ 436.456113][T15029] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3331:15029 [ 436.484685][ T22] IRQ fixup: irq 34 move in progress, old vector 47 [ 436.487256][T15029] smpboot: CPU 1 is now offline [ 436.518806][T15029] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 436.576434][T15023] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3330'. [ 437.058156][T15044] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3335:15044 [ 437.129354][T15044] smpboot: CPU 1 is now offline [ 437.138191][T15044] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 437.791251][ T29] audit: type=1400 audit(1790391048.145:5724): avc: denied { map } for pid=15059 comm="syz.6.3341" path="/425/proc/1239/net/rpc/auth.rpcsec.context/channel" dev="proc" ino=4026533558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=file permissive=1 [ 438.128544][T15071] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.3345:15071 [ 438.170368][ C0] process 15065 (syz.4.3344) no longer affine to cpu1 [ 438.206867][T15064] process 15068 (syz.4.3344) no longer affine to cpu1 [ 438.248079][T15071] smpboot: CPU 1 is now offline [ 438.289239][T15072] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 438.593857][T15083] loop4: detected capacity change from 0 to 128 [ 438.638668][T15082] loop3: detected capacity change from 0 to 764 [ 438.957143][T15083] tipc: Enabling of bearer rejected, already enabled [ 439.122209][T15056] loop7: detected capacity change from 0 to 8192 [ 439.849645][T15106] loop4: detected capacity change from 0 to 128 [ 439.953476][T15102] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 440.654689][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3365'. [ 440.657709][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3365'. [ 440.761420][T15122] loop6: detected capacity change from 0 to 128 [ 440.965042][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3367'. [ 440.974471][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3366'. [ 440.981100][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3366'. [ 441.031381][T15136] loop4: detected capacity change from 0 to 764 [ 441.045318][T15136] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 441.126311][T15122] tipc: Enabling of bearer rejected, already enabled [ 441.132133][ T29] audit: type=1326 audit(1790391051.485:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.132176][ T29] audit: type=1326 audit(1790391051.485:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.163079][ T29] audit: type=1326 audit(1790391051.525:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.168274][ T29] audit: type=1326 audit(1790391051.525:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.175705][ T29] audit: type=1326 audit(1790391051.535:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.175857][ T29] audit: type=1326 audit(1790391051.535:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.175959][ T29] audit: type=1326 audit(1790391051.535:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.3.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 441.655930][T15156] FAULT_INJECTION: forcing a failure. [ 441.655930][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 441.655966][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.4.3374 Not tainted syzkaller #0 PREEMPT(lazy) [ 441.656000][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.656054][T15156] Call Trace: [ 441.656063][T15156] [ 441.656073][T15156] __dump_stack+0x1d/0x30 [ 441.656099][T15156] dump_stack_lvl+0x95/0xd0 [ 441.656138][T15156] dump_stack+0x15/0x1b [ 441.656224][T15156] should_fail_ex+0x262/0x280 [ 441.656253][T15156] ? do_handle_open+0x3a9/0x7c0 [ 441.656299][T15156] should_failslab+0x8c/0xb0 [ 441.656425][T15156] __kmalloc_noprof+0xd0/0x4d0 [ 441.656457][T15156] ? do_handle_open+0x3a9/0x7c0 [ 441.656509][T15156] do_handle_open+0x3a9/0x7c0 [ 441.656577][T15156] __x64_sys_open_by_handle_at+0x44/0x50 [ 441.656619][T15156] x64_sys_call+0x1395/0x2550 [ 441.656656][T15156] do_syscall_64+0x112/0x360 [ 441.656703][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.656745][T15156] RIP: 0033:0x7fdf85d7e159 [ 441.656762][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.656787][T15156] RSP: 002b:00007fdf847d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 441.656815][T15156] RAX: ffffffffffffffda RBX: 00007fdf86005fa0 RCX: 00007fdf85d7e159 [ 441.656835][T15156] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 441.656855][T15156] RBP: 00007fdf847d7090 R08: 0000000000000000 R09: 0000000000000000 [ 441.656874][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.656962][T15156] R13: 00007fdf86006038 R14: 00007fdf86005fa0 R15: 00007fffd5320eb8 [ 441.656983][T15156] [ 441.809896][T15149] IPVS: length: 24 != 3170136 [ 441.947389][T15164] loop6: detected capacity change from 0 to 1024 [ 441.957194][T15164] EXT4-fs: Ignoring removed bh option [ 441.961930][T15164] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 441.999768][T15164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.270473][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.357557][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3381'. [ 442.495088][T15174] IPVS: length: 24 != 3170136 [ 442.927561][T15199] loop1: detected capacity change from 0 to 764 [ 443.330224][T15212] loop7: detected capacity change from 0 to 1024 [ 443.342310][T15212] EXT4-fs: Ignoring removed bh option [ 443.356638][T15212] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 443.361559][T15214] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 443.386209][T15212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.419054][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 443.419083][ T29] audit: type=1400 audit(1790391053.775:5766): avc: denied { write } for pid=15211 comm="syz.7.3391" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.429714][ T29] audit: type=1400 audit(1790391053.785:5767): avc: denied { connect } for pid=15210 comm="syz.4.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 443.618427][T15221] IPVS: length: 24 != 3170136 [ 444.022175][T15232] loop3: detected capacity change from 0 to 764 [ 444.287046][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.292242][T15239] loop6: detected capacity change from 0 to 128 [ 444.732318][T15250] loop7: detected capacity change from 0 to 764 [ 444.977952][T15239] tipc: Enabling of bearer rejected, already enabled [ 445.721344][T15274] loop4: detected capacity change from 0 to 512 [ 445.749015][T15274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.749218][T15274] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.755307][ T29] audit: type=1400 audit(1790391056.115:5768): avc: denied { read } for pid=15273 comm="syz.4.3414" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 445.814167][T15274] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.3414: bg 0: block 448: padding at end of block bitmap is not set [ 445.815366][T15274] Quota error (device loop4): write_blk: dquota write failed [ 445.815451][T15274] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 445.815478][T15274] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.3414: Failed to acquire dquot type 1 [ 445.877025][ T29] audit: type=1400 audit(1790391056.235:5769): avc: denied { append } for pid=15273 comm="syz.4.3414" name="pfkey" dev="proc" ino=4026533185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 445.928085][ T29] audit: type=1400 audit(1790391056.285:5770): avc: denied { ioctl } for pid=15273 comm="syz.4.3414" path="socket:[49986]" dev="sockfs" ino=49986 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.974298][T15281] loop3: detected capacity change from 0 to 1024 [ 445.995539][T15281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.149462][T13730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.214881][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.353456][T15238] syz.1.3399 (15238) used greatest stack depth: 7520 bytes left [ 446.744810][T15297] loop4: detected capacity change from 0 to 512 [ 446.759546][T15297] EXT4-fs: quotafile must be on filesystem root [ 446.864224][T15296] loop7: detected capacity change from 0 to 128 [ 447.121426][T15297] ip_tables: iptables: counters copy to user failed while replacing table [ 447.246592][T15307] loop6: detected capacity change from 0 to 764 [ 447.318237][T15296] tipc: Enabling of bearer rejected, already enabled [ 447.713802][T15322] loop7: detected capacity change from 0 to 512 [ 447.830682][T15322] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.3428: corrupted in-inode xattr: invalid ea_ino [ 447.830853][T15322] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 447.832459][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 447.832478][ C0] EXT4-fs (loop7): initial error at time 1790391058: ext4_iget_extra_inode:5210: inode 15 [ 447.832519][ C0] EXT4-fs (loop7): last error at time 1790391058: ext4_iget_extra_inode:5210: inode 15 [ 447.838041][T15322] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.3428: couldn't read orphan inode 15 (err -117) [ 447.838135][T15322] loop7: lost filesystem error report for type 5 error -117 [ 447.839740][T15322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.096266][T15330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3430'. [ 448.160162][T15330] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3430'. [ 448.308691][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3428'. [ 448.398877][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.667577][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 448.668160][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.668439][T15352] macsec1: entered allmulticast mode [ 448.668462][T15352] veth1_macvtap: entered allmulticast mode [ 448.732402][T15341] loop4: detected capacity change from 0 to 128 [ 448.764495][T15356] fido_id[15356]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 448.877582][T15364] tipc: Enabling of bearer rejected, already enabled [ 448.999593][T15366] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3443:15366 [ 449.647888][ T1668] tipc: Subscription rejected, illegal request [ 449.652867][ T29] audit: type=1400 audit(1790391060.005:5771): avc: denied { read } for pid=15380 comm="syz.7.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 450.072277][ T29] audit: type=1326 audit(1790391060.425:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 450.098253][ T29] audit: type=1326 audit(1790391060.445:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 450.098299][ T29] audit: type=1326 audit(1790391060.445:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 450.149510][ T29] audit: type=1326 audit(1790391060.505:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ac81e159 code=0x7ffc0000 [ 450.149618][ T29] audit: type=1326 audit(1790391060.505:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17ac81dec2 code=0x7ffc0000 [ 450.149660][ T29] audit: type=1326 audit(1790391060.505:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f17ac81df57 code=0x7ffc0000 [ 450.149774][ T29] audit: type=1326 audit(1790391060.505:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f17ac7dae51 code=0x7ffc0000 [ 450.149872][ T29] audit: type=1326 audit(1790391060.505:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f17ac81ef49 code=0x7ffc0000 [ 450.149913][ T29] audit: type=1326 audit(1790391060.505:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.3.3450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f17ac7daebb code=0x7ffc0000 [ 450.917786][T15417] set_capacity_and_notify: 1 callbacks suppressed [ 450.917806][T15417] loop1: detected capacity change from 0 to 764 [ 451.604562][T15428] loop3: detected capacity change from 0 to 764 [ 451.751693][T15440] loop6: detected capacity change from 0 to 128 [ 451.892641][T15443] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.3466:15443 [ 451.920259][T15443] smpboot: CPU 1 is now offline [ 451.985200][T15444] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 452.336922][T15465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3474'. [ 452.568897][T15475] netlink: 'syz.6.3477': attribute type 1 has an invalid length. [ 452.637950][T15478] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3477'. [ 452.676664][T15475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.695130][T15478] bond1: (slave geneve2): making interface the new active one [ 452.699410][T15478] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 452.899185][T15483] loop4: detected capacity change from 0 to 128 [ 452.965153][ T3378] kernel read not supported for file /usbmon9 (pid: 3378 comm: kworker/1:3) [ 453.023796][T15487] loop6: detected capacity change from 0 to 764 [ 453.368409][T15492] loop7: detected capacity change from 0 to 512 [ 453.442637][T15492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.442713][T15492] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.502195][T15498] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3485'. [ 453.514800][T15509] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3486'. [ 453.692094][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.979975][T15533] loop6: detected capacity change from 0 to 128 [ 454.019846][T15533] bio_check_eod: 15 callbacks suppressed [ 454.019864][T15533] syz.6.3494: attempt to access beyond end of device [ 454.019864][T15533] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 454.041010][T15533] syz.6.3494: attempt to access beyond end of device [ 454.041010][T15533] loop6: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 454.041118][T15533] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 454.041204][T15533] syz.6.3494: attempt to access beyond end of device [ 454.041204][T15533] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 454.041277][T15533] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 454.041336][T15533] syz.6.3494: attempt to access beyond end of device [ 454.041336][T15533] loop6: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 454.041412][T15533] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 454.041787][T15533] syz.6.3494: attempt to access beyond end of device [ 454.041787][T15533] loop6: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 454.060049][T15533] syz.6.3494: attempt to access beyond end of device [ 454.060049][T15533] loop6: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 454.060150][T15533] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 454.318065][T15535] loop3: detected capacity change from 0 to 128 [ 454.568116][T15539] netlink: 'syz.1.3498': attribute type 2 has an invalid length. [ 454.682956][T15541] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3497'. [ 454.797891][T15559] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3504:15559 [ 454.844205][T15559] smpboot: CPU 1 is now offline [ 454.876888][T15560] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 454.927444][T15564] FAULT_INJECTION: forcing a failure. [ 454.927444][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.927500][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz.7.3506 Not tainted syzkaller #0 PREEMPT(lazy) [ 454.927536][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.927607][T15564] Call Trace: [ 454.927617][T15564] [ 454.927628][T15564] __dump_stack+0x1d/0x30 [ 454.927663][T15564] dump_stack_lvl+0x95/0xd0 [ 454.927695][T15564] dump_stack+0x15/0x1b [ 454.927732][T15564] should_fail_ex+0x262/0x280 [ 454.927784][T15564] should_fail+0xb/0x20 [ 454.927837][T15564] should_fail_usercopy+0x1a/0x20 [ 454.927934][T15564] _copy_from_user+0x1c/0xb0 [ 454.927974][T15564] prctl_set_mm+0x26b/0x9e0 [ 454.928018][T15564] ? __perf_event_overflow+0x6da/0x940 [ 454.928060][T15564] ? ktime_get+0x212/0x240 [ 454.928112][T15564] ? lapic_next_event+0x11/0x20 [ 454.928144][T15564] ? clockevents_program_event+0x2fd/0x340 [ 454.928198][T15564] ? prepare_signal+0x58d/0x660 [ 454.928244][T15564] ? clockevents_program_event+0x2fd/0x340 [ 454.928372][T15564] ? security_task_prctl+0x13c/0x160 [ 454.928404][T15564] __se_sys_prctl+0x3e7/0x13b0 [ 454.928445][T15564] __x64_sys_prctl+0x67/0x80 [ 454.928485][T15564] x64_sys_call+0x2421/0x2550 [ 454.928526][T15564] do_syscall_64+0x112/0x360 [ 454.928573][T15564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.928604][T15564] RIP: 0033:0x7fe32b91e159 [ 454.928622][T15564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.928724][T15564] RSP: 002b:00007fe32a377028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 454.928752][T15564] RAX: ffffffffffffffda RBX: 00007fe32bba5fa0 RCX: 00007fe32b91e159 [ 454.928773][T15564] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000023 [ 454.928870][T15564] RBP: 00007fe32a377090 R08: 0000000000000000 R09: 0000000000000000 [ 454.928889][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.928908][T15564] R13: 00007fe32bba6038 R14: 00007fe32bba5fa0 R15: 00007ffca352c298 [ 454.928935][T15564] [ 454.990846][T15557] loop4: detected capacity change from 0 to 764 [ 455.025554][T15539] loop1: detected capacity change from 0 to 1024 [ 455.039404][T15539] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 455.048504][T15563] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3505:15563 [ 455.062863][T15539] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.3498: lblock 2 mapped to illegal pblock 2 (length 1) [ 455.062984][T15539] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 455.063310][T15539] __quota_error: 43 callbacks suppressed [ 455.063361][T15539] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 455.063415][T15539] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.3498: lblock 0 mapped to illegal pblock 48 (length 1) [ 455.063570][T15539] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 455.063852][T15539] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 455.063906][T15539] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3498: Failed to acquire dquot type 0 [ 455.063979][T15539] loop1: lost filesystem error report for type 5 error -117 [ 455.064210][T15539] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 455.064228][T15539] loop1: lost filesystem error report for type 5 error -117 [ 455.064474][T15539] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.3498: mark_inode_dirty error [ 455.064503][T15539] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.064632][T15539] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 455.064766][T15539] EXT4-fs (loop1): 1 orphan inode deleted [ 455.065811][T15539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.085501][ T6921] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.088770][ T6921] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 455.088838][ T6921] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:45: Failed to release dquot type 0 [ 455.134751][T15539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3498'. [ 455.280139][T15539] netlink: 'syz.1.3498': attribute type 4 has an invalid length. [ 455.280210][T15539] netlink: 8183 bytes leftover after parsing attributes in process `syz.1.3498'. [ 455.462798][T15539] kthread_run failed with err -4 [ 455.513751][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.516415][T13224] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.516459][T13224] loop1: lost filesystem error report for type 5 error -117 [ 455.518063][T13224] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 455.518089][T13224] loop1: lost filesystem error report for type 5 error -117 [ 455.518168][T13224] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 455.518192][T13224] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 455.518299][T13224] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.518333][T13224] loop1: lost filesystem error report for type 5 error -117 [ 455.846211][T15583] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3510'. [ 456.038327][T15599] set_capacity_and_notify: 1 callbacks suppressed [ 456.038347][T15599] loop1: detected capacity change from 0 to 512 [ 456.058863][T15599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 456.076104][T15599] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3516: bad orphan inode 131083 [ 456.076204][T15599] loop1: lost filesystem error report for type 5 error -117 [ 456.076909][T15599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.256901][T15606] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.3518:15606 [ 456.276718][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3519'. [ 456.625900][ T22] IRQ fixup: irq 33 move in progress, old vector 37 [ 456.627717][T15606] smpboot: CPU 1 is now offline [ 456.686302][T15611] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 456.722192][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.946773][T15625] loop6: detected capacity change from 0 to 764 [ 457.097586][T15621] loop3: detected capacity change from 0 to 512 [ 457.197158][T15621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 457.203417][T15621] System zones: 1-12 [ 457.618349][T15629] loop1: detected capacity change from 0 to 128 [ 457.764387][T15621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.3521: missing EA_INODE flag [ 457.764594][T15621] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 457.774174][T15621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3521: error while reading EA inode 12 err=-117 [ 457.774302][T15621] loop3: lost filesystem error report for type 5 error -117 [ 457.778200][T15621] EXT4-fs (loop3): 1 orphan inode deleted [ 457.779402][T15621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.996150][ T29] audit: type=1400 audit(1790391068.355:5824): avc: denied { bind } for pid=15620 comm="syz.3.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.000508][T15650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3521'. [ 458.024248][ T29] audit: type=1400 audit(1790391068.365:5825): avc: denied { write } for pid=15620 comm="syz.3.3521" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.656135][T13730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.895676][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3533'. [ 459.179290][T15681] loop6: detected capacity change from 0 to 764 [ 460.469826][T15654] loop7: detected capacity change from 0 to 8192 [ 461.206737][T15710] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3549'. [ 461.222774][T15686] loop3: detected capacity change from 0 to 8192 [ 461.551385][T15722] loop4: detected capacity change from 0 to 764 [ 461.918835][T15729] loop1: detected capacity change from 0 to 256 [ 461.934354][T15729] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.292063][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3555'. [ 462.336344][T15738] ipvlan2: entered allmulticast mode [ 462.336462][T15738] syz_tun: entered allmulticast mode [ 462.911257][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3559'. [ 463.100234][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 463.563910][T15787] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3570'. [ 463.952921][ T29] audit: type=1400 audit(1790391075.310:5826): avc: denied { create } for pid=15800 comm="syz.1.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 463.960010][T15805] loop3: detected capacity change from 0 to 128 [ 464.015077][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3575'. [ 464.062265][ T29] audit: type=1400 audit(1790391075.420:5827): avc: denied { sys_admin } for pid=15800 comm="syz.1.3574" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 464.137906][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 464.139281][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 464.642198][T15829] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3583'. [ 464.657937][ T8255] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 464.663113][ T8255] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.925114][T15851] fido_id[15851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 464.945273][T15853] loop3: detected capacity change from 0 to 128 [ 464.994706][T15853] tipc: Started in network mode [ 464.994743][T15853] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 464.994795][T15853] tipc: Enabled bearer , priority 10 [ 465.099591][T15859] loop6: detected capacity change from 0 to 128 [ 465.458658][T15876] loop1: detected capacity change from 0 to 1024 [ 465.459047][T15876] EXT4-fs: Ignoring removed bh option [ 465.464549][T15876] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 465.494760][T15876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.498115][ T29] audit: type=1400 audit(1790391076.860:5828): avc: denied { write } for pid=15875 comm="syz.1.3596" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.736063][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.837419][T15883] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3598'. [ 465.964017][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3600'. [ 465.964509][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3600'. [ 465.994014][ T37] tipc: Node number set to 8432298 [ 466.804426][ T29] audit: type=1400 audit(1790391078.170:5829): avc: denied { connect } for pid=15913 comm="syz.7.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 466.832378][T15906] loop3: detected capacity change from 0 to 128 [ 466.838440][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3606'. [ 466.921360][T15920] loop6: detected capacity change from 0 to 512 [ 466.938405][T15920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 466.944428][T15920] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.3607: bad orphan inode 131083 [ 466.944554][T15920] loop6: lost filesystem error report for type 5 error -117 [ 466.945758][T15920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.954915][ T29] audit: type=1400 audit(1790391078.320:5830): avc: denied { write } for pid=15919 comm="syz.6.3607" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.024700][T15920] FAULT_INJECTION: forcing a failure. [ 467.024700][T15920] name failslab, interval 1, probability 0, space 0, times 0 [ 467.024738][T15920] CPU: 1 UID: 0 PID: 15920 Comm: syz.6.3607 Not tainted syzkaller #0 PREEMPT(lazy) [ 467.024808][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.024823][T15920] Call Trace: [ 467.024831][T15920] [ 467.024840][T15920] __dump_stack+0x1d/0x30 [ 467.024874][T15920] dump_stack_lvl+0x95/0xd0 [ 467.024927][T15920] dump_stack+0x15/0x1b [ 467.025025][T15920] should_fail_ex+0x262/0x280 [ 467.025069][T15920] ? ext4_mb_new_blocks+0x76c/0x1e70 [ 467.025102][T15920] should_failslab+0x8c/0xb0 [ 467.025134][T15920] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 467.025176][T15920] ? ext4_mb_new_blocks+0x76c/0x1e70 [ 467.025227][T15920] ext4_mb_new_blocks+0x76c/0x1e70 [ 467.025258][T15920] ? ext4_get_branch+0x306/0x380 [ 467.025362][T15920] ? ext4_get_branch+0x306/0x380 [ 467.025412][T15920] ext4_ind_map_blocks+0xc1e/0x15d0 [ 467.025474][T15920] ext4_map_create_blocks+0x8a/0x390 [ 467.025501][T15920] ext4_map_blocks+0x57f/0x9a0 [ 467.025528][T15920] _ext4_get_block+0x117/0x370 [ 467.025608][T15920] ? _raw_spin_lock+0x53/0xa0 [ 467.025637][T15920] ext4_get_block+0x39/0x50 [ 467.025690][T15920] ext4_block_write_begin+0x695/0xcb0 [ 467.025730][T15920] ? __pfx_ext4_get_block+0x10/0x10 [ 467.025832][T15920] ext4_convert_inline_data_to_extent+0x37d/0x770 [ 467.025891][T15920] ext4_try_to_write_inline_data+0x54/0x90 [ 467.026023][T15920] ext4_write_begin+0x1bf/0xeb0 [ 467.026061][T15920] ? kmem_cache_free+0x106/0x3b0 [ 467.026097][T15920] ? inode_to_bdi+0x47/0xa0 [ 467.026206][T15920] ? balance_dirty_pages_ratelimited_flags+0x421/0x800 [ 467.026242][T15920] generic_perform_write+0x186/0x490 [ 467.026342][T15920] ext4_buffered_write_iter+0x2e3/0x480 [ 467.026384][T15920] ext4_file_write_iter+0x36e/0x1020 [ 467.026496][T15920] ? __rcu_read_unlock+0x4e/0x70 [ 467.026562][T15920] do_iter_readv_writev+0x4f6/0x5a0 [ 467.026643][T15920] vfs_writev+0x2d3/0x8c0 [ 467.026706][T15920] ? get_pid_task+0x92/0xc0 [ 467.026748][T15920] __se_sys_pwritev2+0xfc/0x1c0 [ 467.026796][T15920] __x64_sys_pwritev2+0x67/0x80 [ 467.026955][T15920] x64_sys_call+0x899/0x2550 [ 467.026983][T15920] do_syscall_64+0x112/0x360 [ 467.027107][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.027140][T15920] RIP: 0033:0x7f685acde159 [ 467.027159][T15920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.027193][T15920] RSP: 002b:00007f6859737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 467.027219][T15920] RAX: ffffffffffffffda RBX: 00007f685af65fa0 RCX: 00007f685acde159 [ 467.027241][T15920] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 467.027333][T15920] RBP: 00007f6859737090 R08: 0000000000000000 R09: 0000000000000003 [ 467.027353][T15920] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 467.027372][T15920] R13: 00007f685af66038 R14: 00007f685af65fa0 R15: 00007ffc646c8608 [ 467.027397][T15920] [ 467.164664][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.339452][ T29] audit: type=1326 audit(1790391078.700:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.4.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d7e159 code=0x7ffc0000 [ 467.340613][ T29] audit: type=1326 audit(1790391078.700:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.4.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d7e159 code=0x7ffc0000 [ 467.340892][ T29] audit: type=1326 audit(1790391078.700:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.4.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d7e159 code=0x7ffc0000 [ 467.346211][ T29] audit: type=1326 audit(1790391078.700:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.4.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fdf85d7e159 code=0x7ffc0000 [ 467.350036][ T29] audit: type=1326 audit(1790391078.700:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.4.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d7e159 code=0x7ffc0000 [ 467.435260][T15928] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3610:15928 [ 467.505030][T15926] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3609'. [ 467.680251][T15941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3614'. [ 468.433191][T15960] FAULT_INJECTION: forcing a failure. [ 468.433191][T15960] name failslab, interval 1, probability 0, space 0, times 0 [ 468.433236][T15960] CPU: 0 UID: 0 PID: 15960 Comm: syz.4.3621 Not tainted syzkaller #0 PREEMPT(lazy) [ 468.433335][T15960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.433354][T15960] Call Trace: [ 468.433370][T15960] [ 468.433382][T15960] __dump_stack+0x1d/0x30 [ 468.433414][T15960] dump_stack_lvl+0x95/0xd0 [ 468.433447][T15960] dump_stack+0x15/0x1b [ 468.433486][T15960] should_fail_ex+0x262/0x280 [ 468.433554][T15960] ? audit_log_start+0x34c/0x730 [ 468.433635][T15960] should_failslab+0x8c/0xb0 [ 468.433671][T15960] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 468.433847][T15960] ? audit_log_start+0x34c/0x730 [ 468.433944][T15960] audit_log_start+0x34c/0x730 [ 468.434057][T15960] audit_seccomp+0x49/0x110 [ 468.434087][T15960] __seccomp_filter+0x909/0x1360 [ 468.434133][T15960] ? __rcu_read_unlock+0x4e/0x70 [ 468.434259][T15960] ? __se_sys_futex+0x2f6/0x370 [ 468.434302][T15960] ? xfd_validate_state+0x45/0xf0 [ 468.434415][T15960] __seccomp_permit_syscall+0x7d/0x150 [ 468.434459][T15960] do_syscall_64+0xca/0x360 [ 468.434505][T15960] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 468.434596][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.434628][T15960] RIP: 0033:0x7fdf85d7e159 [ 468.434651][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.434678][T15960] RSP: 002b:00007fdf847d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 468.434741][T15960] RAX: ffffffffffffffda RBX: 00007fdf86005fa0 RCX: 00007fdf85d7e159 [ 468.434763][T15960] RDX: 0000000000000009 RSI: 0000000000000084 RDI: ffffffffffffffff [ 468.434782][T15960] RBP: 00007fdf85e1503b R08: 0000200000000cc0 R09: 0000000000000000 [ 468.434801][T15960] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 468.434842][T15960] R13: 00007fdf86006038 R14: 00007fdf86005fa0 R15: 00007fffd5320eb8 [ 468.434869][T15960] [ 468.443083][T15955] loop7: detected capacity change from 0 to 128 [ 468.773738][T15975] FAULT_INJECTION: forcing a failure. [ 468.773738][T15975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.773823][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.6.3627 Not tainted syzkaller #0 PREEMPT(lazy) [ 468.773855][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.773869][T15975] Call Trace: [ 468.773877][T15975] [ 468.773885][T15975] __dump_stack+0x1d/0x30 [ 468.773928][T15975] dump_stack_lvl+0x95/0xd0 [ 468.773958][T15975] dump_stack+0x15/0x1b [ 468.773986][T15975] should_fail_ex+0x262/0x280 [ 468.774022][T15975] should_fail+0xb/0x20 [ 468.774047][T15975] should_fail_usercopy+0x1a/0x20 [ 468.774135][T15975] strncpy_from_user+0x27/0x250 [ 468.774187][T15975] do_getname+0x59/0x1c0 [ 468.774268][T15975] user_path_at+0x28/0x100 [ 468.774299][T15975] __x64_sys_pivot_root+0x74/0x110 [ 468.774333][T15975] x64_sys_call+0x2400/0x2550 [ 468.774399][T15975] do_syscall_64+0x112/0x360 [ 468.774440][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.774463][T15975] RIP: 0033:0x7f685acde159 [ 468.774482][T15975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.774574][T15975] RSP: 002b:00007f6859737028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 468.774604][T15975] RAX: ffffffffffffffda RBX: 00007f685af65fa0 RCX: 00007f685acde159 [ 468.774625][T15975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.774643][T15975] RBP: 00007f6859737090 R08: 0000000000000000 R09: 0000000000000000 [ 468.774719][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.774737][T15975] R13: 00007f685af66038 R14: 00007f685af65fa0 R15: 00007ffc646c8608 [ 468.774766][T15975] [ 468.815353][T15973] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.3625:15973 [ 468.981256][T15978] loop6: detected capacity change from 0 to 1024 [ 468.985928][T15978] EXT4-fs: Ignoring removed bh option [ 468.988895][T15978] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 469.008805][T15978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.033203][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 469.033223][ T29] audit: type=1400 audit(1790391080.390:5901): avc: denied { write } for pid=15977 comm="syz.6.3629" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.105299][T15984] loop4: detected capacity change from 0 to 764 [ 469.289292][T15991] loop1: detected capacity change from 0 to 512 [ 469.297627][T15985] loop3: detected capacity change from 0 to 764 [ 469.306456][T15991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.3632: bg 0: block 4: invalid block bitmap [ 469.306487][T15991] loop1: lost filesystem error report for type 5 error -117 [ 469.306894][T15991] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 469.306917][T15991] loop1: lost filesystem error report for type 5 error -117 [ 469.307292][T15991] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3632: invalid indirect mapped block 1 (level 1) [ 469.307323][T15991] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 469.309905][T15991] EXT4-fs (loop1): 1 truncate cleaned up [ 469.310488][T15991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.394130][ T29] audit: type=1400 audit(1790391080.750:5902): avc: denied { write } for pid=15990 comm="syz.1.3632" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.489542][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.844958][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.002330][T16007] __nla_validate_parse: 2 callbacks suppressed [ 470.002357][T16007] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3638'. [ 470.143791][T16014] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3640:16014 [ 470.166530][T16014] smpboot: CPU 1 is now offline [ 470.209823][T16018] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 470.569594][T16033] loop1: detected capacity change from 0 to 1024 [ 470.570385][T16033] EXT4-fs: Ignoring removed bh option [ 470.572648][T16033] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 470.596264][T16033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.603756][ T29] audit: type=1400 audit(1790391081.970:5903): avc: denied { write } for pid=16032 comm="syz.1.3646" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.174723][T16048] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3650'. [ 471.206186][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.338990][T16055] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3652:16055 [ 471.428049][T16055] smpboot: CPU 1 is now offline [ 471.449794][T16063] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 471.451141][T16062] loop1: detected capacity change from 0 to 256 [ 471.470327][T16062] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.197181][T16086] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3662'. [ 472.658551][T16114] loop1: detected capacity change from 0 to 1024 [ 472.659232][T16114] EXT4-fs: Ignoring removed bh option [ 472.661104][T16114] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 472.690644][T16114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.705880][ T29] audit: type=1400 audit(1790391084.070:5904): avc: denied { write } for pid=16113 comm="syz.1.3669" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.811451][T13224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.932497][T16127] loop6: detected capacity change from 0 to 1024 [ 473.292918][T16140] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.3675:16140 [ 473.352371][T16143] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.3676:16143 [ 473.527720][T16153] loop4: detected capacity change from 0 to 1024 [ 473.528248][T16153] EXT4-fs: Ignoring removed bh option [ 473.531910][T16153] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 473.562027][T16153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.579989][ T29] audit: type=1400 audit(1790391084.940:5905): avc: denied { write } for pid=16152 comm="syz.4.3680" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.705115][T13525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.775865][T16164] IPVS: length: 24 != 3170136 [ 473.885910][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 473.887723][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 473.898944][T16171] 9p: Bad value for 'rfdno' [ 474.104979][T16175] loop7: detected capacity change from 0 to 128 [ 474.122947][T16177] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.3689:16177 [ 474.480153][T16185] loop6: detected capacity change from 0 to 256 [ 474.495689][T16185] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 474.688642][T16175] tipc: Enabling of bearer rejected, already enabled [ 474.879505][T16190] loop3: detected capacity change from 0 to 1024 [ 474.890225][T16190] EXT4-fs: Ignoring removed bh option [ 474.899741][T16190] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 474.923966][T16190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.979958][ T29] audit: type=1400 audit(1790391086.340:5906): avc: denied { write } for pid=16189 comm="syz.3.3693" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.259283][T16211] netlink: 'syz.6.3699': attribute type 1 has an invalid length. [ 475.285179][T16211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.308924][ T29] audit: type=1400 audit(1790391086.670:5907): avc: denied { accept } for pid=16210 comm="syz.6.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 475.370084][T16211] bond2: (slave veth3): Enslaving as an active interface with a down link [ 475.752151][T13730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.762268][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3702'. [ 475.762298][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3702'. [ 475.981270][T16243] loop4: detected capacity change from 0 to 256 [ 475.981760][T16243] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 476.057115][T16239] loop3: detected capacity change from 0 to 128 [ 476.957945][T16254] ip6erspan0: entered allmulticast mode [ 477.147997][T16261] loop6: detected capacity change from 0 to 1024 [ 477.150169][T16261] EXT4-fs: Ignoring removed bh option [ 477.150579][T16261] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 477.191550][T16261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.225347][ T29] audit: type=1400 audit(1790391088.590:5908): avc: denied { write } for pid=16260 comm="syz.6.3713" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.360367][T16238] loop7: detected capacity change from 0 to 8192 [ 477.723442][T16275] FAULT_INJECTION: forcing a failure. [ 477.723442][T16275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.723481][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.7.3716 Not tainted syzkaller #0 PREEMPT(lazy) [ 477.723514][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.723533][T16275] Call Trace: [ 477.723543][T16275] [ 477.723554][T16275] __dump_stack+0x1d/0x30 [ 477.723632][T16275] dump_stack_lvl+0x95/0xd0 [ 477.723665][T16275] dump_stack+0x15/0x1b [ 477.723695][T16275] should_fail_ex+0x262/0x280 [ 477.723726][T16275] should_fail+0xb/0x20 [ 477.723760][T16275] should_fail_usercopy+0x1a/0x20 [ 477.723794][T16275] _copy_from_user+0x1c/0xb0 [ 477.723899][T16275] ___sys_sendmsg+0xc1/0x1e0 [ 477.723945][T16275] __sys_sendmmsg+0x185/0x320 [ 477.723990][T16275] __x64_sys_sendmmsg+0x57/0x70 [ 477.724093][T16275] x64_sys_call+0x1fb4/0x2550 [ 477.724132][T16275] do_syscall_64+0x112/0x360 [ 477.724180][T16275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.724210][T16275] RIP: 0033:0x7fe32b91e159 [ 477.724228][T16275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.724308][T16275] RSP: 002b:00007fe32a377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.724336][T16275] RAX: ffffffffffffffda RBX: 00007fe32bba5fa0 RCX: 00007fe32b91e159 [ 477.724357][T16275] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 477.724376][T16275] RBP: 00007fe32a377090 R08: 0000000000000000 R09: 0000000000000000 [ 477.724470][T16275] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 477.724489][T16275] R13: 00007fe32bba6038 R14: 00007fe32bba5fa0 R15: 00007ffca352c298 [ 477.724512][T16275] [ 477.944417][T16279] loop3: detected capacity change from 0 to 128 [ 477.977616][T16281] loop7: detected capacity change from 0 to 256 [ 477.978146][T16281] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.241129][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.478509][T16287] ip6erspan0: entered allmulticast mode [ 478.484798][T16279] tipc: Enabling of bearer rejected, already enabled [ 478.731933][T16298] IPVS: length: 24 != 3170136 [ 479.099757][T16305] loop7: detected capacity change from 0 to 1024 [ 479.100194][T16305] EXT4-fs: inline encryption not supported [ 479.101776][T16305] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 479.132019][T16305] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.3729: lblock 2 mapped to illegal pblock 2 (length 1) [ 479.132129][T16305] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.132427][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 479.132452][ C0] EXT4-fs (loop7): initial error at time 1790391090: ext4_map_blocks:790: inode 3: block 2 [ 479.132514][ C0] EXT4-fs (loop7): last error at time 1790391090: ext4_map_blocks:790: inode 3: block 2 [ 479.133150][T16305] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 479.133294][T16305] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz.7.3729: Invalid inode table block 1 in block_group 0 [ 479.133330][T16305] loop7: lost filesystem error report for type 5 error -117 [ 479.134335][T16305] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 479.134410][T16305] loop7: lost filesystem error report for type 5 error -117 [ 479.148592][T16305] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3729: mark_inode_dirty error [ 479.148690][T16305] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.158611][T16305] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 479.158725][T16305] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.3729: Failed to acquire dquot type 0 [ 479.158757][T16305] loop7: lost filesystem error report for type 5 error -117 [ 479.159772][T16305] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 479.159865][T16305] loop7: lost filesystem error report for type 5 error -117 [ 479.176733][T16305] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.3729: mark_inode_dirty error [ 479.176763][T16305] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 479.187160][T16305] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 479.187206][T16305] EXT4-fs (loop7): 1 orphan inode deleted [ 479.187751][T16305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.269268][ T29] audit: type=1400 audit(1790391090.630:5909): avc: denied { ioctl } for pid=16312 comm="syz.1.3731" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 479.274358][T16313] FAULT_INJECTION: forcing a failure. [ 479.274358][T16313] name failslab, interval 1, probability 0, space 0, times 0 [ 479.274397][T16313] CPU: 1 UID: 0 PID: 16313 Comm: syz.1.3731 Not tainted syzkaller #0 PREEMPT(lazy) [ 479.274434][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.274478][T16313] Call Trace: [ 479.274485][T16313] [ 479.274500][T16313] __dump_stack+0x1d/0x30 [ 479.274531][T16313] dump_stack_lvl+0x95/0xd0 [ 479.274564][T16313] dump_stack+0x15/0x1b [ 479.274667][T16313] should_fail_ex+0x262/0x280 [ 479.274694][T16313] ? __debugfs_file_get+0x198/0x440 [ 479.274730][T16313] should_failslab+0x8c/0xb0 [ 479.274836][T16313] __kmalloc_cache_noprof+0x7a/0x400 [ 479.274879][T16313] ? avc_has_perm+0x101/0x190 [ 479.274922][T16313] ? __debugfs_file_get+0x198/0x440 [ 479.275028][T16313] __debugfs_file_get+0x198/0x440 [ 479.275066][T16313] open_proxy_open+0x46/0x310 [ 479.275095][T16313] do_dentry_open+0x49f/0xa60 [ 479.275145][T16313] ? __pfx_open_proxy_open+0x10/0x10 [ 479.275176][T16313] vfs_open+0x37/0x1e0 [ 479.275198][T16313] path_openat+0xc01/0x10d0 [ 479.275235][T16313] do_file_open+0x16c/0x290 [ 479.275343][T16313] do_sys_openat2+0xa0/0x130 [ 479.275435][T16313] __x64_sys_openat+0xf2/0x120 [ 479.275461][T16313] x64_sys_call+0x1f72/0x2550 [ 479.275505][T16313] do_syscall_64+0x112/0x360 [ 479.275606][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.275702][T16313] RIP: 0033:0x7fbd0eefe159 [ 479.275719][T16313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.275741][T16313] RSP: 002b:00007fbd0d957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.275827][T16313] RAX: ffffffffffffffda RBX: 00007fbd0f185fa0 RCX: 00007fbd0eefe159 [ 479.275880][T16313] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 479.275897][T16313] RBP: 00007fbd0ef9503b R08: 0000000000000000 R09: 0000000000000000 [ 479.275911][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.275924][T16313] R13: 00007fbd0f186038 R14: 00007fbd0f185fa0 R15: 00007ffce50e0128 [ 479.275984][T16313] [ 479.319637][T16294] loop6: detected capacity change from 0 to 128 [ 479.324284][ T6920] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 479.324650][ T6920] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 479.324672][ T6920] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:44: Failed to release dquot type 0 [ 479.326325][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.327148][ T8297] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 479.327290][ T8297] loop7: lost filesystem error report for type 5 error -117 [ 479.327527][ T8297] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 479.327622][ T8297] loop7: lost filesystem error report for type 5 error -117 [ 479.327860][ T8297] EXT4-fs error (device loop7): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 479.327883][ T8297] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.328229][ T8297] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 479.328312][ T8297] loop7: lost filesystem error report for type 5 error -117 [ 479.412991][T16315] loop3: detected capacity change from 0 to 1024 [ 479.414146][T16315] EXT4-fs: Ignoring removed bh option [ 479.433899][T16315] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 479.474371][T16315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.508169][ T29] audit: type=1400 audit(1790391090.870:5910): avc: denied { write } for pid=16314 comm="syz.3.3732" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.852389][T16326] loop6: detected capacity change from 0 to 256 [ 479.867406][T16326] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 480.339270][T13730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.567359][T16351] loop3: detected capacity change from 0 to 128 [ 480.909552][T16364] loop7: detected capacity change from 0 to 512 [ 480.910178][T16364] EXT4-fs: Ignoring removed i_version option [ 480.939131][T16364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.012102][T16364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.012212][T16364] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.122520][T16363] ================================================================== [ 481.122575][T16363] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 481.122636][T16363] [ 481.122642][T16363] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 0: [ 481.122664][T16363] tick_do_update_jiffies64+0x113/0x1c0 [ 481.122704][T16363] tick_nohz_handler+0x88/0x380 [ 481.122736][T16363] __hrtimer_run_queues+0x1f8/0x510 [ 481.122761][T16363] hrtimer_interrupt+0x27b/0x860 [ 481.122785][T16363] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 481.122817][T16363] sysvec_apic_timer_interrupt+0x6f/0x80 [ 481.122855][T16363] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.122882][T16363] __sanitizer_cov_trace_pc+0x75/0x80 [ 481.122912][T16363] fdget_pos+0x162/0x1d0 [ 481.122936][T16363] __se_sys_getdents64+0x31/0x230 [ 481.122974][T16363] __x64_sys_getdents64+0x43/0x50 [ 481.123010][T16363] x64_sys_call+0x2387/0x2550 [ 481.123041][T16363] do_syscall_64+0x112/0x360 [ 481.123076][T16363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.123101][T16363] [ 481.123108][T16363] read to 0xffffffff86e07a00 of 8 bytes by task 16363 on cpu 1: [ 481.123130][T16363] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 481.123172][T16363] count_shadow_nodes+0x6a/0x250 [ 481.123194][T16363] do_shrink_slab+0x61/0x650 [ 481.123222][T16363] shrink_slab+0x53b/0x8e0 [ 481.123250][T16363] shrink_node+0x6b8/0x2000 [ 481.123275][T16363] do_try_to_free_pages+0x408/0xca0 [ 481.123312][T16363] try_to_free_mem_cgroup_pages+0x201/0x420 [ 481.123370][T16363] mem_cgroup_force_empty_write+0x77/0x100 [ 481.123406][T16363] cgroup_file_write+0x197/0x350 [ 481.123454][T16363] kernfs_fop_write_iter+0x1d2/0x2e0 [ 481.123493][T16363] vfs_write+0x57f/0x9a0 [ 481.123534][T16363] ksys_write+0xdc/0x1a0 [ 481.123575][T16363] __x64_sys_write+0x40/0x50 [ 481.123603][T16363] x64_sys_call+0x154e/0x2550 [ 481.123631][T16363] do_syscall_64+0x112/0x360 [ 481.123661][T16363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.123690][T16363] [ 481.123695][T16363] value changed: 0x000000010000463d -> 0x000000010000463e [ 481.123712][T16363] [ 481.123718][T16363] Reported by Kernel Concurrency Sanitizer on: [ 481.123732][T16363] CPU: 1 UID: 0 PID: 16363 Comm: syz.7.3743 Not tainted syzkaller #0 PREEMPT(lazy) [ 481.123757][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.123770][T16363] ================================================================== [ 481.279509][T16334] tipc: Enabling of bearer rejected, already enabled [ 481.285422][ T29] audit: type=1400 audit(1790391092.650:5911): avc: denied { setattr } for pid=16362 comm="syz.7.3743" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 481.336111][T16370] loop6: detected capacity change from 0 to 128 [ 481.424338][T16364] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3743: bg 0: block 217: padding at end of block bitmap is not set [ 481.426564][T16364] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 481.478498][T16372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.573363][T16372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.710444][T16372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.818490][T16372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.952490][ T6883] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.962485][ T6883] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.962590][ T6883] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.962760][ T6883] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.928852][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.