last executing test programs: 39.763174507s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @random="3b66ab8bd32b", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @remote}, {0x15, 0xb, 0x0, @broadcast}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 39.24979625s ago: executing program 0 (id=8): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x4000100}}], 0x18}, 0x24004804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 4) 38.538538119s ago: executing program 0 (id=10): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (fail_nth: 3) 38.010728043s ago: executing program 0 (id=13): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'ovf\x00', 0x0, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b4000000590806000108000604"], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@nouid32}, {@lazytime}, {@dax}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffff001, 0x40) ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r5, 0xc138fd09, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r9, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000503, r9, 0x0) socket(0x3c, 0x2, 0x7fff) 37.492199427s ago: executing program 0 (id=19): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) 33.460956223s ago: executing program 0 (id=43): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x7, 0x0, 0x0, 0x7, 0x522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0x100, 0x1224, 0x2, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x111812, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="010028bd700000000000010000007800088074000080080003000100000024000200aa987bd5854bc5c7ac2a957387359a2af6061134cbd87e95cdb64a58d5f62c91616b06f5e405cc7bd3200004fe0409be2100000002000000000000000000000000000000010800000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922140002007767300000000000000000e6ffffff00"], 0xa0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) r4 = syz_io_uring_setup(0xf02, &(0x7f0000000140)={0x0, 0xab9f, 0x10000, 0x2, 0x8000004e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a000002", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c20000000000060009"], 0x78}}, 0x0) r6 = open(&(0x7f0000000100)='./tracing/dynamic_events\x00', 0x680000, 0xf0) openat(r6, &(0x7f00000000c0)='./tracing\x00', 0x1, 0x118) futex_waitv(&(0x7f0000000240)=[{0x5, &(0x7f0000000080)=0x5, 0x2}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) signalfd4(r3, &(0x7f0000000280)={[0xc]}, 0x8, 0xc0800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004380), 0x0, 0x2001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r8, r9, 0x26, 0x0, @val=@netkit}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) futex(&(0x7f0000000080), 0x3, 0x2, 0x0, &(0x7f0000000140)=0x2, 0xfffffffd) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x3, 0x1) socket(0x1e, 0x5, 0xffffffff) 33.373162746s ago: executing program 32 (id=43): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x7, 0x0, 0x0, 0x7, 0x522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0x100, 0x1224, 0x2, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x111812, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="010028bd700000000000010000007800088074000080080003000100000024000200aa987bd5854bc5c7ac2a957387359a2af6061134cbd87e95cdb64a58d5f62c91616b06f5e405cc7bd3200004fe0409be2100000002000000000000000000000000000000010800000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922140002007767300000000000000000e6ffffff00"], 0xa0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) r4 = syz_io_uring_setup(0xf02, &(0x7f0000000140)={0x0, 0xab9f, 0x10000, 0x2, 0x8000004e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a000002", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c20000000000060009"], 0x78}}, 0x0) r6 = open(&(0x7f0000000100)='./tracing/dynamic_events\x00', 0x680000, 0xf0) openat(r6, &(0x7f00000000c0)='./tracing\x00', 0x1, 0x118) futex_waitv(&(0x7f0000000240)=[{0x5, &(0x7f0000000080)=0x5, 0x2}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) signalfd4(r3, &(0x7f0000000280)={[0xc]}, 0x8, 0xc0800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004380), 0x0, 0x2001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r8, r9, 0x26, 0x0, @val=@netkit}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) futex(&(0x7f0000000080), 0x3, 0x2, 0x0, &(0x7f0000000140)=0x2, 0xfffffffd) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x3, 0x1) socket(0x1e, 0x5, 0xffffffff) 32.794131671s ago: executing program 2 (id=49): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 32.122308359s ago: executing program 2 (id=54): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x28}}, 0x0) 30.986310089s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x4540, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa0b644ffc8aded6eb035696289c009078030000004500000000000000002f0000ac14140ae0000001040086dd0000ffff"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$unix(0x1, 0x1, 0x0) 28.194450743s ago: executing program 2 (id=57): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'ovf\x00', 0x0, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b4000000590806000108000604"], 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@nouid32}, {@lazytime}, {@dax}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffff001, 0x40) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") 27.562872359s ago: executing program 2 (id=62): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15060000f2ff01000000010000003000018014"], 0x44}, 0x5}, 0x0) (fail_nth: 3) 27.193528639s ago: executing program 2 (id=71): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 27.096588792s ago: executing program 33 (id=71): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 5.703016239s ago: executing program 6 (id=491): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r3, &(0x7f00000000c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) pread64(r0, 0x0, 0x0, 0x6) 5.564505123s ago: executing program 5 (id=494): fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@sha1={0x1, "3ef2228a2359e910da656ddd740710d4738b2bf2"}, 0x15, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11cd88, 0x1224, 0xffffffff, 0x4, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x7f2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xea, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x3000000, 0x810, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_io_uring(0x6818, &(0x7f00000001c0)={0x0, 0xf0a1, 0x1000, 0x1, 0x288}, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_complete(r3, r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x32dd, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) io_uring_setup(0x1cf9, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-\xb4', 0x3a, '', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x43, 0x46, 0x43]}, 0x11d) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5.482348515s ago: executing program 6 (id=495): pipe(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r1}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21001e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@noblock_validity}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@permit_directio}, {@euid_gt}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={r6, 0x800}, &(0x7f00000001c0)=0x8) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="f40200001600010029bd7000f8dbdf25fc0000000000000000000000000000017f0000010000000000000000000000004e2401ff4e200006020000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010100000000000000000000000000000004d46c000000fe8000000000000000000000000000bb03000000000000000200000000000000e95d000000000000070000000000000005000000000000002256a2690000000081000000000000000400000000000000040000000000000004000000000000000000000000000000000000000000000002000000030000000700000027bd700005350000000001054c00000000000000090000003303000031010300"], 0x2f4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fbc000/0x4000)=nil, 0x4000000004, 0x0, 0x0, 0xbff, 0x43, 0x0, 0x8, 0x5f}) 4.925638429s ago: executing program 6 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000300000001000000010000850900000000000100050000008e000000005f00"], 0x0, 0x33, 0x0, 0x1, 0x4b}, 0x28) r10 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r12 = socket$inet(0x2, 0x5, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x30) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r12, 0x0) recvmmsg(r12, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) timer_delete(r11) 4.617572038s ago: executing program 6 (id=503): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x180000, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, r1, 0x65317000) bpf$MAP_CREATE(0x1300, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000100000020"], 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r2 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041810}, 0x0) syz_open_dev$rtc(&(0x7f0000003480), 0x0, 0x6880) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) setns(0xc9, 0x0) getresgid(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x0, 0x800, 0x1, 0x0, 0x86}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r2, 0x80) 2.529054183s ago: executing program 4 (id=506): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.484874764s ago: executing program 4 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.433590475s ago: executing program 6 (id=509): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f0000000280)={[{@nodiscard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@test_dummy_encryption_v1}, {@dax}, {@nodelalloc}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 2.200132651s ago: executing program 5 (id=511): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000010) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000000000000007e80000000000001a000000006fd0820a1a7ba895fad2546bc4e21be3a033c5b6192fec3f26a0917400f809c2f3ab5ac610fd041b015b55bf619e624eee7f084ae0c5805a8a54c55fbd72d59e114bf8a15de2a38af73f85274f7f247e2be735c6177e561ff14ee40808616c7ab48958624038c322e54d7e7e86e60a3488ea801eb19195992e74cbd27246e7f915d2f81d96caca9a01201ac99645db347f0bb661e721ccc796189585a3ad4eba3c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"43eef8d01c3ad4fc02ccfcad20f910c4", 0x0, 0x0, {0x70071355, 0x9}, {0x7, 0x5}, 0xffffffff, [0x9, 0x5203, 0x8, 0x4, 0x9, 0xd3, 0x1000, 0xf4, 0x9, 0x80000001, 0x8, 0x10, 0x10, 0xf34, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000940)={{r2}, r4, 0xe18b567aa304b71b, @inherit={0x68, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x10000, {0x2, 0x5, 0x8, 0x1, 0x7}, [0x3e, 0x1, 0xfffffffffffffff9, 0x400]}}, @name="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000840)="5fc83dd3b7a25254be360df7b8e1", 0x0, 0x6333, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file5\x00', 0x1f9202, 0x8) statx(r8, &(0x7f0000000040)='./file5\x00', 0x100, 0x40, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.759430603s ago: executing program 1 (id=513): renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x7d}, &(0x7f0000000280), &(0x7f0000002c00), &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x4800000, 0x0, 0x7fffffc, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1) 1.52026733s ago: executing program 3 (id=514): socket$kcm(0x2, 0x5, 0x84) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xd}, 0x0, 0x0, 0xc297, 0x5, 0x0, 0x0, 0xfffc}, 0x0, 0xfffffffffffffffc, r0, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 1.485140181s ago: executing program 4 (id=515): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0xfffffffe, 0xfffefffd}}, 0x10) 1.366112784s ago: executing program 1 (id=516): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 1.365568464s ago: executing program 5 (id=517): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001007070"], 0x40}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) getsockopt(r0, 0x5, 0x0, &(0x7f0000000100)=""/59, &(0x7f0000000140)=0x3b) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1b0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.272698666s ago: executing program 4 (id=518): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x242202, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/166, 0xa6}], 0x3, 0x5b2, 0x9) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0x5, 0x0, 0x3, 0x6, 0x40, 0x401}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000002c0)={{0x0, 0x9}, 'port0\x00', 0x1, 0x40000, 0xba4a, 0x6, 0x1, 0xfffffff7, 0x5, 0x0, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000380)={0x7ff, 0x0, 'client0\x00', 0x4, "14eb50678b2a5c84", "db853e73c3bfb9bb3dd910c14e2fa2f93f96ae75d3f2f05b251e1f77138ff5e0", 0xffffffff, 0x4}) r3 = eventfd2(0x80, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000480)={0x0, 0x10, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) fsetxattr(r4, &(0x7f0000000500)=@random={'btrfs.', 'client0\x00'}, &(0x7f0000000540)='port0\x00', 0x6, 0x0) (async) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x7, 0x920) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x1407, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x28}}, 0x200440a0) (async) r5 = pidfd_getfd(r0, r0, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f0000000680), 0x8, 0x8001) (async) lsetxattr$security_selinux(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000780)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@generic={0x88e5, "d6ba8acc1f6e08d865ebbddbab9d174c70c5268e2b42991e100dd6912fc7429f75234c6bd85231cf59d4ad2a902a8666f74ea254d752415f1c82a8b0576688ce102e6ba941f474143e34b833742eb53f8477bd015a706badcfab330de0245570bc499dd3c7814e18935e60cbba5295d65b5672b6de0cc4b1aa64ccd10c639fd6b68167eb2b9f46"}}}, &(0x7f0000000840)={0x0, 0x2, [0xeb6, 0xe6b, 0x8a5, 0xa8a]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getchain={0x2c, 0x66, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0x7, 0xfff1}, {0x4, 0x3a6f0b5b181f9585}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000a00)={0x8, 0xffff, 0x0, 'queue0\x00', 0x9}) (async) r9 = openat$cgroup_devices(r8, &(0x7f0000000ac0)='devices.deny\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000b00)={0x0, r5, 0x7, 0x8000, 0x4, 0x9}) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x40, 0x90) (async) r10 = syz_io_uring_complete(0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000b80)={'macsec0\x00', 0x8000}) (async) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0xb, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x30, 0x2e]}}, &(0x7f0000000c00)=""/4096, 0x29, 0x1000, 0x0, 0xffff, 0x10000, @value=r11}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.233791347s ago: executing program 4 (id=519): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x1fee9, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (fail_nth: 6) 1.214260458s ago: executing program 5 (id=520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='(\x00') (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x8000000, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0xe, 0x6, 0x9, 0x80000001, 0xff9, 0xc416, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xff, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfb, 0x7, 0x7, 0x4000040, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x2, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x1, 0x180000, 0x4003, 0x4, 0x5, 0x2af, 0x3, 0x0, 0x2, 0x1, 0xb, 0x4, 0x1007, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x2, 0x10000, 0x3f6, 0xffffffff, 0x5, 0x6, 0x9, 0x80000000, 0xfcffffff, 0x2, 0xfffffffe, 0x9, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x400002, 0xe, 0x30000002, 0xd9e, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8000008, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0xe8, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x2b, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcb}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) (async, rerun: 32) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240440c8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) syz_emit_ethernet(0xd2, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a3d001c009c110120010000000000000000000000000002ff0200000000000000000000000000014e234e20"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000105090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000540)=0x0) capset(&(0x7f0000000580)={0x20080522, r4}, &(0x7f0000000600)={0x80000001, 0x9, 0x8, 0x3, 0xfffff280, 0x5}) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x40800, 0x0) (rerun: 32) read(r5, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) (async, rerun: 64) lsm_set_self_attr(0x5a0535ba9f17c80, 0x0, 0x1001, 0x0) (rerun: 64) 1.13770061s ago: executing program 1 (id=521): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.13746821s ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='&'], 0x10) 1.11582218s ago: executing program 1 (id=523): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000000014000500000000"], 0x30}, 0x1, 0x11}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 1.104013251s ago: executing program 4 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./proc\x00', &(0x7f0000000140), &(0x7f0000000240), 0x2, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 953.612024ms ago: executing program 5 (id=525): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x6cc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007eb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006ee000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000946000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x437e, &(0x7f0000000040)={0x0, 0xf7d, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 737.623141ms ago: executing program 6 (id=526): renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x7d}, &(0x7f0000000280), &(0x7f0000002c00), &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7, 0x5, 0xffffffff, 0xc}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1) 613.493134ms ago: executing program 5 (id=527): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0xa7}}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd00000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000003c0)={{0x8, 0x5}, 'port1\x00', 0x21, 0x1c0006, 0x5, 0x4, 0x3747, 0x7, 0xffff, 0x0, 0x5, 0x6}) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0xe23, 0x5, @empty, 0x4}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0xffffffff}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) close_range(r0, r9, 0x2) 586.556204ms ago: executing program 1 (id=528): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x2a}, @ldst={0x1, 0x0, 0x0, 0x9, 0x3, 0xfffffffffffffffe, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) 371.90702ms ago: executing program 3 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000090a010400000000000000000100000208000a400000000008000440ffffff000900010073797a30000000000900020073797a3200000000080003400000008c080005"], 0x74}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 161.694525ms ago: executing program 3 (id=530): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @random="3b66ab8bd32b", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @remote}, {0x15, 0xb, 0x0, @broadcast}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 161.369285ms ago: executing program 3 (id=531): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001e00110225bd7000ffdbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 159.129125ms ago: executing program 3 (id=532): renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x7d}, &(0x7f0000000280), &(0x7f0000002c00), &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x4800000, 0x0, 0x7fffffc, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1) 0s ago: executing program 3 (id=533): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): nied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.858787][ T28] audit: type=1400 audit(1785922269.305:126): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.860366][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.624759][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631909][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.639078][ T3300] bridge_slave_0: entered allmulticast mode [ 30.645723][ T3300] bridge_slave_0: entered promiscuous mode [ 30.670343][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.677441][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.684636][ T3300] bridge_slave_1: entered allmulticast mode [ 30.691115][ T3300] bridge_slave_1: entered promiscuous mode [ 30.741299][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.764887][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.780338][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.787469][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.794755][ T3302] bridge_slave_0: entered allmulticast mode [ 30.801062][ T3302] bridge_slave_0: entered promiscuous mode [ 30.807416][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814478][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.821648][ T3296] bridge_slave_0: entered allmulticast mode [ 30.827989][ T3296] bridge_slave_0: entered promiscuous mode [ 30.842492][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.849576][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.856760][ T3295] bridge_slave_0: entered allmulticast mode [ 30.863201][ T3295] bridge_slave_0: entered promiscuous mode [ 30.869626][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.876799][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.883983][ T3302] bridge_slave_1: entered allmulticast mode [ 30.890374][ T3302] bridge_slave_1: entered promiscuous mode [ 30.896730][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.903803][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.910899][ T3296] bridge_slave_1: entered allmulticast mode [ 30.917395][ T3296] bridge_slave_1: entered promiscuous mode [ 30.932173][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.939214][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.946438][ T3295] bridge_slave_1: entered allmulticast mode [ 30.952786][ T3295] bridge_slave_1: entered promiscuous mode [ 30.970639][ T3300] team0: Port device team_slave_0 added [ 30.976292][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983338][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.990498][ T3298] bridge_slave_0: entered allmulticast mode [ 30.996842][ T3298] bridge_slave_0: entered promiscuous mode [ 31.015477][ T3300] team0: Port device team_slave_1 added [ 31.022238][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.031396][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.038533][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.045682][ T3298] bridge_slave_1: entered allmulticast mode [ 31.052029][ T3298] bridge_slave_1: entered promiscuous mode [ 31.059188][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.069407][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.083663][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.097800][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.112068][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.141271][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.148294][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.174240][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.190261][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.200336][ T3295] team0: Port device team_slave_0 added [ 31.210294][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.217272][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.243212][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.254924][ T3296] team0: Port device team_slave_0 added [ 31.261468][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.275134][ T3295] team0: Port device team_slave_1 added [ 31.281505][ T3302] team0: Port device team_slave_0 added [ 31.290411][ T3302] team0: Port device team_slave_1 added [ 31.296709][ T3296] team0: Port device team_slave_1 added [ 31.316727][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.323707][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.349678][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.369480][ T3298] team0: Port device team_slave_0 added [ 31.376373][ T3298] team0: Port device team_slave_1 added [ 31.382329][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.389248][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.415194][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.443804][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.450777][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.476836][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.487872][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.494929][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.520917][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.539668][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.546639][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.572571][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.583822][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.590797][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.616680][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.627880][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.634938][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.660878][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.676082][ T3300] hsr_slave_0: entered promiscuous mode [ 31.682163][ T3300] hsr_slave_1: entered promiscuous mode [ 31.699581][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.706590][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.732701][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.760140][ T3295] hsr_slave_0: entered promiscuous mode [ 31.766086][ T3295] hsr_slave_1: entered promiscuous mode [ 31.771883][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 31.777604][ T3295] Cannot create hsr debugfs directory [ 31.812620][ T3296] hsr_slave_0: entered promiscuous mode [ 31.818500][ T3296] hsr_slave_1: entered promiscuous mode [ 31.824357][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 31.830073][ T3296] Cannot create hsr debugfs directory [ 31.850690][ T3302] hsr_slave_0: entered promiscuous mode [ 31.856720][ T3302] hsr_slave_1: entered promiscuous mode [ 31.862527][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.868321][ T3302] Cannot create hsr debugfs directory [ 31.882865][ T3298] hsr_slave_0: entered promiscuous mode [ 31.888972][ T3298] hsr_slave_1: entered promiscuous mode [ 31.894898][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.900638][ T3298] Cannot create hsr debugfs directory [ 32.070501][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.079027][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.086603][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.094969][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.102427][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.111345][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.121318][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.129749][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.149618][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.157934][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.165659][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.174155][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.181822][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.190306][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.203991][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.212374][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.236519][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.244976][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.258850][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.267736][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.275325][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.284231][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.291977][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.300185][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.327525][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.335938][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.343710][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.352215][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.359735][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.368162][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.375692][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.384160][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.429863][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.438560][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.446968][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.455665][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.463274][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.471893][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.480059][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.488724][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.501105][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.522599][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.544914][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.560636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.567716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.577981][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.587935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.594999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.603430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.610596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.626415][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.633489][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.645908][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.664248][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.676598][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.694280][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.704095][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.711171][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.727576][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.734644][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.743138][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.750187][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.760806][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.767865][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.783777][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.795820][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.820909][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.837631][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.844699][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.860057][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.867154][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.889113][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.053574][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.070018][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.119108][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.130401][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.140184][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.213836][ T3300] veth0_vlan: entered promiscuous mode [ 33.232830][ T3300] veth1_vlan: entered promiscuous mode [ 33.252668][ T3302] veth0_vlan: entered promiscuous mode [ 33.277809][ T3302] veth1_vlan: entered promiscuous mode [ 33.292956][ T3300] veth0_macvtap: entered promiscuous mode [ 33.308970][ T3295] veth0_vlan: entered promiscuous mode [ 33.318354][ T3300] veth1_macvtap: entered promiscuous mode [ 33.331532][ T3298] veth0_vlan: entered promiscuous mode [ 33.340435][ T3295] veth1_vlan: entered promiscuous mode [ 33.351834][ T3302] veth0_macvtap: entered promiscuous mode [ 33.359519][ T3298] veth1_vlan: entered promiscuous mode [ 33.371906][ T3302] veth1_macvtap: entered promiscuous mode [ 33.388001][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.397106][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.405792][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.413695][ T3296] veth0_vlan: entered promiscuous mode [ 33.427761][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.437904][ T1909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.456234][ T3298] veth0_macvtap: entered promiscuous mode [ 33.466745][ T3296] veth1_vlan: entered promiscuous mode [ 33.476642][ T3298] veth1_macvtap: entered promiscuous mode [ 33.487705][ T3295] veth0_macvtap: entered promiscuous mode [ 33.493847][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 33.493861][ T28] audit: type=1400 audit(1785922274.055:140): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.WSfX8g/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.500797][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.527242][ T28] audit: type=1400 audit(1785922274.055:141): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.548620][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.557419][ T28] audit: type=1400 audit(1785922274.055:142): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.WSfX8g/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.591016][ T1909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593021][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.600192][ T28] audit: type=1400 audit(1785922274.065:143): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.637187][ T28] audit: type=1400 audit(1785922274.065:144): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.WSfX8g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.651425][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.667088][ T28] audit: type=1400 audit(1785922274.065:145): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.WSfX8g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.700243][ T28] audit: type=1400 audit(1785922274.065:146): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.720719][ T28] audit: type=1400 audit(1785922274.105:147): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.727537][ T3296] veth0_macvtap: entered promiscuous mode [ 33.745000][ T28] audit: type=1400 audit(1785922274.105:148): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.772769][ T3295] veth1_macvtap: entered promiscuous mode [ 33.788735][ T28] audit: type=1400 audit(1785922274.355:149): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.819284][ T3296] veth1_macvtap: entered promiscuous mode [ 33.831415][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848126][ T3462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.858625][ T3504] usb usb8: usbfs: process 3504 (syz.3.4) did not claim interface 0 before use [ 33.868032][ T3503] loop2: detected capacity change from 0 to 1024 [ 33.892761][ T1909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.914015][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.922044][ T3503] EXT4-fs: inline encryption not supported [ 33.930878][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.962115][ T3462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.020887][ T3503] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.029174][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.053346][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.082723][ T3462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099393][ T3503] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3: Failed to acquire dquot type 0 [ 34.113879][ T3462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.178729][ T3503] loop2: lost filesystem error report for type 5 error -117 [ 34.178967][ T3503] EXT4-fs (loop2): 1 truncate cleaned up [ 34.186329][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 34.186349][ C1] EXT4-fs (loop2): initial error at time 1785922274: ext4_acquire_dquot:7041 [ 34.186367][ C1] EXT4-fs (loop2): last error at time 1785922274: ext4_acquire_dquot:7041 [ 34.221409][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.232501][ T3509] syz.0.1 (3509) used greatest stack depth: 10944 bytes left [ 34.242908][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.313223][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.365970][ T3462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.399764][ T3519] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 34.411912][ T3519] syzkaller1: entered promiscuous mode [ 34.504355][ T3519] syzkaller1: entered allmulticast mode [ 34.554022][ T3503] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 34.594564][ T3522] loop4: detected capacity change from 0 to 128 [ 34.747481][ T3522] FAT-fs (loop4): bogus number of FAT sectors [ 34.813372][ T3528] execmem: unable to allocate memory [ 34.819972][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.836342][ T3522] FAT-fs (loop4): Can't find a valid FAT filesystem [ 35.013556][ T3462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.201724][ T3462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.251501][ T2627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.289551][ T3522] loop4: detected capacity change from 0 to 512 [ 35.299659][ T2627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.400230][ T3522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.416229][ T3462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.452098][ T3462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.469482][ T3522] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.553193][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.599059][ T3538] FAULT_INJECTION: forcing a failure. [ 35.599059][ T3538] name failslab, interval 1, probability 0, space 0, times 0 [ 35.611977][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.661482][ T3538] CPU: 1 UID: 0 PID: 3538 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.661550][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.661564][ T3538] Call Trace: [ 35.661570][ T3538] [ 35.661576][ T3538] __dump_stack+0x1d/0x30 [ 35.661657][ T3538] dump_stack_lvl+0x95/0xd0 [ 35.661678][ T3538] dump_stack+0x15/0x1b [ 35.661695][ T3538] should_fail_ex+0x25e/0x270 [ 35.661720][ T3538] ? dev_ethtool+0x99/0x2100 [ 35.661746][ T3538] should_failslab+0x8c/0xb0 [ 35.661803][ T3538] __kmalloc_cache_noprof+0x7b/0x3d0 [ 35.661827][ T3538] ? dev_ethtool+0x99/0x2100 [ 35.661858][ T3538] dev_ethtool+0x99/0x2100 [ 35.661931][ T3538] ? full_name_hash+0x92/0xe0 [ 35.661956][ T3538] ? strcmp+0x22/0x50 [ 35.662000][ T3538] ? __rcu_read_unlock+0x4e/0x70 [ 35.662023][ T3538] dev_ioctl+0x2e0/0x960 [ 35.662040][ T3538] sock_do_ioctl+0x1aa/0x230 [ 35.662097][ T3538] sock_ioctl+0x439/0x610 [ 35.662151][ T3538] ? __pfx_sock_ioctl+0x10/0x10 [ 35.662168][ T3538] __se_sys_ioctl+0xce/0x140 [ 35.662189][ T3538] __x64_sys_ioctl+0x43/0x50 [ 35.662207][ T3538] x64_sys_call+0x1563/0x3020 [ 35.662262][ T3538] do_syscall_64+0x136/0x3c0 [ 35.662342][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.662359][ T3538] RIP: 0033:0x7fdb2832e019 [ 35.662375][ T3538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.662410][ T3538] RSP: 002b:00007fdb26d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.662467][ T3538] RAX: ffffffffffffffda RBX: 00007fdb285b5fa0 RCX: 00007fdb2832e019 [ 35.662542][ T3538] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003d [ 35.662555][ T3538] RBP: 00007fdb26d87090 R08: 0000000000000000 R09: 0000000000000000 [ 35.662566][ T3538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.662580][ T3538] R13: 00007fdb285b6038 R14: 00007fdb285b5fa0 R15: 00007fff36c56188 [ 35.662598][ T3538] [ 35.934724][ T3536] SELinux: policydb string length 1952804399 does not match expected length 8 [ 35.944852][ T3536] SELinux: failed to load policy [ 36.021350][ T3507] IPVS: starting estimator thread 0... [ 36.066652][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.126921][ T3547] loop0: detected capacity change from 0 to 4096 [ 36.140972][ T3552] SELinux: policydb string length 1952804399 does not match expected length 8 [ 36.168455][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.181125][ T3548] IPVS: using max 2544 ests per chain, 127200 per kthread [ 36.195292][ T3552] SELinux: failed to load policy [ 36.258966][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 36.466926][ T3547] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 36.579879][ T3298] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 36.630924][ T3298] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 36.710835][ T3566] Zero length message leads to an empty skb [ 37.669016][ T3575] loop2: detected capacity change from 0 to 512 [ 37.852645][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.885565][ T3591] FAULT_INJECTION: forcing a failure. [ 37.885565][ T3591] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.902767][ T3591] CPU: 0 UID: 0 PID: 3591 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.902795][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.902842][ T3591] Call Trace: [ 37.902848][ T3591] [ 37.902856][ T3591] __dump_stack+0x1d/0x30 [ 37.902879][ T3591] dump_stack_lvl+0x95/0xd0 [ 37.902896][ T3591] dump_stack+0x15/0x1b [ 37.902911][ T3591] should_fail_ex+0x25e/0x270 [ 37.903022][ T3591] should_fail+0xb/0x20 [ 37.903045][ T3591] should_fail_usercopy+0x1a/0x20 [ 37.903069][ T3591] strncpy_from_user+0x27/0x250 [ 37.903133][ T3591] do_getname+0x59/0x1c0 [ 37.903153][ T3591] getname_flags+0x1d/0x30 [ 37.903171][ T3591] do_sys_openat2+0x6c/0x130 [ 37.903197][ T3591] __x64_sys_openat+0xf2/0x120 [ 37.903234][ T3591] x64_sys_call+0x1e39/0x3020 [ 37.903318][ T3591] do_syscall_64+0x136/0x3c0 [ 37.903338][ T3591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.903358][ T3591] RIP: 0033:0x7f0ceb5ae84e [ 37.903375][ T3591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 37.903414][ T3591] RSP: 002b:00007f0cea025b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.903434][ T3591] RAX: ffffffffffffffda RBX: 00007f0cea0266c0 RCX: 00007f0ceb5ae84e [ 37.903445][ T3591] RDX: 0000000000080001 RSI: 00007f0cea025c00 RDI: ffffffffffffff9c [ 37.903475][ T3591] RBP: 00007f0cea025c00 R08: 0000000000000000 R09: 0000000000000000 [ 37.903485][ T3591] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 37.903496][ T3591] R13: 00007f0ceb876128 R14: 00007f0ceb876090 R15: 00007fffc80c8888 [ 37.903578][ T3591] [ 37.907327][ T3575] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.968915][ T3592] loop4: detected capacity change from 0 to 1024 [ 38.024917][ T3593] ======================================================= [ 38.024917][ T3593] WARNING: The mand mount option has been deprecated and [ 38.024917][ T3593] and is ignored by this kernel. Remove the mand [ 38.024917][ T3593] option from the mount to silence this warning. [ 38.024917][ T3593] ======================================================= [ 38.140783][ T3592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.152320][ T3592] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.167235][ T3592] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.171616][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.177690][ T3592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.199163][ T3592] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.27: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.200067][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.220800][ T3592] loop4: lost filesystem error report for type 5 error -117 [ 38.227102][ T3592] EXT4-fs (loop4): 1 orphan inode deleted [ 38.234512][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 38.234529][ C0] EXT4-fs (loop4): initial error at time 1785922278: ext4_free_blocks:6718 [ 38.234546][ C0] EXT4-fs (loop4): last error at time 1785922278: ext4_free_blocks:6718 [ 38.264362][ T3592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.320497][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.506584][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 38.506598][ T28] audit: type=1326 audit(1785922279.075:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.4.30" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d3841e019 code=0x0 [ 38.620177][ T3606] syz.4.30 (3606) used greatest stack depth: 10304 bytes left [ 38.679939][ T28] audit: type=1400 audit(1785922279.245:445): avc: denied { ioctl } for pid=3611 comm="syz.4.31" path="socket:[4064]" dev="sockfs" ino=4064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.684106][ T3612] vxcan3: entered promiscuous mode [ 38.727370][ T3612] vxcan3: entered allmulticast mode [ 38.739932][ T3612] team0: Device vxcan3 is of different type [ 38.758690][ T3617] loop3: detected capacity change from 0 to 128 [ 38.793050][ T3617] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.812552][ T28] audit: type=1400 audit(1785922279.385:446): avc: denied { mount } for pid=3616 comm="syz.3.32" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.931912][ T28] audit: type=1400 audit(1785922279.505:447): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.052656][ T28] audit: type=1400 audit(1785922279.615:448): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.113720][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 39.155481][ T3625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 39.249422][ T3625] loop3: detected capacity change from 0 to 512 [ 39.282889][ T3625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.318665][ T3625] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.330460][ T3627] loop1: detected capacity change from 0 to 512 [ 39.348900][ T3625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 39.357430][ T3627] EXT4-fs (loop1): 1 truncate cleaned up [ 39.363463][ T3627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.393271][ T28] audit: type=1400 audit(1785922279.955:449): avc: denied { write } for pid=3626 comm="syz.1.37" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.415272][ T3622] loop4: detected capacity change from 0 to 32768 [ 39.421378][ T3625] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 39.425462][ T28] audit: type=1400 audit(1785922279.955:450): avc: denied { accept } for pid=3626 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 39.536964][ T3625] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 39.550606][ T3625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.574160][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.583491][ T3622] loop4: p1 p3 < > [ 39.583995][ T3625] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.35: dx entry: limit 65535 != root limit 120 [ 39.602841][ T3625] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.35: Corrupt directory, running e2fsck is recommended [ 39.823714][ T35] IPVS: starting estimator thread 0... [ 39.896050][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.935294][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.000417][ T1909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.010928][ T3642] IPVS: using max 2592 ests per chain, 129600 per kthread [ 40.046224][ T3644] loop1: detected capacity change from 0 to 512 [ 40.171998][ T28] audit: type=1400 audit(1785922280.735:451): avc: denied { mounton } for pid=3640 comm="syz.1.40" path="/9/file1" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.198431][ T3644] EXT4-fs: dax option not supported [ 40.351054][ T3647] loop4: detected capacity change from 0 to 512 [ 40.371649][ T1909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.406331][ T3647] EXT4-fs: test_dummy_encryption option not supported [ 40.487939][ T28] audit: type=1400 audit(1785922280.955:452): avc: denied { perfmon } for pid=3648 comm="syz.3.42" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.516850][ T3650] SELinux: policydb string length 1952804399 does not match expected length 8 [ 40.548649][ T1909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.577309][ T3650] SELinux: failed to load policy [ 40.610044][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.634959][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.736474][ T28] audit: type=1400 audit(1785922281.305:453): avc: denied { create } for pid=3655 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.762268][ T3646] loop4: detected capacity change from 0 to 512 [ 40.813907][ T3646] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.842440][ T1909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.477183][ T1909] bridge_slave_1: left allmulticast mode [ 41.509292][ T1909] bridge_slave_1: left promiscuous mode [ 41.537925][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.595213][ T1909] bridge_slave_0: left allmulticast mode [ 41.618972][ T1909] bridge_slave_0: left promiscuous mode [ 41.647411][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.717150][ T3646] EXT4-fs (loop4): 1 orphan inode deleted [ 41.738031][ T2627] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 41.753672][ T3699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 41.760839][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.762803][ T3678] loop3: detected capacity change from 0 to 32768 [ 41.785415][ T2627] loop4: lost filesystem error report for type 5 error -117 [ 41.793219][ T3646] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.836819][ T1909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.857216][ T3678] loop3: p1 p3 < > [ 41.859916][ T1909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.886446][ T1909] bond0 (unregistering): Released all slaves [ 41.889954][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.913291][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.962372][ T3706] netlink: 68 bytes leftover after parsing attributes in process `syz.1.53'. [ 42.113389][ T3710] loop3: detected capacity change from 0 to 512 [ 42.125879][ T3710] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.003739][ T1909] hsr_slave_0: left promiscuous mode [ 43.013137][ T1909] hsr_slave_1: left promiscuous mode [ 43.020157][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.051205][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.062082][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 43.705384][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.753971][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.905772][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.113910][ T1909] veth1_macvtap: left promiscuous mode [ 44.119613][ T1909] veth0_macvtap: left promiscuous mode [ 45.084102][ T1909] veth1_vlan: left promiscuous mode [ 45.095477][ T1909] veth0_vlan: left promiscuous mode [ 45.883368][ T3397] IPVS: starting estimator thread 0... [ 45.939844][ T1909] team0 (unregistering): Port device team_slave_1 removed [ 45.947600][ T3727] loop2: detected capacity change from 0 to 4096 [ 46.021331][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 46.021343][ T28] audit: type=1400 audit(1785922286.585:468): avc: denied { listen } for pid=3705 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.026765][ T3728] IPVS: using max 2544 ests per chain, 127200 per kthread [ 46.027695][ T28] audit: type=1400 audit(1785922286.595:469): avc: denied { accept } for pid=3705 comm="syz.1.53" lport=51018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.027933][ T1909] team0 (unregistering): Port device team_slave_0 removed [ 46.086671][ T3727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.183704][ T28] audit: type=1400 audit(1785922286.755:470): avc: denied { write } for pid=3726 comm="syz.2.57" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.205331][ T3735] loop3: detected capacity change from 0 to 128 [ 46.225512][ T28] audit: type=1400 audit(1785922286.795:471): avc: denied { module_request } for pid=3654 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.251748][ T3735] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.264098][ T3735] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.325204][ T28] audit: type=1400 audit(1785922286.885:472): avc: denied { create } for pid=3734 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.347445][ T28] audit: type=1400 audit(1785922286.915:473): avc: denied { setopt } for pid=3734 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.373793][ T3730] mmap: syz.4.58 (3730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.388061][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.395326][ T28] audit: type=1400 audit(1785922286.915:474): avc: denied { listen } for pid=3729 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.414934][ T28] audit: type=1400 audit(1785922286.915:475): avc: denied { create } for pid=3744 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.435148][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.436237][ T28] audit: type=1400 audit(1785922286.915:476): avc: denied { bind } for pid=3744 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.452843][ T3654] bridge_slave_0: entered allmulticast mode [ 46.462300][ T28] audit: type=1400 audit(1785922286.915:477): avc: denied { connect } for pid=3744 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.500547][ T3300] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 46.502379][ T3654] bridge_slave_0: entered promiscuous mode [ 46.521191][ T3300] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 46.533997][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.548763][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.567513][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.594162][ T3654] bridge_slave_1: entered allmulticast mode [ 46.621926][ T3654] bridge_slave_1: entered promiscuous mode [ 46.636323][ T3533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.644042][ T1909] IPVS: stop unused estimator thread 0... [ 46.679236][ T3654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.705421][ T3654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.725451][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.767331][ T3772] SELinux: policydb string length 1952804399 does not match expected length 8 [ 46.768109][ T3654] team0: Port device team_slave_0 added [ 46.792074][ T3772] SELinux: failed to load policy [ 46.802569][ T3654] team0: Port device team_slave_1 added [ 46.841404][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.859804][ T3776] loop1: detected capacity change from 0 to 4096 [ 46.866777][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.905379][ T3654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.909950][ T3776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.921729][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.935649][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.963315][ T3654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.986255][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.031108][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.081164][ T3654] hsr_slave_0: entered promiscuous mode [ 47.092924][ T3654] hsr_slave_1: entered promiscuous mode [ 47.101976][ T3783] loop4: detected capacity change from 0 to 128 [ 47.113860][ T3654] debugfs: 'hsr0' already exists in 'hsr' [ 47.127532][ T3654] Cannot create hsr debugfs directory [ 47.168876][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.233008][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.247806][ T3817] FAULT_INJECTION: forcing a failure. [ 47.247806][ T3817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.261983][ T3817] CPU: 1 UID: 0 PID: 3817 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.262016][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.262095][ T3817] Call Trace: [ 47.262101][ T3817] [ 47.262108][ T3817] __dump_stack+0x1d/0x30 [ 47.262133][ T3817] dump_stack_lvl+0x95/0xd0 [ 47.262150][ T3817] dump_stack+0x15/0x1b [ 47.262167][ T3817] should_fail_ex+0x25e/0x270 [ 47.262205][ T3817] should_fail+0xb/0x20 [ 47.262225][ T3817] should_fail_usercopy+0x1a/0x20 [ 47.262298][ T3817] _copy_from_iter+0xcc/0xe70 [ 47.262327][ T3817] ? __alloc_skb+0x511/0x6f0 [ 47.262353][ T3817] ? __alloc_skb+0x205/0x6f0 [ 47.262438][ T3817] netlink_sendmsg+0x4a4/0x6f0 [ 47.262506][ T3817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.262531][ T3817] ____sys_sendmsg+0x532/0x580 [ 47.262552][ T3817] ___sys_sendmsg+0x195/0x1e0 [ 47.262619][ T3817] __x64_sys_sendmsg+0xd4/0x160 [ 47.262642][ T3817] x64_sys_call+0x194c/0x3020 [ 47.262682][ T3817] do_syscall_64+0x136/0x3c0 [ 47.262780][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.262800][ T3817] RIP: 0033:0x7f0ceb5ee019 [ 47.262816][ T3817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.262833][ T3817] RSP: 002b:00007f0cea047028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.262851][ T3817] RAX: ffffffffffffffda RBX: 00007f0ceb875fa0 RCX: 00007f0ceb5ee019 [ 47.262915][ T3817] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 47.262927][ T3817] RBP: 00007f0cea047090 R08: 0000000000000000 R09: 0000000000000000 [ 47.262940][ T3817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.262952][ T3817] R13: 00007f0ceb876038 R14: 00007f0ceb875fa0 R15: 00007fffc80c8888 [ 47.262970][ T3817] [ 47.465625][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.516410][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 47.536554][ T3833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 47.566584][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.719872][ T310] bridge_slave_1: left allmulticast mode [ 47.727872][ T310] bridge_slave_1: left promiscuous mode [ 47.740283][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.761148][ T310] bridge_slave_0: left allmulticast mode [ 47.777020][ T310] bridge_slave_0: left promiscuous mode [ 47.788793][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.885371][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.897208][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.907674][ T310] bond0 (unregistering): Released all slaves [ 47.938887][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 47.974634][ T3654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.986739][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.001821][ T310] hsr_slave_0: left promiscuous mode [ 48.008654][ T310] hsr_slave_1: left promiscuous mode [ 48.014995][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.023125][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.030999][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.038689][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.053501][ T310] veth1_macvtap: left promiscuous mode [ 48.061482][ T310] veth0_macvtap: left promiscuous mode [ 48.069267][ T310] veth1_vlan: left promiscuous mode [ 48.079239][ T310] veth0_vlan: left promiscuous mode [ 48.172809][ T310] team0 (unregistering): Port device team_slave_1 removed [ 48.199107][ T310] team0 (unregistering): Port device team_slave_0 removed [ 48.261930][ T3654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.272872][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.289297][ T3654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.299266][ T3882] loop1: detected capacity change from 0 to 512 [ 48.309427][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.333990][ T3654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.355960][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.373110][ T3882] EXT4-fs (loop1): 1 orphan inode deleted [ 48.385892][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.398622][ T1909] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 48.419319][ T1909] loop1: lost filesystem error report for type 5 error -117 [ 48.421864][ T3882] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.500773][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.521907][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.540623][ T3799] bridge_slave_0: entered allmulticast mode [ 48.573450][ T3799] bridge_slave_0: entered promiscuous mode [ 48.600093][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.615601][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.659693][ T3799] bridge_slave_1: entered allmulticast mode [ 48.674519][ T3799] bridge_slave_1: entered promiscuous mode [ 48.699952][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.708443][ T310] IPVS: stop unused estimator thread 0... [ 48.727777][ T3799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.756063][ T3799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.778093][ T3654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.804038][ T3799] team0: Port device team_slave_0 added [ 48.817106][ T3799] team0: Port device team_slave_1 added [ 48.851724][ T3654] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.859636][ T3799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.866939][ T3799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.875929][ T3911] netlink: 200 bytes leftover after parsing attributes in process `syz.4.91'. [ 48.932470][ T3799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.950531][ T3799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.950800][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.957745][ T3799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.018160][ T3799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.055357][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.062442][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.071532][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.078696][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.095856][ T3932] netlink: 200 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.126215][ T3799] hsr_slave_0: entered promiscuous mode [ 49.132362][ T3799] hsr_slave_1: entered promiscuous mode [ 49.150905][ T3654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.161635][ T3654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.421992][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.577899][ T3957] loop1: detected capacity change from 0 to 512 [ 49.623537][ T3799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.674312][ T3799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.710512][ T3799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.744506][ T3799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.777312][ T3799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.796018][ T3799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.809130][ T3799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.820799][ T3957] EXT4-fs (loop1): 1 orphan inode deleted [ 49.830526][ T3799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.837818][ T3462] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 49.859464][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.876708][ T3462] loop1: lost filesystem error report for type 5 error -117 [ 49.920396][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.938955][ T3957] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.055678][ T3654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.074939][ T3799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.110129][ T3799] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.144126][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.151194][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.182895][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.190003][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.200740][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.349307][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 50.360685][ T4002] loop3: detected capacity change from 0 to 512 [ 50.389106][ T4002] ext4: Unknown parameter 'mask' [ 50.398516][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 50.430746][ T4002] netlink: 200 bytes leftover after parsing attributes in process `syz.3.105'. [ 50.439639][ T3654] veth0_vlan: entered promiscuous mode [ 50.456326][ T3654] veth1_vlan: entered promiscuous mode [ 50.502362][ T3654] veth0_macvtap: entered promiscuous mode [ 50.509843][ T3654] veth1_macvtap: entered promiscuous mode [ 50.525808][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.546955][ T3799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.569595][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.603013][ T4053] netlink: 48 bytes leftover after parsing attributes in process `syz.3.111'. [ 50.672130][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.688946][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.711373][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725109][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.830117][ T4043] capability: warning: `syz.4.109' uses deprecated v2 capabilities in a way that may be insecure [ 50.867950][ T3799] veth0_vlan: entered promiscuous mode [ 50.885521][ T3799] veth1_vlan: entered promiscuous mode [ 50.892693][ T4073] SELinux: policydb string length 1952804399 does not match expected length 8 [ 50.922381][ T3799] veth0_macvtap: entered promiscuous mode [ 50.928490][ T4073] SELinux: failed to load policy [ 50.933839][ T4085] loop3: detected capacity change from 0 to 512 [ 50.944849][ T3799] veth1_macvtap: entered promiscuous mode [ 50.969708][ T3799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.979394][ T4085] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.985163][ T3799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.003967][ T4085] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.015990][ T4085] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.033545][ T4085] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 51.054326][ T4085] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.116: inode has both inline data and extents flags [ 51.061317][ T1909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.077763][ T4085] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.079832][ T4085] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.116: couldn't read orphan inode 16 (err -117) [ 51.085650][ T1909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.089240][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.100944][ T1909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.109602][ C0] EXT4-fs (loop3): initial error at time 1785922291: ext4_orphan_get:1399 [ 51.116212][ T1909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.124810][ C0] : inode 16 [ 51.145750][ C0] EXT4-fs (loop3): last error at time 1785922291: ext4_orphan_get:1399: inode 16 [ 51.168468][ T4085] loop3: lost filesystem error report for type 5 error -117 [ 51.185172][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.326995][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 51.327009][ T28] audit: type=1400 audit(1785922291.895:599): avc: denied { create } for pid=4099 comm="syz.6.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.353543][ T4096] loop5: detected capacity change from 0 to 32768 [ 51.384267][ T4100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.118'. [ 51.417171][ T4096] loop5: p1 p3 < > [ 51.428012][ T4100] ipvlan2: entered allmulticast mode [ 51.440272][ T4100] syz_tun: entered allmulticast mode [ 51.490240][ T28] audit: type=1400 audit(1785922292.055:600): avc: denied { mmap_zero } for pid=4107 comm="syz.5.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 51.514742][ T4103] loop1: detected capacity change from 0 to 512 [ 51.526409][ T4108] netlink: 'syz.5.120': attribute type 2 has an invalid length. [ 51.539795][ T4103] ext4: Unknown parameter 'mask' [ 51.546668][ T28] audit: type=1400 audit(1785922292.095:601): avc: denied { mount } for pid=4110 comm="syz.4.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.569331][ T4108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.120'. [ 51.583572][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.120'. [ 51.593989][ T28] audit: type=1400 audit(1785922292.145:602): avc: denied { bind } for pid=4110 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.690583][ T28] audit: type=1400 audit(1785922292.255:603): avc: denied { sqpoll } for pid=4123 comm="syz.6.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.765316][ T4127] SELinux: policydb string length 1952804399 does not match expected length 8 [ 51.805133][ T4127] SELinux: failed to load policy [ 51.832834][ T4124] loop6: detected capacity change from 0 to 2048 [ 51.855554][ T28] audit: type=1400 audit(1785922292.415:604): avc: denied { mount } for pid=4123 comm="syz.6.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 51.880011][ T28] audit: type=1400 audit(1785922292.425:605): avc: denied { search } for pid=4123 comm="syz.6.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.902389][ T28] audit: type=1400 audit(1785922292.425:606): avc: denied { search } for pid=4123 comm="syz.6.126" name="instances" dev="tracefs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.925284][ T28] audit: type=1400 audit(1785922292.425:607): avc: denied { write search } for pid=4123 comm="syz.6.126" name="instances" dev="tracefs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.925503][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.948652][ T28] audit: type=1400 audit(1785922292.425:608): avc: denied { add_name } for pid=4123 comm="syz.6.126" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.007402][ T4137] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 52.126293][ T4131] loop6: detected capacity change from 0 to 8192 [ 52.209254][ T4133] loop1: detected capacity change from 0 to 4096 [ 52.257883][ T4133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.393257][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.574721][ T4165] SELinux: policydb string length 1952804399 does not match expected length 8 [ 52.604059][ T4165] SELinux: failed to load policy [ 52.663710][ T4175] SELinux: policydb string length 1952804399 does not match expected length 8 [ 52.695056][ T4175] SELinux: failed to load policy [ 52.704097][ T4160] loop6: detected capacity change from 0 to 512 [ 52.712319][ T4182] __nla_validate_parse: 1 callbacks suppressed [ 52.712332][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 52.717793][ T4160] ext4: Unknown parameter 'mask' [ 52.740482][ T4182] loop3: detected capacity change from 0 to 512 [ 52.741828][ T4160] netlink: 200 bytes leftover after parsing attributes in process `syz.6.137'. [ 52.840925][ T4182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.867678][ T4182] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.036222][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.145213][ T4225] loop5: detected capacity change from 0 to 512 [ 53.178169][ T4226] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 53.213797][ T4225] EXT4-fs (loop5): 1 truncate cleaned up [ 53.225331][ T4225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.247422][ T4226] bond1 (unregistering): Released all slaves [ 53.265673][ T4231] loop3: detected capacity change from 0 to 512 [ 53.272263][ T4211] loop1: detected capacity change from 0 to 32768 [ 53.293314][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.306199][ T4231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.332785][ T4231] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.345360][ T4211] loop1: p1 p3 < > [ 53.385812][ T4210] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz.3.155: invalid size [ 53.418835][ T4229] ext4: Unknown parameter 'mask' [ 53.435828][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 53.452139][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.471192][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.489046][ T4229] netlink: 200 bytes leftover after parsing attributes in process `syz.6.161'. [ 53.560084][ T4254] FAULT_INJECTION: forcing a failure. [ 53.560084][ T4254] name failslab, interval 1, probability 0, space 0, times 0 [ 53.573593][ T4254] CPU: 0 UID: 0 PID: 4254 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.573702][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.573714][ T4254] Call Trace: [ 53.573721][ T4254] [ 53.573788][ T4254] __dump_stack+0x1d/0x30 [ 53.573808][ T4254] dump_stack_lvl+0x95/0xd0 [ 53.573825][ T4254] dump_stack+0x15/0x1b [ 53.573839][ T4254] should_fail_ex+0x25e/0x270 [ 53.573887][ T4254] should_failslab+0x8c/0xb0 [ 53.573909][ T4254] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 53.573930][ T4254] ? skb_clone+0x151/0x1f0 [ 53.573947][ T4254] ? skb_clone+0x151/0x1f0 [ 53.573966][ T4254] skb_clone+0x151/0x1f0 [ 53.574007][ T4254] __netlink_deliver_tap+0x2be/0x510 [ 53.574103][ T4254] netlink_unicast+0x654/0x680 [ 53.574126][ T4254] netlink_sendmsg+0x5be/0x6f0 [ 53.574218][ T4254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.574244][ T4254] ____sys_sendmsg+0x532/0x580 [ 53.574265][ T4254] ___sys_sendmsg+0x195/0x1e0 [ 53.574341][ T4254] __x64_sys_sendmsg+0xd4/0x160 [ 53.574409][ T4254] x64_sys_call+0x194c/0x3020 [ 53.574429][ T4254] do_syscall_64+0x136/0x3c0 [ 53.574449][ T4254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.574530][ T4254] RIP: 0033:0x7f911474e019 [ 53.574546][ T4254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.574564][ T4254] RSP: 002b:00007f91131a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.574583][ T4254] RAX: ffffffffffffffda RBX: 00007f91149d5fa0 RCX: 00007f911474e019 [ 53.574648][ T4254] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 53.574661][ T4254] RBP: 00007f91131a7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.574673][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.574686][ T4254] R13: 00007f91149d6038 R14: 00007f91149d5fa0 R15: 00007ffd0ba35268 [ 53.574793][ T4254] [ 53.772297][ T4254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.165'. [ 53.799439][ T4254] vlan2: entered promiscuous mode [ 53.806832][ T4254] bridge0: entered promiscuous mode [ 53.910421][ T4272] EXT4-fs (loop5): 1 truncate cleaned up [ 53.925420][ T4272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.974102][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.067810][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.179'. [ 54.332838][ T4302] EXT4-fs: Invalid want_extra_isize 2 [ 54.559536][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.184'. [ 54.986897][ T4321] ext4: Unknown parameter 'mask' [ 55.045287][ T4321] netlink: 200 bytes leftover after parsing attributes in process `syz.6.189'. [ 55.052811][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 55.107154][ T4326] EXT4-fs: Ignoring removed orlov option [ 55.115871][ T4326] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 55.127055][ T4326] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 55.146498][ T4326] EXT4-fs (loop1): group descriptors corrupted! [ 55.260060][ T4344] batman_adv: batadv0: Adding interface: veth0 [ 55.266335][ T4344] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.324320][ T4344] batman_adv: batadv0: Interface activated: veth0 [ 55.375025][ T4352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4352 comm=syz.3.201 [ 55.515301][ T4358] EXT4-fs (loop5): 1 orphan inode deleted [ 55.533122][ T2627] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 55.535179][ T4358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.548049][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 55.566419][ T4358] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.595098][ T4370] EXT4-fs: Ignoring removed nobh option [ 55.638804][ T4370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.656254][ T4339] loop6: p1 p3 < > [ 55.715120][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 55.730808][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 55.756296][ T4370] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.772800][ T4381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.210'. [ 55.987501][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.997710][ T4370] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.205: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 56.038621][ T4390] netlink: 'syz.6.213': attribute type 1 has an invalid length. [ 56.071176][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.131883][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.331681][ T28] kauditd_printk_skb: 316 callbacks suppressed [ 56.331696][ T28] audit: type=1326 audit(1785922296.905:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.365772][ T28] audit: type=1326 audit(1785922296.905:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.405187][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.415921][ T28] audit: type=1326 audit(1785922296.905:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.471745][ T4410] set_capacity_and_notify: 9 callbacks suppressed [ 56.471797][ T4410] loop1: detected capacity change from 0 to 512 [ 56.472944][ T28] audit: type=1326 audit(1785922296.905:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.525200][ T4410] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.536381][ T4410] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.544638][ T28] audit: type=1326 audit(1785922296.905:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.571695][ T28] audit: type=1326 audit(1785922296.905:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.597232][ T4410] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 56.602574][ T28] audit: type=1326 audit(1785922296.905:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.616910][ T4410] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 56.642192][ T4410] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.218: Failed to acquire dquot type 1 [ 56.658102][ T4410] loop1: lost filesystem error report for type 5 error -5 [ 56.660403][ T4410] EXT4-fs (loop1): Remounting filesystem read-only [ 56.667645][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 56.667677][ C1] EXT4-fs (loop1): initial error at time 1785922297: ext4_acquire_dquot:7041 [ 56.667698][ C1] EXT4-fs (loop1): last error at time 1785922297: ext4_acquire_dquot:7041 [ 56.704898][ T28] audit: type=1326 audit(1785922296.905:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.6.213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52d322e84e code=0x7ffc0000 [ 56.738253][ T4410] EXT4-fs (loop1): 1 truncate cleaned up [ 56.744538][ T4410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.768261][ T4410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 56.777746][ T4410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 56.787888][ T4410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 56.838849][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.064172][ T4444] loop6: detected capacity change from 0 to 256 [ 57.082140][ T4445] loop3: detected capacity change from 0 to 1024 [ 57.089553][ T4445] EXT4-fs: Invalid want_extra_isize 2 [ 57.863452][ T4469] SELinux: policydb string length 1952804399 does not match expected length 8 [ 57.894681][ T4469] SELinux: failed to load policy [ 57.895107][ T4484] loop3: detected capacity change from 0 to 512 [ 57.968219][ T4481] loop5: detected capacity change from 0 to 512 [ 58.006305][ T4481] EXT4-fs: inline encryption not supported [ 58.035836][ T4481] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.080660][ T4481] EXT4-fs (loop5): orphan cleanup on readonly fs [ 58.088272][ T4481] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.245: inode #15: comm syz.5.245: iget: illegal inode # [ 58.105428][ T4481] loop5: lost filesystem error report for type 5 error -117 [ 58.106234][ T4481] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.245: couldn't read orphan inode 15 (err -117) [ 58.113805][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 58.113832][ C0] EXT4-fs (loop5): initial error at time 1785922298: ext4_orphan_get:1399 [ 58.113902][ C0] EXT4-fs (loop5): last error at time 1785922298: ext4_orphan_get:1399 [ 58.150847][ T4498] __nla_validate_parse: 4 callbacks suppressed [ 58.150864][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 58.152233][ T4481] loop5: lost filesystem error report for type 5 error -117 [ 58.177602][ T4481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.257587][ T4500] SELinux: policydb string length 0 does not match expected length 8 [ 58.266251][ T4500] SELinux: failed to load policy [ 58.286258][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 58.394647][ T4504] SELinux: policydb string length 1952804399 does not match expected length 8 [ 58.406954][ T4504] SELinux: failed to load policy [ 58.427574][ T4516] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 58.438994][ T4516] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.521073][ T4524] FAULT_INJECTION: forcing a failure. [ 58.521073][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 58.534079][ T4524] CPU: 1 UID: 0 PID: 4524 Comm: syz.6.262 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.534102][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.534112][ T4524] Call Trace: [ 58.534118][ T4524] [ 58.534124][ T4524] __dump_stack+0x1d/0x30 [ 58.534224][ T4524] dump_stack_lvl+0x95/0xd0 [ 58.534244][ T4524] dump_stack+0x15/0x1b [ 58.534263][ T4524] should_fail_ex+0x25e/0x270 [ 58.534287][ T4524] ? tcf_action_init_1+0x12d/0x4d0 [ 58.534428][ T4524] should_failslab+0x8c/0xb0 [ 58.534452][ T4524] __kmalloc_cache_noprof+0x7b/0x3d0 [ 58.534472][ T4524] ? tcf_action_init_1+0x12d/0x4d0 [ 58.534497][ T4524] tcf_action_init_1+0x12d/0x4d0 [ 58.534554][ T4524] tcf_action_init+0x29d/0x700 [ 58.534596][ T4524] tc_ctl_action+0x29e/0x860 [ 58.534638][ T4524] ? __pfx_tc_ctl_action+0x10/0x10 [ 58.534662][ T4524] rtnetlink_rcv_msg+0x6a7/0x720 [ 58.534710][ T4524] netlink_rcv_skb+0x11e/0x220 [ 58.534738][ T4524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.534761][ T4524] rtnetlink_rcv+0x1c/0x30 [ 58.534780][ T4524] netlink_unicast+0x5a7/0x680 [ 58.534816][ T4524] netlink_sendmsg+0x5be/0x6f0 [ 58.534838][ T4524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.534859][ T4524] ____sys_sendmsg+0x532/0x580 [ 58.534876][ T4524] ___sys_sendmsg+0x195/0x1e0 [ 58.534900][ T4524] __x64_sys_sendmsg+0xd4/0x160 [ 58.534997][ T4524] x64_sys_call+0x194c/0x3020 [ 58.535060][ T4524] do_syscall_64+0x136/0x3c0 [ 58.535081][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.535103][ T4524] RIP: 0033:0x7f52d326e019 [ 58.535119][ T4524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.535180][ T4524] RSP: 002b:00007f52d1cc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.535237][ T4524] RAX: ffffffffffffffda RBX: 00007f52d34f5fa0 RCX: 00007f52d326e019 [ 58.535248][ T4524] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 58.535260][ T4524] RBP: 00007f52d1cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.535273][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.535284][ T4524] R13: 00007f52d34f6038 R14: 00007f52d34f5fa0 R15: 00007ffdafc48588 [ 58.535303][ T4524] [ 58.788602][ T4528] macsec1: entered promiscuous mode [ 58.798006][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.801982][ T4528] bridge0: entered promiscuous mode [ 58.827619][ T4528] macsec2: entered promiscuous mode [ 58.848207][ T4533] SELinux: policydb string length 0 does not match expected length 8 [ 58.858138][ T4533] SELinux: failed to load policy [ 58.896409][ T4541] loop5: detected capacity change from 0 to 512 [ 58.908801][ T4541] EXT4-fs (loop5): 1 truncate cleaned up [ 58.915354][ T4541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.947846][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.995748][ T4549] loop3: detected capacity change from 0 to 512 [ 59.079600][ T4557] loop5: detected capacity change from 0 to 8192 [ 59.090670][ T4557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.166875][ T4549] EXT4-fs (loop3): 1 orphan inode deleted [ 59.196513][ T4558] loop6: detected capacity change from 0 to 1024 [ 59.203688][ T4558] EXT4-fs: Invalid want_extra_isize 2 [ 59.216657][ T4557] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.231545][ T310] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 59.249866][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.280684][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.302421][ T310] loop3: lost filesystem error report for type 5 error -117 [ 59.308130][ T4557] FAT-fs (loop5): Filesystem has been set read-only [ 59.332701][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.333193][ T4549] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.341767][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.367265][ T4571] SELinux: policydb string length 1952804399 does not match expected length 8 [ 59.390634][ T4571] SELinux: failed to load policy [ 59.403249][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.414067][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.423242][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.433430][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.442298][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.451299][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.462863][ T4557] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.725887][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.929163][ T4624] SELinux: policydb string length 1952804399 does not match expected length 8 [ 59.960829][ T4624] SELinux: failed to load policy [ 60.153513][ T4647] loop3: detected capacity change from 0 to 512 [ 60.159699][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 60.224089][ T4655] 9pnet_virtio: no channels available for device  [ 60.237535][ T4653] 9pnet_virtio: no channels available for device  [ 60.346383][ T4670] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.364615][ T4670] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.557968][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 60.568361][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.653740][ T4690] EXT4-fs (loop6): 1 orphan inode deleted [ 60.671740][ T4690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.685189][ T310] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 60.697306][ T4690] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.753995][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.764259][ T4704] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 60.984481][ T4700] ext4: Unknown parameter 'mask' [ 61.058478][ T4700] netlink: 200 bytes leftover after parsing attributes in process `syz.5.325'. [ 61.149047][ T4767] Cannot find set identified by id 0 to match [ 61.195590][ T4758] EXT4-fs: Ignoring removed orlov option [ 61.208331][ T4758] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 61.238184][ T4758] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 61.252319][ T4758] EXT4-fs (loop6): group descriptors corrupted! [ 61.300698][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.336'. [ 61.341981][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 61.342028][ T28] audit: type=1326 audit(1785922301.915:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.378297][ T28] audit: type=1326 audit(1785922301.945:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.419419][ T28] audit: type=1326 audit(1785922301.945:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.445515][ T28] audit: type=1326 audit(1785922301.985:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.472503][ T28] audit: type=1326 audit(1785922301.985:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.530503][ T28] audit: type=1326 audit(1785922301.985:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.639383][ T28] audit: type=1326 audit(1785922302.015:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.700504][ T28] audit: type=1326 audit(1785922302.045:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.745437][ T4792] set_capacity_and_notify: 4 callbacks suppressed [ 61.745504][ T4792] loop6: detected capacity change from 0 to 512 [ 61.760171][ T28] audit: type=1326 audit(1785922302.065:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.786489][ T28] audit: type=1326 audit(1785922302.075:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.3.327" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ceb5ae84e code=0x7ffc0000 [ 61.792518][ T4792] ext4: Unknown parameter 'oldalloc"grpquota' [ 61.825000][ T4782] bridge1: entered promiscuous mode [ 61.830532][ T4782] bridge1: entered allmulticast mode [ 61.856159][ T4782] team0: Port device bridge1 added [ 61.869106][ T4787] bridge0: port 3(team0) entered blocking state [ 61.909858][ T4787] bridge0: port 3(team0) entered disabled state [ 61.936948][ T4787] team0: entered allmulticast mode [ 61.944033][ T4787] team_slave_0: entered allmulticast mode [ 61.949965][ T4787] team_slave_1: entered allmulticast mode [ 61.958066][ T4787] team0: entered promiscuous mode [ 61.963339][ T4787] team_slave_0: entered promiscuous mode [ 61.969156][ T4787] team_slave_1: entered promiscuous mode [ 61.970602][ T4792] loop6: detected capacity change from 0 to 164 [ 61.975529][ T4787] bridge0: port 3(team0) entered blocking state [ 61.987494][ T4792] iso9660: Unknown parameter '00000000000000000000025' [ 61.987780][ T4787] bridge0: port 3(team0) entered forwarding state [ 62.022362][ T4792] netlink: 32 bytes leftover after parsing attributes in process `syz.6.344'. [ 62.026426][ T4815] SELinux: policydb string length 1952804399 does not match expected length 8 [ 62.043918][ T4815] SELinux: failed to load policy [ 62.123416][ T4831] loop3: detected capacity change from 0 to 512 [ 62.142095][ T4833] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 62.145121][ T40] bond0: (slave bond_slave_0): interface is now down [ 62.178081][ T4831] EXT4-fs (loop3): 1 truncate cleaned up [ 62.184879][ T40] bond0: (slave bond_slave_1): interface is now down [ 62.192220][ T40] bond0: now running without any active interface! [ 62.193092][ T4831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.224994][ T4792] loop6: detected capacity change from 0 to 512 [ 62.266726][ T4840] syz.4.352 (4840) used greatest stack depth: 10056 bytes left [ 62.280129][ T4846] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 62.304898][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.319801][ T4792] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.354222][ T4792] ------------[ cut here ]------------ [ 62.360053][ T4792] EA inode 11 i_nlink=2 [ 62.360132][ T4792] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.6.344/4792 [ 62.379192][ T4792] Modules linked in: [ 62.387458][ T4792] CPU: 0 UID: 0 PID: 4792 Comm: syz.6.344 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.397092][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.408233][ T4792] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 62.415205][ T4792] Code: 86 b7 96 ff 49 8d 7e 40 4c 8d 2d 4b 97 5a 05 e8 86 9d b5 ff 49 8b 6e 40 4c 89 e7 e8 ba 98 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 51 4e da 03 90 90 90 90 90 90 90 [ 62.439532][ T4792] RSP: 0018:ffffc9000daf77f8 EFLAGS: 00010246 [ 62.440993][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 62.445992][ T4792] RAX: ffff888102605030 RBX: ffff888107620180 RCX: ffffffff81c2a0f6 [ 62.465072][ T4792] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3830 [ 62.473949][ T4792] RBP: 000000000000000b R08: 0001888107620133 R09: 0000000000000000 [ 62.484070][ T4792] R10: ffffc9000daf7728 R11: 0001c9000daf7728 R12: ffff888107620130 [ 62.492421][ T4792] R13: ffffffff871d3830 R14: ffff8881076200e8 R15: 0000000000000001 [ 62.500701][ T4792] FS: 00007f52d1cc76c0(0000) GS:ffff8882ae8ca000(0000) knlGS:0000000000000000 [ 62.510162][ T4792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.517552][ T4792] CR2: 00007ffe230b1fa8 CR3: 000000011b8f2000 CR4: 00000000003506f0 [ 62.526092][ T4792] Call Trace: [ 62.529792][ T4792] [ 62.533292][ T4792] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 62.539942][ T4792] ext4_xattr_delete_inode+0x6b5/0x790 [ 62.545872][ T4792] ext4_evict_inode+0xb18/0xdf0 [ 62.550992][ T4792] ? __pfx_ext4_evict_inode+0x10/0x10 [ 62.556772][ T4792] evict+0x2a5/0x510 [ 62.560991][ T4792] iput+0x430/0x5a0 [ 62.565401][ T4792] ext4_process_orphan+0x1a4/0x1c0 [ 62.570902][ T4792] ext4_orphan_cleanup+0x6a6/0xa10 [ 62.576292][ T4792] ? ext4_fill_super+0x3350/0x3760 [ 62.581902][ T4792] ext4_fill_super+0x33ab/0x3760 [ 62.587913][ T4792] ? set_blocksize+0x14c/0x270 [ 62.594861][ T4792] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.600622][ T4792] get_tree_bdev_flags+0x291/0x300 [ 62.606221][ T4792] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.612058][ T4792] get_tree_bdev+0x1f/0x30 [ 62.616901][ T4792] ext4_get_tree+0x1c/0x30 [ 62.621781][ T4792] vfs_get_tree+0x57/0x1d0 [ 62.626552][ T4792] do_new_mount+0x288/0x8d0 [ 62.631751][ T4792] path_mount+0x4ad/0xb90 [ 62.636730][ T4792] __se_sys_mount+0x28c/0x2e0 [ 62.641671][ T4792] ? __hrtimer_rearm_deferred+0x571/0x650 [ 62.647892][ T4792] __x64_sys_mount+0x67/0x80 [ 62.653142][ T4792] x64_sys_call+0x2d61/0x3020 [ 62.656604][ T4843] loop5: detected capacity change from 0 to 512 [ 62.658205][ T4792] do_syscall_64+0x136/0x3c0 [ 62.669692][ T4792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.676314][ T4792] RIP: 0033:0x7f52d326f28a [ 62.680892][ T4792] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.701054][ T4792] RSP: 002b:00007f52d1cc6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.709999][ T4792] RAX: ffffffffffffffda RBX: 00007f52d1cc6ee0 RCX: 00007f52d326f28a [ 62.718499][ T4792] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f52d1cc6ea0 [ 62.726742][ T4792] RBP: 00002000000009c0 R08: 00007f52d1cc6ee0 R09: 0000000000800718 [ 62.735451][ T4792] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 62.743692][ T4792] R13: 00007f52d1cc6ea0 R14: 000000000000048d R15: 0000200000000200 [ 62.752302][ T4792] [ 62.755575][ T4792] ---[ end trace 0000000000000000 ]--- [ 62.765881][ T4792] EXT4-fs (loop6): 1 orphan inode deleted [ 62.779282][ T4792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.818225][ T4843] EXT4-fs (loop5): 1 orphan inode deleted [ 62.829484][ T4843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.846273][ T40] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 62.846960][ T4843] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.873582][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.930197][ T4882] loop6: detected capacity change from 0 to 128 [ 62.939499][ T4884] loop3: detected capacity change from 0 to 764 [ 62.949860][ T4884] iso9660: Bad value for 'gid' [ 62.952386][ T4882] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.955646][ T4884] iso9660: Bad value for 'gid' [ 62.968641][ T4882] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.983775][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.017706][ T4884] loop3: detected capacity change from 0 to 4096 [ 63.028329][ T4884] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.041017][ T4884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.057948][ T3799] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.099712][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.167550][ T4896] loop1: detected capacity change from 0 to 512 [ 63.178304][ T4888] syzkaller0: entered promiscuous mode [ 63.190240][ T4888] syzkaller0: entered allmulticast mode [ 63.194896][ T4896] EXT4-fs (loop1): 1 truncate cleaned up [ 63.200631][ T4888] tipc: Started in network mode [ 63.212499][ T4888] tipc: Node identity beaa72f75b1c, cluster identity 4711 [ 63.240116][ T4888] tipc: Enabled bearer , priority 0 [ 63.312529][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 63.326888][ T4914] tipc: Started in network mode [ 63.332482][ T4914] tipc: Node identity ba51fbfc9d3a, cluster identity 4711 [ 63.339667][ T4914] tipc: Enabled bearer , priority 12 [ 63.344148][ T4897] netlink: 'syz.6.367': attribute type 27 has an invalid length. [ 63.367428][ T4897] netlink: 164 bytes leftover after parsing attributes in process `syz.6.367'. [ 63.475684][ T4934] loop3: detected capacity change from 0 to 128 [ 63.502260][ T4934] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.529104][ T4887] tipc: Resetting bearer [ 63.544423][ T4887] tipc: Disabling bearer [ 63.608113][ T4928] ext4: Unknown parameter 'mask' [ 63.629548][ T4928] netlink: 200 bytes leftover after parsing attributes in process `syz.1.373'. [ 63.643640][ T4947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 63.644048][ T4947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 63.644551][ T4947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 63.694633][ T4954] capability: warning: `syz.5.381' uses 32-bit capabilities (legacy support in use) [ 63.719852][ T4951] EXT4-fs (loop3): 1 truncate cleaned up [ 63.746045][ T4958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.381'. [ 63.874749][ T4962] EXT4-fs: Ignoring removed orlov option [ 63.893655][ T4962] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 63.899784][ T4968] syzkaller0: entered promiscuous mode [ 63.905391][ T4962] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 63.913976][ T4968] syzkaller0: entered allmulticast mode [ 63.921001][ T4962] EXT4-fs (loop3): group descriptors corrupted! [ 63.952673][ T4966] SELinux: policydb string length 1952804399 does not match expected length 8 [ 63.966407][ T4968] tipc: Started in network mode [ 63.973101][ T4966] SELinux: failed to load policy [ 63.978343][ T4968] tipc: Node identity e657ca5453b, cluster identity 4711 [ 63.995031][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 63.995280][ T4968] tipc: Enabled bearer , priority 0 [ 64.019380][ T4967] tipc: Resetting bearer [ 64.028811][ T4967] tipc: Disabling bearer [ 64.122420][ T4982] SELinux: policydb string length 1952804399 does not match expected length 8 [ 64.142096][ T4982] SELinux: failed to load policy [ 64.185455][ T4995] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.203966][ T4995] FAULT_INJECTION: forcing a failure. [ 64.203966][ T4995] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 64.217679][ T4995] CPU: 1 UID: 0 PID: 4995 Comm: syz.5.396 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 64.217708][ T4995] Tainted: [W]=WARN [ 64.217714][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.217765][ T4995] Call Trace: [ 64.217772][ T4995] [ 64.217781][ T4995] __dump_stack+0x1d/0x30 [ 64.217799][ T4995] dump_stack_lvl+0x95/0xd0 [ 64.217817][ T4995] dump_stack+0x15/0x1b [ 64.217843][ T4995] should_fail_ex+0x25e/0x270 [ 64.217871][ T4995] should_fail_alloc_page+0xf2/0x100 [ 64.217963][ T4995] __alloc_frozen_pages_noprof+0x108/0x350 [ 64.217992][ T4995] alloc_pages_mpol+0xa9/0x1d0 [ 64.218021][ T4995] folio_alloc_noprof+0x96/0x150 [ 64.218050][ T4995] filemap_alloc_folio_noprof+0x92/0x220 [ 64.218115][ T4995] __filemap_get_folio_mpol+0x2a0/0x840 [ 64.218148][ T4995] ext4_load_tail_bh+0x4e/0x330 [ 64.218171][ T4995] ? ext4_block_zero_range+0x6d/0x710 [ 64.218244][ T4995] ext4_block_zero_range+0x7e/0x710 [ 64.218263][ T4995] ? ext4_reserve_inode_write+0x1bf/0x250 [ 64.218286][ T4995] ext4_block_zero_eof+0xde/0x290 [ 64.218340][ T4995] ext4_alloc_file_blocks+0x19d/0x990 [ 64.218363][ T4995] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 64.218396][ T4995] ext4_do_fallocate+0x159/0x410 [ 64.218451][ T4995] ext4_fallocate+0x207/0x320 [ 64.218468][ T4995] vfs_fallocate+0x3ac/0x400 [ 64.218492][ T4995] __x64_sys_fallocate+0x7a/0xd0 [ 64.218515][ T4995] x64_sys_call+0x298e/0x3020 [ 64.218573][ T4995] do_syscall_64+0x136/0x3c0 [ 64.218596][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.218619][ T4995] RIP: 0033:0x7fc94cc3e019 [ 64.218686][ T4995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.218701][ T4995] RSP: 002b:00007fc94b697028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 64.218717][ T4995] RAX: ffffffffffffffda RBX: 00007fc94cec5fa0 RCX: 00007fc94cc3e019 [ 64.218730][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 64.218743][ T4995] RBP: 00007fc94b697090 R08: 0000000000000000 R09: 0000000000000000 [ 64.218756][ T4995] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000001 [ 64.218790][ T4995] R13: 00007fc94cec6038 R14: 00007fc94cec5fa0 R15: 00007ffe76100da8 [ 64.218809][ T4995] [ 64.451949][ T5002] FAULT_INJECTION: forcing a failure. [ 64.451949][ T5002] name failslab, interval 1, probability 0, space 0, times 0 [ 64.464598][ T5002] CPU: 1 UID: 0 PID: 5002 Comm: syz.6.394 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 64.464629][ T5002] Tainted: [W]=WARN [ 64.464635][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.464645][ T5002] Call Trace: [ 64.464651][ T5002] [ 64.464657][ T5002] __dump_stack+0x1d/0x30 [ 64.464677][ T5002] dump_stack_lvl+0x95/0xd0 [ 64.464745][ T5002] dump_stack+0x15/0x1b [ 64.464760][ T5002] should_fail_ex+0x25e/0x270 [ 64.464782][ T5002] ? v9fs_init_fs_context+0x33/0x220 [ 64.464836][ T5002] should_failslab+0x8c/0xb0 [ 64.464871][ T5002] __kmalloc_cache_noprof+0x7b/0x3d0 [ 64.464890][ T5002] ? v9fs_init_fs_context+0x33/0x220 [ 64.464908][ T5002] ? alloc_fs_context+0x41/0x570 [ 64.464987][ T5002] v9fs_init_fs_context+0x33/0x220 [ 64.465006][ T5002] alloc_fs_context+0x490/0x570 [ 64.465031][ T5002] fs_context_for_mount+0x22/0x30 [ 64.465050][ T5002] do_new_mount+0xe7/0x8d0 [ 64.465123][ T5002] ? security_capable+0x7b/0x90 [ 64.465140][ T5002] path_mount+0x4ad/0xb90 [ 64.465157][ T5002] __se_sys_mount+0x28c/0x2e0 [ 64.465244][ T5002] ? fput+0x8f/0xc0 [ 64.465264][ T5002] __x64_sys_mount+0x67/0x80 [ 64.465281][ T5002] x64_sys_call+0x2d61/0x3020 [ 64.465299][ T5002] do_syscall_64+0x136/0x3c0 [ 64.465371][ T5002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.465388][ T5002] RIP: 0033:0x7f52d326e019 [ 64.465400][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.465414][ T5002] RSP: 002b:00007f52d1c85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.465430][ T5002] RAX: ffffffffffffffda RBX: 00007f52d34f6180 RCX: 00007f52d326e019 [ 64.465508][ T5002] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 64.465519][ T5002] RBP: 00007f52d1c85090 R08: 00002000000000c0 R09: 0000000000000000 [ 64.465530][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.465540][ T5002] R13: 00007f52d34f6218 R14: 00007f52d34f6180 R15: 00007ffdafc48588 [ 64.465554][ T5002] [ 64.762378][ T3397] tipc: Node number set to 661388284 [ 64.767298][ T5000] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.105415][ T5021] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 65.115830][ T5031] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.145228][ T5021] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.268958][ T5028] EXT4-fs (loop6): 1 orphan inode deleted [ 65.279993][ T5028] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.281915][ T5021] syz.4.405 (5021) used greatest stack depth: 10048 bytes left [ 65.291057][ T1909] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 65.415575][ T5044] No source specified [ 65.423141][ T5040] SELinux: policydb string length 1952804399 does not match expected length 8 [ 65.446809][ T5048] IPv6: NLM_F_REPLACE set, but no existing node found! [ 65.463478][ T5040] SELinux: failed to load policy [ 65.541057][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'. [ 65.610807][ T5067] EXT4-fs mount: 14 callbacks suppressed [ 65.610888][ T5067] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.716781][ T5067] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.728515][ T5075] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 65.788522][ T5075] bond1: entered promiscuous mode [ 65.809891][ T5075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.810490][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.980532][ T5088] SELinux: policydb string length 1952804399 does not match expected length 8 [ 65.990063][ T5088] SELinux: failed to load policy [ 66.136915][ T3462] tipc: Subscription rejected, illegal request [ 66.156232][ T5107] FAULT_INJECTION: forcing a failure. [ 66.156232][ T5107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.169629][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: syz.3.436 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 66.169661][ T5107] Tainted: [W]=WARN [ 66.169667][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.169714][ T5107] Call Trace: [ 66.169721][ T5107] [ 66.169730][ T5107] __dump_stack+0x1d/0x30 [ 66.169751][ T5107] dump_stack_lvl+0x95/0xd0 [ 66.169768][ T5107] dump_stack+0x15/0x1b [ 66.169785][ T5107] should_fail_ex+0x25e/0x270 [ 66.169883][ T5107] should_fail+0xb/0x20 [ 66.169985][ T5107] should_fail_usercopy+0x1a/0x20 [ 66.170014][ T5107] _copy_from_user+0x1c/0xb0 [ 66.170033][ T5107] do_fcntl+0x662/0xf80 [ 66.170086][ T5107] __se_sys_fcntl+0xb1/0x120 [ 66.170110][ T5107] __x64_sys_fcntl+0x43/0x50 [ 66.170135][ T5107] x64_sys_call+0x2844/0x3020 [ 66.170214][ T5107] do_syscall_64+0x136/0x3c0 [ 66.170239][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.170322][ T5107] RIP: 0033:0x7f0ceb5ee019 [ 66.170336][ T5107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.170350][ T5107] RSP: 002b:00007f0cea047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 66.170377][ T5107] RAX: ffffffffffffffda RBX: 00007f0ceb875fa0 RCX: 00007f0ceb5ee019 [ 66.170392][ T5107] RDX: 0000200000000500 RSI: 0000000000000025 RDI: 0000000000000004 [ 66.170405][ T5107] RBP: 00007f0cea047090 R08: 0000000000000000 R09: 0000000000000000 [ 66.170419][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.170430][ T5107] R13: 00007f0ceb876038 R14: 00007f0ceb875fa0 R15: 00007fffc80c8888 [ 66.170445][ T5107] [ 66.381939][ T5114] netlink: 'syz.4.439': attribute type 6 has an invalid length. [ 66.389756][ T28] kauditd_printk_skb: 441 callbacks suppressed [ 66.389771][ T28] audit: type=1400 audit(1785922306.945:1856): avc: denied { cpu } for pid=5113 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.544702][ T5124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.601918][ T5124] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.442: Unimplemented hash flags: 0x0001 [ 66.614650][ T5118] EXT4-fs: Ignoring removed orlov option [ 66.634311][ T5118] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 66.650653][ T5124] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.442: Corrupt directory, running e2fsck is recommended [ 66.678541][ T5118] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 66.697667][ T28] audit: type=1400 audit(1785922307.265:1857): avc: denied { remount } for pid=5122 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.705246][ T5118] EXT4-fs (loop6): group descriptors corrupted! [ 66.735172][ T5133] SELinux: policydb string length 1952804399 does not match expected length 8 [ 66.744435][ T5133] SELinux: failed to load policy [ 66.773246][ T5132] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 66.805530][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.911956][ T5143] set_capacity_and_notify: 10 callbacks suppressed [ 66.912043][ T5143] loop6: detected capacity change from 0 to 4096 [ 66.960144][ T5143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.032288][ T28] audit: type=1400 audit(1785922307.605:1858): avc: denied { write } for pid=5142 comm="syz.6.450" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.067870][ T5159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 67.160218][ T5161] loop5: detected capacity change from 0 to 512 [ 67.161430][ T5167] tipc: Enabled bearer , priority 0 [ 67.182252][ T5161] EXT4-fs: Ignoring removed orlov option [ 67.189982][ T5161] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 67.203241][ T5161] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 67.208745][ T5168] syzkaller0: entered promiscuous mode [ 67.222535][ T5161] EXT4-fs (loop5): group descriptors corrupted! [ 67.222845][ T5168] syzkaller0: entered allmulticast mode [ 67.236298][ T28] audit: type=1400 audit(1785922307.795:1859): avc: denied { create } for pid=5173 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.276979][ T28] audit: type=1400 audit(1785922307.815:1860): avc: denied { read } for pid=5173 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.332168][ T5168] tipc: Resetting bearer [ 67.345030][ T5168] tipc: Disabling bearer [ 67.370823][ T5181] SELinux: policydb string length 1952804399 does not match expected length 8 [ 67.380596][ T5181] SELinux: failed to load policy [ 67.391781][ T5183] loop5: detected capacity change from 0 to 512 [ 67.438676][ T5183] EXT4-fs (loop5): 1 orphan inode deleted [ 67.452771][ T310] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.455049][ T5183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.470279][ T310] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 67.484771][ T5183] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.532304][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.605309][ T28] audit: type=1400 audit(1785922308.175:1861): avc: denied { mount } for pid=5201 comm="syz.5.471" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.656705][ T5209] netlink: 'syz.5.474': attribute type 1 has an invalid length. [ 67.682503][ T5212] loop3: detected capacity change from 0 to 128 [ 67.696174][ T28] audit: type=1326 audit(1785922308.265:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc3e019 code=0x7ffc0000 [ 67.737702][ T5212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.752512][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.782377][ T5212] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.795457][ T28] audit: type=1326 audit(1785922308.275:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc3e019 code=0x7ffc0000 [ 67.834534][ T28] audit: type=1326 audit(1785922308.275:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc3e019 code=0x7ffc0000 [ 67.867281][ T5222] loop6: detected capacity change from 0 to 2048 [ 67.878725][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.910252][ T5222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.915553][ T5226] SELinux: policydb string length 1952804399 does not match expected length 8 [ 67.932736][ T5222] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.960741][ T5226] SELinux: failed to load policy [ 68.050650][ T5239] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 68.076788][ T5240] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 68.371451][ T2627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 68.387493][ T2627] EXT4-fs (loop6): Remounting filesystem read-only [ 68.395883][ T1909] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 68.503474][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.554382][ T5266] loop3: detected capacity change from 0 to 1024 [ 68.566481][ T5266] EXT4-fs: dax option not supported [ 68.697015][ T5282] loop1: detected capacity change from 0 to 128 [ 68.757612][ T5282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.799996][ T5280] loop6: detected capacity change from 0 to 512 [ 68.834261][ T5280] ext4: Unknown parameter 'mask' [ 68.851959][ T5282] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.923855][ T5280] __nla_validate_parse: 6 callbacks suppressed [ 68.923889][ T5280] netlink: 200 bytes leftover after parsing attributes in process `syz.6.495'. [ 68.960119][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.050692][ T5288] loop1: detected capacity change from 0 to 4096 [ 69.088283][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.155625][ T5294] syzkaller0: entered promiscuous mode [ 69.161715][ T5294] syzkaller0: entered allmulticast mode [ 69.215761][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.360628][ T5296] SELinux: policydb string length 1952804399 does not match expected length 8 [ 69.370421][ T5296] SELinux: failed to load policy [ 71.489652][ T28] kauditd_printk_skb: 388 callbacks suppressed [ 71.489687][ T28] audit: type=1400 audit(1785922311.895:2253): avc: denied { read write } for pid=5306 comm="syz.3.504" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.671363][ T28] audit: type=1400 audit(1785922311.895:2254): avc: denied { open } for pid=5306 comm="syz.3.504" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.801890][ T5321] SELinux: policydb string length 1952804399 does not match expected length 8 [ 71.819401][ T5321] SELinux: failed to load policy [ 72.012934][ T5330] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 72.032381][ T5330] bond1: left promiscuous mode [ 72.210931][ T5332] loop3: detected capacity change from 0 to 512 [ 72.246212][ T5325] loop6: detected capacity change from 0 to 512 [ 72.284317][ T5332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.314275][ T5332] EXT4-fs (loop3): 1 truncate cleaned up [ 72.335408][ T5337] loop1: detected capacity change from 0 to 128 [ 72.344099][ T5325] EXT4-fs: test_dummy_encryption option not supported [ 72.353002][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.392766][ T5325] loop6: detected capacity change from 0 to 512 [ 72.399092][ T28] audit: type=1400 audit(1785922312.965:2255): avc: denied { write } for pid=5331 comm="syz.3.512" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.399930][ T5337] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.437646][ T5337] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.515954][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.530097][ T28] audit: type=1400 audit(1785922312.965:2256): avc: denied { append } for pid=5331 comm="syz.3.512" path="/124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.576306][ T28] audit: type=1400 audit(1785922312.965:2257): avc: denied { ioctl } for pid=5331 comm="syz.3.512" path="/124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.622917][ T28] audit: type=1400 audit(1785922313.025:2258): avc: denied { create } for pid=5338 comm="syz.5.511" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.649801][ T28] audit: type=1400 audit(1785922313.215:2259): avc: denied { unlink } for pid=3654 comm="syz-executor" name="file5" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.662738][ T5325] EXT4-fs (loop6): 1 orphan inode deleted [ 72.684547][ T1909] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.697479][ T1909] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 72.741440][ T1909] loop6: lost filesystem error report for type 5 error -117 [ 72.746563][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.753948][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 72.753963][ C0] EXT4-fs (loop6): initial error at time 1785922313: ext4_release_dquot:7077 [ 72.753981][ C0] EXT4-fs (loop6): last error at time 1785922313: ext4_release_dquot:7077 [ 72.788940][ T5325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.802899][ T5325] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.851575][ T28] audit: type=1326 audit(1785922313.415:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.5.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc3e019 code=0x7ffc0000 [ 72.894638][ T28] audit: type=1326 audit(1785922313.415:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.5.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc3e019 code=0x7ffc0000 [ 73.010755][ T5368] loop1: detected capacity change from 0 to 512 [ 73.073884][ T5368] EXT4-fs (loop1): 1 orphan inode deleted [ 73.091443][ T2627] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 73.103506][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.113323][ T2627] loop1: lost filesystem error report for type 5 error -117 [ 73.146414][ T5368] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.328899][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.479455][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.675101][ T5379] loop5: detected capacity change from 0 to 512 [ 73.761508][ T5379] EXT4-fs: inline encryption not supported [ 73.847324][ T5379] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.914100][ T5379] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.927782][ T5379] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.527: inode #15: comm syz.5.527: iget: illegal inode # [ 73.942060][ T5388] loop3: detected capacity change from 0 to 128 [ 73.964238][ T5388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.977408][ T5379] loop5: lost filesystem error report for type 5 error -117 [ 73.978815][ T5379] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.527: couldn't read orphan inode 15 (err -117) [ 73.986654][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 73.986702][ C0] EXT4-fs (loop5): initial error at time 1785922314: ext4_orphan_get:1399 [ 73.986782][ C0] EXT4-fs (loop5): last error at time 1785922314: ext4_orphan_get:1399 [ 74.024785][ T5388] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.049790][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.061794][ T5379] loop5: lost filesystem error report for type 5 error -117 [ 74.066544][ T3358] ================================================================== [ 74.081896][ T3358] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 74.090062][ T3358] [ 74.092381][ T3358] read-write to 0xffff888100489d78 of 8 bytes by task 3799 on cpu 0: [ 74.100467][ T3358] __filemap_remove_folio+0x218/0x2e0 [ 74.105840][ T3358] __remove_mapping+0x396/0x4c0 [ 74.110679][ T3358] remove_mapping+0x22/0x90 [ 74.115165][ T3358] mapping_try_invalidate+0x293/0x430 [ 74.120521][ T3358] invalidate_mapping_pages+0x27/0x40 [ 74.125880][ T3358] invalidate_bdev+0x58/0x70 [ 74.130456][ T3358] ext4_put_super+0x614/0x7c0 [ 74.135150][ T3358] generic_shutdown_super+0xee/0x220 [ 74.140425][ T3358] kill_block_super+0x2a/0x70 [ 74.145083][ T3358] ext4_kill_sb+0x42/0x80 [ 74.149402][ T3358] deactivate_locked_super+0x75/0x1c0 [ 74.154761][ T3358] deactivate_super+0x97/0xa0 [ 74.159612][ T3358] cleanup_mnt+0x2c3/0x340 [ 74.164018][ T3358] __cleanup_mnt+0x19/0x20 [ 74.168423][ T3358] task_work_run+0x130/0x1a0 [ 74.172996][ T3358] exit_to_user_mode_loop+0x1e4/0x8c0 [ 74.178357][ T3358] do_syscall_64+0x23c/0x3c0 [ 74.182946][ T3358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.188823][ T3358] [ 74.191138][ T3358] read to 0xffff888100489d78 of 8 bytes by task 3358 on cpu 1: [ 74.198682][ T3358] nr_blockdev_pages+0x7e/0xd0 [ 74.203436][ T3358] si_meminfo+0x87/0xd0 [ 74.207574][ T3358] update_defense_level+0x44/0x5c0 [ 74.212672][ T3358] defense_work_handler+0x1f/0x80 [ 74.217680][ T3358] process_scheduled_works+0x4d4/0x9a0 [ 74.223129][ T3358] worker_thread+0x569/0x750 [ 74.227717][ T3358] kthread+0x221/0x270 [ 74.231770][ T3358] ret_from_fork+0x146/0x330 [ 74.236348][ T3358] ret_from_fork_asm+0x1a/0x30 [ 74.241099][ T3358] [ 74.243413][ T3358] value changed: 0x000000000000000f -> 0x000000000000000a [ 74.250498][ T3358] [ 74.252806][ T3358] Reported by Kernel Concurrency Sanitizer on: [ 74.258937][ T3358] CPU: 1 UID: 0 PID: 3358 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 74.269862][ T3358] Tainted: [W]=WARN [ 74.273648][ T3358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.283686][ T3358] Workqueue: events_long defense_work_handler [ 74.289747][ T3358] ================================================================== [ 74.372440][ T5392] loop1: detected capacity change from 0 to 4096 [ 74.403599][ T5396] loop6: detected capacity change from 0 to 128 [ 74.417521][ T5379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.474225][ T5396] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.519193][ T5392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.535889][ T5396] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.548974][ T5399] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 74.564177][ T5399] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 74.591118][ T3799] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.603387][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.665584][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.