last executing test programs: 17.711002667s ago: executing program 4 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r2, 0x25, 0x4, @void}, 0xf1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r1, 0x4, r1}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x78, 0x0, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000890}, 0x80) openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 17.622310829s ago: executing program 4 (id=770): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) 16.473920537s ago: executing program 4 (id=782): sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 16.188223415s ago: executing program 4 (id=787): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40a7013, r0, 0x92a4a000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7fffffffe, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, r1, 0x0, r2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xff, 0x576, &(0x7f0000001140)="$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") r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000240)) pwritev2(r3, 0x0, 0x0, 0x2af, 0x0, 0x16) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$usbmon(r5, &(0x7f00000000c0)=""/61, 0x3d) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 15.832928957s ago: executing program 4 (id=788): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') lseek(r0, 0x339, 0x0) (async) lseek(r0, 0x339, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9ec4, 0x0, 0x1, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000380)={&(0x7f0000000280)=""/237, 0xed, 0x6, 0x9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 14.241322157s ago: executing program 4 (id=796): ustat(0x801, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x94) 14.197934209s ago: executing program 32 (id=796): ustat(0x801, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x94) 3.420580981s ago: executing program 5 (id=874): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000001a80)=ANY=[], 0x56) 3.336904664s ago: executing program 5 (id=876): syz_emit_ethernet(0x6e, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01072abd7000fcdbdf2534000000080003000300fa"], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0x40, 0x3, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a00000014000780080011400000000005001500e9ffffff0500010006000000050005000a00000005000400010000000900020073797a32000000001000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000002c0)={{0x8001000000000000, 0x5}, {0x0, 0xae7}, 0xfffffe29, 0x6}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x10000}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x2b, "5cfe83de7e621f966fffba87cf969b3f189a330fba6c17fd340feec91cfa365f2b52dd267cdc7ca888b0d5"}, &(0x7f0000000340)=0x33) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x3}, 0x8) 3.189598038s ago: executing program 5 (id=880): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 2.19952385s ago: executing program 5 (id=898): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10021, 0x0, 0x100, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x8, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x11, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e604000000e97d"}, 0xd8) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@errors_remount}]}, 0x2, 0x557, &(0x7f0000000500)="$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") lchown(0x0, 0xee00, 0x0) socket$kcm(0x29, 0x2, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0xfe39) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) 2.067116754s ago: executing program 0 (id=901): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.972086427s ago: executing program 0 (id=904): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20008040) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.909088279s ago: executing program 0 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[], &(0x7f0000000f40)=""/4089, 0x7e, 0xff9, 0x8}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x9, [@struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x0, 0x4, 0x6907}, {0x7, 0x2}, {0x0, 0x0, 0x2}, {0x5, 0x5, 0x5}]}, @struct={0xd, 0x2, 0x0, 0x4, 0x1, 0x101, [{0x1, 0x4, 0x4}, {0x7, 0x4, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x10000}}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f00000013c0)=""/195, 0xb1, 0xc3, 0x0, 0x3d, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe188, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@generic={&(0x7f00000016c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x77}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @generic={0x5, 0x8, 0x9, 0x8c53, 0x7fff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40e00, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001500)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000017c0)=[r2, r3, r4, r5, r6, 0xffffffffffffffff], &(0x7f0000001800)=[{0x4, 0x1, 0x6}, {0x1, 0x1, 0x1, 0x1}, {0x3, 0x5, 0x3, 0x8}], 0x10, 0xfffffffa}, 0x94) r7 = syz_clone(0x22040000, &(0x7f0000000000)="32cd6c28aaad50bca22d38b60d966cebfba55c49f431a5defbbe0487ce", 0x1d, &(0x7f0000000040), 0x0, &(0x7f00000000c0)="3b6cb3ce117a37b4a7e146afdafc30e6098cd21abc482cf1ef2b44") process_vm_readv(r7, &(0x7f0000000100)=[{&(0x7f0000001300)=""/191, 0xbf}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000200)=0xa) ioctl$SG_EMULATED_HOST(r8, 0x2203, &(0x7f0000000000)) 1.56107542s ago: executing program 0 (id=907): setuid(0xee00) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x84, 0x8}, 0x0, 0x0, 0x5689, 0xfffffffffffffff8, 0x0, 0x9, 0x1, 0xaf, 0xfffc, 0x40, 0xffffffffffffffff, r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x102, 0x100) dup3(0xffffffffffffffff, r2, 0x80000) sendfile(r2, r2, 0x0, 0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x4000000) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x6, 0x100, @void}}}}}}}, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 1.448975523s ago: executing program 2 (id=909): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 1.123215234s ago: executing program 5 (id=912): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x26, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfb, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xffffffffffffffff}, 0x200, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) fcntl$setstatus(r3, 0x4, 0x2400) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffff44, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x17, 0x299, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x5c5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2(0x0, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000840)={r1, 0xd, 0x101, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) sync() r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f00000002c0)=0x401) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x420d, 0x0, 0x11000, 0x4, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x8001, @private2, 0x9}]}, &(0x7f0000000180)=0x10) 911.291171ms ago: executing program 3 (id=913): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="386558006d0001000000000000000000023c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 769.205085ms ago: executing program 3 (id=914): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0xae, 0xfffffffd, 0x2, 0x5, 0xfff}}, {0x4}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x6c}}, 0x0) unshare(0x28000600) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x8, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) tee(r2, r5, 0xe6, 0x2) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x566, &(0x7f00000015c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8ffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00090000000600110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x15) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100) pwrite64(r8, &(0x7f00000001c0)='2', 0x1, 0xe7c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r9, 0x20, 0x4000, 0x4000) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r11 = socket$unix(0x1, 0x1, 0x0) close(r11) socket$tipc(0x1e, 0x5, 0x0) 693.603637ms ago: executing program 3 (id=915): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 663.585468ms ago: executing program 1 (id=916): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) prlimit64(0x0, 0x5, &(0x7f00000001c0)={0x1a, 0x5}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) listen(r4, 0xfffefffa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) (rerun: 64) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x960715, &(0x7f0000000040)={[{@nobarrier}, {@sysvgroups}, {@noquota}, {@noinit_itable}]}, 0xff, 0x485, &(0x7f0000001040)="$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") (rerun: 64) 565.200262ms ago: executing program 0 (id=917): syz_emit_ethernet(0x6e, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01072abd7000fcdbdf2534000000080003000300fa"], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0x40, 0x3, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a00000014000780080011400000000005001500e9ffffff0500010006000000050005000a00000005000400010000000900020073797a32000000001000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000002c0)={{0x8001000000000000, 0x5}, {0x0, 0xae7}, 0xfffffe29, 0x6}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x10000}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x2b, "5cfe83de7e621f966fffba87cf969b3f189a330fba6c17fd340feec91cfa365f2b52dd267cdc7ca888b0d5"}, &(0x7f0000000340)=0x33) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x3}, 0x8) 564.791252ms ago: executing program 1 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r2, 0x25, 0x4, @void}, 0xf1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 538.598153ms ago: executing program 3 (id=919): socket$inet_tcp(0x2, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3c}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 465.899435ms ago: executing program 1 (id=920): syz_emit_ethernet(0x6e, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01072abd7000fcdbdf2534000000080003000300fa"], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x2b, "5cfe83de7e621f966fffba87cf969b3f189a330fba6c17fd340feec91cfa365f2b52dd267cdc7ca888b0d5"}, &(0x7f0000000340)=0x33) 445.554496ms ago: executing program 2 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='sysfs\x00', 0x10, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) 426.455386ms ago: executing program 0 (id=922): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10021, 0x0, 0x100, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x8, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x11, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e604000000e97d"}, 0xd8) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@errors_remount}]}, 0x2, 0x557, &(0x7f0000000500)="$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") lchown(0x0, 0xee00, 0x0) socket$kcm(0x29, 0x2, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0xfe39) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) 391.261827ms ago: executing program 3 (id=923): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r1, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004080) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="b2", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000200), 0x2f) close(r2) bind$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000002440)=""/128) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000005c0)) 381.635448ms ago: executing program 1 (id=924): socket$inet_tcp(0x2, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3c}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 311.37095ms ago: executing program 2 (id=925): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 232.187632ms ago: executing program 2 (id=926): syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [], "caa7c1b7f4c336af"}}}}}}}, 0x0) 231.754072ms ago: executing program 2 (id=927): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='\xb0^}&\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x3]}, {0x4, 0x3, 0x5, 0x80000000}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) write$tun(r1, &(0x7f00000001c0)={@void, @val={0x2, 0x4, 0xa, 0x380, 0x1, 0x2}, @ipv4=@igmp={{0x35, 0x4, 0x1, 0x2, 0x1a2, 0x64, 0x0, 0x1, 0x2, 0x0, @multicast1, @loopback, {[@rr={0x7, 0x7, 0x99, [@dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x8, [{@multicast2, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x2c, 0xb1, 0x3, 0x8, [{@multicast2, 0x9}, {@broadcast}, {@multicast2, 0x2}, {@private=0xa010102, 0x4}, {@multicast1, 0x603}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xa0, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010100, 0xfffffffb}, {@multicast1, 0x6}, {@empty, 0x10001}, {@multicast2, 0xae}, {@empty, 0x5}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x8, 0x1, 0xc, [{@multicast1, 0x2}, {@multicast2, 0x6}, {@broadcast, 0x8}, {@loopback, 0x9}]}, @noop, @lsrr={0x83, 0x13, 0x5d, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}]}}, {0x14, 0x3, 0x0, @private=0xa010102, "9961dabca8bb44e2331e5ac564ea68e3e58d7e015264514288b2bb19fe9df07b0bd885ca35f4d29ff9e21c819eca9da99bc069622e980fd70c68a0565c909a60a638a79a32b606fb10f4a4fd414cb2257f07993cb85cc7e635f9487bb0fa2bbf426472045d4e17c179fb8c07b14d7c78fc0bacb3be2dc8fad24bee291a27a3d936550a7eb4010a14cb4b518eddc4786b575252b2472d07cd9e62190b39839014b170f19eed2efeb583c8c9734371c43a9c831c4f706997a1d7354d62e51c7f9711266480ceb9"}}}, 0x1ac) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c, 0x2}, 0x3c) 215.165053ms ago: executing program 1 (id=928): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb88a810008100000086dd6300000000083aff000089000000000000000000000000000000aa8000907803ff0007000000000000000000000000005e0c6c34eed9bcb42fe1b489d6e167a0c9d4a9a88cf3813dd62617726b23aeeeb531b52d03545b77e82610909eb3de946975a677d84e7212f125e50a49788e1754f6242d0ecc11e7519c0b8b7c226ec6ced2ce08a35d7cbfb5f22c736f9345d0f1"], 0x0) 214.696323ms ago: executing program 5 (id=929): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0xff}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0x2679, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) 132.975076ms ago: executing program 1 (id=930): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x2, 0x5, 0x3, 0x2}, 0x5, 0x8000, 'id1\x00', 'timer0\x00', 0x0, 0x1, 0x141, 0x5, 0x900000}) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xfffffffffffffc04, 0x1}, 0x8201, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[], 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x4c47, 0x8605, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x2980, 0x2, 0x0, 0x0, 0x100007130, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffd, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000032c0)={0x0, 0x0}, &(0x7f0000003300)=0xc) setreuid(0x0, r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 60.035838ms ago: executing program 3 (id=931): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x40000, 0x14}, 0x18) mknodat(r2, &(0x7f0000000680)='./file0\x00', 0x40, 0xb52) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r5, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x13d00, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020004003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) 0s ago: executing program 2 (id=932): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.483880][ T5607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.553783][ T5609] FAULT_INJECTION: forcing a failure. [ 126.553783][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.553837][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.553869][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.553886][ T5609] Call Trace: [ 126.553910][ T5609] [ 126.553920][ T5609] __dump_stack+0x1d/0x30 [ 126.553949][ T5609] dump_stack_lvl+0x95/0xd0 [ 126.553975][ T5609] dump_stack+0x15/0x1b [ 126.554046][ T5609] should_fail_ex+0x263/0x280 [ 126.554072][ T5609] should_fail+0xb/0x20 [ 126.554122][ T5609] should_fail_usercopy+0x1a/0x20 [ 126.554150][ T5609] _copy_from_user+0x1c/0xb0 [ 126.554197][ T5609] kstrtouint_from_user+0x69/0xf0 [ 126.554312][ T5609] ? 0xffffffff81000000 [ 126.554330][ T5609] ? selinux_file_permission+0x1e1/0x320 [ 126.554365][ T5609] proc_fail_nth_write+0x50/0x160 [ 126.554403][ T5609] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.554495][ T5609] vfs_write+0x269/0x9f0 [ 126.554530][ T5609] ? __rcu_read_unlock+0x4e/0x70 [ 126.554556][ T5609] ? __fget_files+0x184/0x1c0 [ 126.554653][ T5609] ? mutex_lock+0x57/0x90 [ 126.554684][ T5609] ksys_write+0xdc/0x1a0 [ 126.554722][ T5609] __x64_sys_write+0x40/0x50 [ 126.554825][ T5609] x64_sys_call+0x27e1/0x3020 [ 126.554856][ T5609] do_syscall_64+0x12c/0x3b0 [ 126.554896][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.554924][ T5609] RIP: 0033:0x7ff6a034d68e [ 126.555054][ T5609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.555079][ T5609] RSP: 002b:00007ff69ede6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.555104][ T5609] RAX: ffffffffffffffda RBX: 00007ff69ede76c0 RCX: 00007ff6a034d68e [ 126.555122][ T5609] RDX: 0000000000000001 RSI: 00007ff69ede70a0 RDI: 0000000000000004 [ 126.555138][ T5609] RBP: 00007ff69ede7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.555155][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.555247][ T5609] R13: 00007ff6a0606038 R14: 00007ff6a0605fa0 R15: 00007ffe2bc31538 [ 126.555272][ T5609] [ 126.630384][ T5611] loop2: detected capacity change from 0 to 128 [ 126.671294][ T5606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5606 comm=syz.1.445 [ 126.915069][ T5611] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 126.932847][ T5611] FAT-fs (loop2): Filesystem has been set read-only [ 127.045019][ T5623] netlink: 'syz.0.452': attribute type 39 has an invalid length. [ 127.168320][ T5614] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 127.220382][ T5630] loop4: detected capacity change from 0 to 128 [ 127.250630][ T5630] loop4: detected capacity change from 0 to 128 [ 127.312151][ T28] audit: type=1400 audit(1780394943.579:551): avc: denied { write } for pid=5615 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 127.455063][ T5630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.490439][ T5630] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.584407][ T28] audit: type=1400 audit(1780394943.849:552): avc: denied { execute } for pid=5639 comm="syz.0.456" path="/100/memory.events" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.659763][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.808117][ T28] audit: type=1400 audit(1780394944.079:553): avc: denied { ioctl } for pid=5654 comm="syz.1.459" path="socket:[10859]" dev="sockfs" ino=10859 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.854106][ T5655] Cannot find set identified by id 4 to match [ 127.978499][ T3379] IPVS: starting estimator thread 0... [ 128.066385][ T5663] IPVS: using max 2256 ests per chain, 112800 per kthread [ 128.072027][ T5659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5659 comm=syz.4.461 [ 128.113996][ T5670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.144664][ T5667] loop3: detected capacity change from 0 to 128 [ 128.187735][ T5667] ext4: Unknown parameter 'subj_user' [ 128.488611][ T5672] lo speed is unknown, defaulting to 1000 [ 128.744208][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 128.765345][ T5683] loop0: detected capacity change from 0 to 512 [ 128.841863][ T5683] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.855532][ T5683] ------------[ cut here ]------------ [ 128.861045][ T5683] EA inode 11 i_nlink=2 [ 128.861069][ T5683] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.468/5683 [ 128.875969][ T5683] Modules linked in: [ 128.879936][ T5683] CPU: 1 UID: 0 PID: 5683 Comm: syz.0.468 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.889277][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.899409][ T5683] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 128.906056][ T5683] Code: f4 52 98 ff 4c 8d 2d 0d 5d 5c 05 49 8d 7e 40 e8 d4 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 11 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 86 d8 03 66 66 66 66 66 66 2e [ 128.925806][ T5683] RSP: 0018:ffffc9000214b778 EFLAGS: 00010246 [ 128.931945][ T5683] RAX: ffff888104f12d00 RBX: ffff8881081aeab8 RCX: ffffffff81c0e0f8 [ 128.940008][ T5683] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3df0 [ 128.948038][ T5683] RBP: 000000000000000b R08: 00018881081aea6b R09: 0000000000000000 [ 128.956049][ T5683] R10: ffffc9000214b6a8 R11: 0001c9000214b6a8 R12: ffff8881081aea68 [ 128.964108][ T5683] R13: ffffffff871d3df0 R14: ffff8881081aea20 R15: 0000000000000001 [ 128.972134][ T5683] FS: 00007f3a6bb956c0(0000) GS:ffff8882ae9f4000(0000) knlGS:0000000000000000 [ 128.981266][ T5683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.988030][ T5683] CR2: 0000001b331f8ff8 CR3: 00000001348e2000 CR4: 00000000003506f0 [ 128.996064][ T5683] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.004102][ T5683] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 129.012117][ T5683] Call Trace: [ 129.015433][ T5683] [ 129.018420][ T5683] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 129.024408][ T5683] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 129.029947][ T5683] ? ext4_truncate+0x89f/0xa10 [ 129.034756][ T5683] ext4_evict_inode+0xb16/0xe30 [ 129.039754][ T5683] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.045223][ T5683] evict+0x2af/0x510 [ 129.049194][ T5683] ? __dquot_initialize+0x146/0x7c0 [ 129.054440][ T5683] iput+0x41a/0x580 [ 129.058321][ T5683] ext4_process_orphan+0x1a9/0x1c0 [ 129.063620][ T5683] ext4_orphan_cleanup+0x69c/0x9f0 [ 129.068919][ T5683] ext4_fill_super+0x3408/0x37c0 [ 129.073906][ T5683] ? set_blocksize+0x14c/0x270 [ 129.078742][ T5683] ? setup_bdev_super+0x30e/0x370 [ 129.083814][ T5683] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.089162][ T5683] get_tree_bdev_flags+0x291/0x300 [ 129.094325][ T5683] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.099728][ T5683] get_tree_bdev+0x1f/0x30 [ 129.104203][ T5683] ext4_get_tree+0x1c/0x30 [ 129.108685][ T5683] vfs_get_tree+0x57/0x1d0 [ 129.113238][ T5683] do_new_mount+0x288/0x8d0 [ 129.117829][ T5683] path_mount+0x4d0/0xbc0 [ 129.122283][ T5683] __se_sys_mount+0x28c/0x2e0 [ 129.127038][ T5683] ? __se_sys_mkdirat+0xa2/0xf0 [ 129.131956][ T5683] ? kmem_cache_free+0xca/0x380 [ 129.136866][ T5683] __x64_sys_mount+0x67/0x80 [ 129.141579][ T5683] x64_sys_call+0x2d61/0x3020 [ 129.146324][ T5683] do_syscall_64+0x12c/0x3b0 [ 129.150962][ T5683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.157027][ T5683] RIP: 0033:0x7f3a6d17e0ca [ 129.161485][ T5683] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.181195][ T5683] RSP: 002b:00007f3a6bb94e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.189761][ T5683] RAX: ffffffffffffffda RBX: 00007f3a6bb94ee0 RCX: 00007f3a6d17e0ca [ 129.197942][ T5683] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f3a6bb94ea0 [ 129.205980][ T5683] RBP: 00002000000009c0 R08: 00007f3a6bb94ee0 R09: 0000000000800718 [ 129.214021][ T5683] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 129.222127][ T5683] R13: 00007f3a6bb94ea0 R14: 000000000000048d R15: 0000200000000200 [ 129.230151][ T5683] [ 129.233228][ T5683] ---[ end trace 0000000000000000 ]--- [ 129.239700][ T5683] EXT4-fs (loop0): 1 orphan inode deleted [ 129.246346][ T5683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.318502][ T5683] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 129.329193][ T5683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.621709][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.063430][ T28] audit: type=1400 audit(1780394946.329:554): avc: denied { ioctl } for pid=5713 comm="syz.2.479" path="socket:[10077]" dev="sockfs" ino=10077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.150604][ T5716] loop2: detected capacity change from 0 to 512 [ 130.158344][ T5716] EXT4-fs: Mount option(s) incompatible with ext2 [ 130.160446][ T5709] loop0: detected capacity change from 0 to 128 [ 130.252349][ T5709] ext4: Unknown parameter 'subj_user' [ 130.329976][ T5716] loop2: detected capacity change from 0 to 256 [ 130.488240][ T5720] loop2: detected capacity change from 0 to 128 [ 130.519056][ T5720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.545387][ T5720] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.610008][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.680393][ T5711] loop1: detected capacity change from 0 to 4096 [ 130.717587][ T5728] loop2: detected capacity change from 0 to 512 [ 130.733769][ T5728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.753391][ T28] audit: type=1400 audit(1780394947.019:555): avc: denied { write } for pid=5727 comm="syz.2.484" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.768004][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.775125][ T28] audit: type=1400 audit(1780394947.019:556): avc: denied { ioctl } for pid=5727 comm="syz.2.484" path="/74/file0/file1" dev="loop2" ino=15 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.830541][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.020012][ T5737] loop1: detected capacity change from 0 to 512 [ 131.028823][ T5737] EXT4-fs: Ignoring removed bh option [ 131.041825][ T5737] EXT4-fs: inline encryption not supported [ 131.051983][ T5737] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.133265][ T5737] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 131.168147][ T5737] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.486: bg 0: block 248: padding at end of block bitmap is not set [ 131.232917][ T5737] loop1: lost filesystem error report for type 5 error -117 [ 131.233288][ T5737] Quota error (device loop1): write_blk: dquota write failed [ 131.240738][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 131.240761][ C0] EXT4-fs (loop1): last error at time 1780394947: ext4_validate_block_bitmap:441 [ 131.358966][ T5737] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 131.384691][ T5737] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.486: Failed to acquire dquot type 1 [ 131.439428][ T5737] loop1: lost filesystem error report for type 5 error -28 [ 131.441557][ T5737] EXT4-fs (loop1): 1 truncate cleaned up [ 131.458327][ T5750] loop3: detected capacity change from 0 to 512 [ 131.490999][ T5750] EXT4-fs: Ignoring removed bh option [ 131.519218][ T5750] EXT4-fs: inline encryption not supported [ 131.543195][ T5737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 131.564974][ T5750] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.576611][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.643651][ T5750] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 131.665289][ T5757] EXT4-fs: Mount option(s) incompatible with ext2 [ 131.707213][ T5758] EXT4-fs: Ignoring removed bh option [ 131.757203][ T5758] EXT4-fs: inline encryption not supported [ 131.763173][ T5750] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.488: bg 0: block 248: padding at end of block bitmap is not set [ 131.780595][ T5750] loop3: lost filesystem error report for type 5 error -117 [ 131.782869][ T5750] Quota error (device loop3): write_blk: dquota write failed [ 131.790273][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 131.790296][ C1] EXT4-fs (loop3): last error at time 1780394948: ext4_validate_block_bitmap:441 [ 131.821197][ T5750] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 131.832473][ T5750] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.488: Failed to acquire dquot type 1 [ 131.850258][ T5758] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.856775][ T5750] loop3: lost filesystem error report for type 5 error -28 [ 131.876579][ T5750] EXT4-fs (loop3): 1 truncate cleaned up [ 131.905752][ T5750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 131.930539][ T5758] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 131.989437][ T5761] tap0: tun_chr_ioctl cmd 1074025677 [ 132.016784][ T5761] tap0: linktype set to 780 [ 132.043608][ T5758] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.491: bg 0: block 248: padding at end of block bitmap is not set [ 132.120567][ T5758] loop0: lost filesystem error report for type 5 error -117 [ 132.125168][ T5758] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.491: Failed to acquire dquot type 1 [ 132.132662][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 132.132687][ C1] EXT4-fs (loop0): last error at time 1780394948: ext4_validate_block_bitmap:441 [ 132.159081][ T5763] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 132.197247][ T5763] FAT-fs (loop2): Filesystem has been set read-only [ 132.200608][ T5758] loop0: lost filesystem error report for type 5 error -28 [ 132.303322][ T5758] EXT4-fs (loop0): 1 truncate cleaned up [ 132.335107][ T5758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 132.460005][ T5750] tap0: tun_chr_ioctl cmd 1074025677 [ 132.466394][ T5750] tap0: linktype set to 780 [ 132.476338][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 132.476356][ T28] audit: type=1400 audit(1780394948.739:557): avc: denied { setopt } for pid=5766 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.579541][ T28] audit: type=1400 audit(1780394948.839:558): avc: denied { bind } for pid=5766 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.711242][ T28] audit: type=1400 audit(1780394948.959:559): avc: denied { read write } for pid=5766 comm="syz.2.494" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.781558][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 132.802258][ T28] audit: type=1400 audit(1780394949.009:560): avc: denied { open } for pid=5766 comm="syz.2.494" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.903625][ T5776] tap0: tun_chr_ioctl cmd 1074025677 [ 132.911763][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 132.922096][ T5776] tap0: linktype set to 780 [ 133.018911][ T28] audit: type=1400 audit(1780394949.289:561): avc: denied { create } for pid=5783 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.166375][ T28] audit: type=1400 audit(1780394949.429:562): avc: denied { allowed } for pid=5788 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.198901][ T5790] SET target dimension over the limit! [ 133.207002][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 133.218762][ T5790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'. [ 133.229485][ T5790] netlink: 14 bytes leftover after parsing attributes in process `syz.1.497'. [ 133.289194][ T5790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.340003][ T5790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.372754][ T5790] bond0 (unregistering): Released all slaves [ 133.381970][ T5795] set_capacity_and_notify: 4 callbacks suppressed [ 133.381999][ T5795] loop1: detected capacity change from 0 to 8192 [ 133.502094][ T28] audit: type=1400 audit(1780394949.769:563): avc: denied { write } for pid=5793 comm="syz.0.499" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.802460][ T5815] FAULT_INJECTION: forcing a failure. [ 133.802460][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 133.828056][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.0.503 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 133.828099][ T5815] Tainted: [W]=WARN [ 133.828108][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.828126][ T5815] Call Trace: [ 133.828134][ T5815] [ 133.828153][ T5815] __dump_stack+0x1d/0x30 [ 133.828232][ T5815] dump_stack_lvl+0x95/0xd0 [ 133.828258][ T5815] dump_stack+0x15/0x1b [ 133.828283][ T5815] should_fail_ex+0x263/0x280 [ 133.828308][ T5815] should_failslab+0x8c/0xb0 [ 133.828415][ T5815] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 133.828431][ T28] audit: type=1400 audit(1780394950.099:564): avc: denied { write } for pid=5803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.828460][ T5815] ? __alloc_skb+0x2d6/0x690 [ 133.828485][ T5815] __alloc_skb+0x2d6/0x690 [ 133.828621][ T5815] ? __alloc_skb+0x200/0x690 [ 133.828708][ T5815] netlink_alloc_large_skb+0xbf/0xf0 [ 133.828802][ T5815] netlink_sendmsg+0x40c/0x6f0 [ 133.828908][ T5815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.829074][ T5815] ____sys_sendmsg+0x563/0x5b0 [ 133.829170][ T5815] ___sys_sendmsg+0x195/0x1e0 [ 133.829293][ T5815] __x64_sys_sendmsg+0xd4/0x160 [ 133.829434][ T5815] x64_sys_call+0x194c/0x3020 [ 133.829509][ T5815] do_syscall_64+0x12c/0x3b0 [ 133.829610][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.829737][ T5815] RIP: 0033:0x7f3a6d17ce59 [ 133.829783][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.829844][ T5815] RSP: 002b:00007f3a6bbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.829907][ T5815] RAX: ffffffffffffffda RBX: 00007f3a6d3f5fa0 RCX: 00007f3a6d17ce59 [ 133.829944][ T5815] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 133.829985][ T5815] RBP: 00007f3a6bbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.830058][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.830108][ T5815] R13: 00007f3a6d3f6038 R14: 00007f3a6d3f5fa0 R15: 00007ffdd1cc1028 [ 133.830184][ T5815] [ 134.175184][ T28] audit: type=1400 audit(1780394950.439:565): avc: denied { write } for pid=5827 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.244365][ T28] audit: type=1400 audit(1780394950.449:566): avc: denied { setopt } for pid=5819 comm="syz.0.505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.609959][ T5835] tmpfs: Bad value for 'mpol' [ 136.240801][ T5890] netlink: 'syz.3.525': attribute type 9 has an invalid length. [ 136.374854][ T5902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.465142][ T5899] syzkaller0: entered promiscuous mode [ 136.465172][ T5899] syzkaller0: entered allmulticast mode [ 137.556117][ T5928] syzkaller1: entered promiscuous mode [ 137.563638][ T5928] syzkaller1: entered allmulticast mode [ 137.827594][ T5946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.948226][ T5948] lo speed is unknown, defaulting to 1000 [ 138.394673][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 138.394693][ T28] audit: type=1400 audit(1780394954.659:581): avc: denied { write } for pid=5958 comm="syz.0.547" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.451994][ T28] audit: type=1400 audit(1780394954.659:582): avc: denied { open } for pid=5958 comm="syz.0.547" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.499676][ T5961] loop2: detected capacity change from 0 to 4096 [ 138.509127][ T28] audit: type=1400 audit(1780394954.659:583): avc: denied { ioctl } for pid=5958 comm="syz.0.547" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.566160][ T5961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.585141][ T5967] loop1: detected capacity change from 0 to 512 [ 138.626719][ T5967] EXT4-fs: Ignoring removed i_version option [ 138.633010][ T5967] EXT4-fs: Ignoring removed bh option [ 138.682674][ T5967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.698439][ T5967] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.733990][ T28] audit: type=1400 audit(1780394954.999:584): avc: denied { write } for pid=5965 comm="syz.1.549" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.870022][ T28] audit: type=1400 audit(1780394955.139:585): avc: denied { append } for pid=5965 comm="syz.1.549" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.985578][ T5981] lo speed is unknown, defaulting to 1000 [ 139.004487][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.021075][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.040617][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.236013][ T5981] loop4: detected capacity change from 0 to 512 [ 139.252020][ T5981] ext4: Unknown parameter 'func' [ 139.311669][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.399343][ T5998] loop4: detected capacity change from 0 to 128 [ 139.409686][ T5998] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 139.418549][ T5998] FAT-fs (loop4): Filesystem has been set read-only [ 139.660536][ T28] audit: type=1400 audit(1780394955.929:586): avc: denied { create } for pid=6005 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.715362][ T6004] tipc: Started in network mode [ 139.750533][ T6004] tipc: Node identity 4, cluster identity 4711 [ 139.760643][ T6013] loop4: detected capacity change from 0 to 128 [ 139.762184][ T6013] ext4: Unknown parameter 'subj_user' [ 139.772732][ T6004] tipc: Node number set to 4 [ 139.800631][ T6015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.100779][ T6035] loop4: detected capacity change from 0 to 128 [ 140.179503][ T6035] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.189251][ T6035] FAT-fs (loop4): Filesystem has been set read-only [ 140.257743][ T28] audit: type=1400 audit(1780394956.529:587): avc: denied { read } for pid=6040 comm="syz.0.573" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 140.288936][ T28] audit: type=1400 audit(1780394956.529:588): avc: denied { open } for pid=6040 comm="syz.0.573" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 140.571545][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 140.809440][ T6065] loop1: detected capacity change from 0 to 1024 [ 140.856857][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.891134][ T6065] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.913343][ T6037] loop2: detected capacity change from 0 to 4096 [ 141.006758][ T28] audit: type=1400 audit(1780394957.269:589): avc: denied { mounton } for pid=6055 comm="syz.4.577" path="/130/bus" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.078447][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.312333][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.426561][ T5966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 141.699853][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.905706][ T28] audit: type=1400 audit(1780394958.149:590): avc: denied { bind } for pid=6082 comm="syz.4.586" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.844563][ T6097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.135035][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.168948][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.208913][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.244143][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.287496][ T6153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6153 comm=syz.0.598 [ 143.319658][ T6151] loop3: detected capacity change from 0 to 128 [ 143.350420][ T6151] ext4: Unknown parameter 'subj_user' [ 143.417555][ T6155] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 143.604197][ T6166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.605860][ T6165] xt_l2tp: invalid flags combination: 8 [ 143.650672][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 143.650689][ T28] audit: type=1400 audit(1780394959.889:601): avc: denied { create } for pid=6159 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.908425][ T6187] loop3: detected capacity change from 0 to 512 [ 143.964466][ T6187] EXT4-fs: Ignoring removed bh option [ 143.970334][ T6187] EXT4-fs: inline encryption not supported [ 143.977058][ T6187] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.991112][ T6193] loop4: detected capacity change from 0 to 512 [ 144.027371][ T6187] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.054591][ T6200] capability: warning: `syz.0.612' uses deprecated v2 capabilities in a way that may be insecure [ 144.066174][ T6193] EXT4-fs: Ignoring removed bh option [ 144.081377][ T28] audit: type=1400 audit(1780394960.349:602): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.114472][ T6200] netlink: 830 bytes leftover after parsing attributes in process `syz.0.612'. [ 144.132179][ T6187] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.610: bg 0: block 248: padding at end of block bitmap is not set [ 144.152310][ T6193] EXT4-fs: inline encryption not supported [ 144.161663][ T28] audit: type=1400 audit(1780394960.379:603): avc: denied { write } for pid=6206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.227783][ T6193] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.236695][ T6187] loop3: lost filesystem error report for type 5 error -117 [ 144.238537][ T6187] Quota error (device loop3): write_blk: dquota write failed [ 144.253423][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.253450][ C1] EXT4-fs (loop3): last error at time 1780394960: ext4_validate_block_bitmap:441 [ 144.306932][ T6187] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 144.327627][ T6187] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.610: Failed to acquire dquot type 1 [ 144.328337][ T6193] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.397869][ T6193] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.611: bg 0: block 248: padding at end of block bitmap is not set [ 144.449612][ T28] audit: type=1400 audit(1780394960.719:604): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.488454][ T6187] loop3: lost filesystem error report for type 5 error -28 [ 144.489051][ T6187] EXT4-fs (loop3): 1 truncate cleaned up [ 144.505248][ T6193] loop4: lost filesystem error report for type 5 error -117 [ 144.505673][ T6193] Quota error (device loop4): write_blk: dquota write failed [ 144.513238][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.513258][ C0] EXT4-fs (loop4): last error at time 1780394960: ext4_validate_block_bitmap:441 [ 144.580866][ T28] audit: type=1400 audit(1780394960.839:605): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.603231][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 144.630302][ T6193] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 144.640691][ T6193] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.611: Failed to acquire dquot type 1 [ 144.652101][ T6193] loop4: lost filesystem error report for type 5 error -28 [ 144.674231][ T6193] EXT4-fs (loop4): 1 truncate cleaned up [ 144.715852][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 144.747041][ T28] audit: type=1400 audit(1780394961.019:606): avc: denied { read } for pid=6230 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.887072][ T6236] loop2: detected capacity change from 0 to 512 [ 144.895213][ T6183] tap0: tun_chr_ioctl cmd 1074025677 [ 144.951482][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.997303][ T6183] tap0: linktype set to 780 [ 145.200493][ T6179] syz.3.610 (6179) used greatest stack depth: 8160 bytes left [ 145.304345][ T6222] lo speed is unknown, defaulting to 1000 [ 145.310936][ T6240] tap0: tun_chr_ioctl cmd 1074025677 [ 145.335980][ T6240] tap0: linktype set to 780 [ 145.354152][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 145.416192][ T6246] loop3: detected capacity change from 0 to 512 [ 145.940296][ T6185] syz.4.611 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 146.032360][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.4.611 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 146.032435][ T6185] Tainted: [W]=WARN [ 146.032445][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.032460][ T6185] Call Trace: [ 146.032468][ T6185] [ 146.032478][ T6185] __dump_stack+0x1d/0x30 [ 146.032525][ T6185] dump_stack_lvl+0x95/0xd0 [ 146.032549][ T6185] dump_stack+0x15/0x1b [ 146.032570][ T6185] dump_header+0x80/0x240 [ 146.032639][ T6185] oom_kill_process+0x295/0x350 [ 146.032679][ T6185] out_of_memory+0x97d/0xb80 [ 146.032734][ T6185] try_charge_memcg+0x62f/0xa10 [ 146.032873][ T6185] __obj_cgroup_charge+0x105/0x230 [ 146.032968][ T6185] __memcg_slab_post_alloc_hook+0x4a0/0x7d0 [ 146.033000][ T6185] ? bdev_getblk+0x35a/0x3f0 [ 146.033091][ T6185] kmem_cache_alloc_noprof+0x1e2/0x3f0 [ 146.033122][ T6185] ? alloc_buffer_head+0x35/0x1f0 [ 146.033168][ T6185] alloc_buffer_head+0x35/0x1f0 [ 146.033197][ T6185] folio_alloc_buffers+0x11d/0x3d0 [ 146.033294][ T6185] create_empty_buffers+0x2c/0x200 [ 146.033319][ T6185] __block_write_begin_int+0x1d4/0xf90 [ 146.033350][ T6185] ? __ext4_mark_inode_dirty+0x2fc/0x3d0 [ 146.033416][ T6185] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 146.033453][ T6185] ? __list_add_valid_or_report+0x38/0xe0 [ 146.033527][ T6185] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 146.033555][ T6185] ? __mark_inode_dirty+0x49d/0x710 [ 146.033581][ T6185] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 146.033655][ T6185] block_page_mkwrite+0x183/0x300 [ 146.033760][ T6185] ext4_page_mkwrite+0x835/0xad0 [ 146.033787][ T6185] ? folio_unlock+0xfe/0x150 [ 146.033829][ T6185] handle_mm_fault+0x1bc5/0x2e70 [ 146.033904][ T6185] ? __pfx_filemap_fault+0x10/0x10 [ 146.033955][ T6185] do_user_addr_fault+0x3fd/0x1050 [ 146.033996][ T6185] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 146.034027][ T6185] exc_page_fault+0x62/0xa0 [ 146.034065][ T6185] asm_exc_page_fault+0x26/0x30 [ 146.034139][ T6185] RIP: 0033:0x7f0372281cf2 [ 146.034166][ T6185] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 73 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 146.034189][ T6185] RSP: 002b:00007ffcef85aad0 EFLAGS: 00010202 [ 146.034210][ T6185] RAX: 0000000000023008 RBX: 00007f0373155720 RCX: 0000000000000000 [ 146.034224][ T6185] RDX: 0000001b33201000 RSI: 0000000000000008 RDI: 00007f0373155720 [ 146.034237][ T6185] RBP: 00000000000007f2 R08: 00007f0372610000 R09: 00007f0372626038 [ 146.034295][ T6185] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8595539a [ 146.034325][ T6185] R13: 00007f0372626038 R14: 0000000000000087 R15: fffffffffffdd000 [ 146.034340][ T6185] ? mas_next_slot+0xfa/0x8d0 [ 146.034414][ T6185] [ 146.109137][ T6249] lo speed is unknown, defaulting to 1000 [ 146.123065][ T6185] memory: usage 307200kB, limit 307200kB, failcnt 668 [ 146.378260][ T6185] memory+swap: usage 307688kB, limit 9007199254740988kB, failcnt 0 [ 146.387889][ T6185] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 146.426386][ T6185] Memory cgroup stats for /syz4: [ 146.426725][ T6185] cache 16384 [ 146.435116][ T6185] rss 0 [ 146.443632][ T6185] shmem 0 [ 146.449791][ T6185] mapped_file 0 [ 146.458790][ T6185] dirty 0 [ 146.467812][ T6185] writeback 0 [ 146.471208][ T6185] workingset_refault_anon 250 [ 146.482760][ T6185] workingset_refault_file 2127 [ 146.493063][ T6185] swap 499712 [ 146.504010][ T6185] swapcached 2351104 [ 146.508440][ T6185] pgpgin 84172 [ 146.512307][ T6185] pgpgout 84168 [ 146.517254][ T6185] pgfault 86927 [ 146.520829][ T6185] pgmajfault 195 [ 146.524415][ T6185] inactive_anon 0 [ 146.528350][ T6185] active_anon 0 [ 146.531909][ T6185] inactive_file 0 [ 146.535567][ T6185] active_file 16384 [ 146.539770][ T6185] unevictable 0 [ 146.543573][ T6185] hierarchical_memory_limit 314572800 [ 146.549634][ T6185] hierarchical_memsw_limit 9223372036854771712 [ 146.555915][ T6185] total_cache 16384 [ 146.572498][ T6185] total_rss 0 [ 146.578925][ T6185] total_shmem 0 [ 146.583967][ T6185] total_mapped_file 0 [ 146.588290][ T6268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.605256][ T6185] total_dirty 0 [ 146.613032][ T6185] total_writeback 0 [ 146.636952][ T6185] total_workingset_refault_anon 250 [ 146.653872][ T6185] total_workingset_refault_file 2127 [ 146.686778][ T6185] total_swap 499712 [ 146.695496][ T6185] total_swapcached 2351104 [ 146.704104][ T6185] total_pgpgin 84172 [ 146.708456][ T6185] total_pgpgout 84168 [ 146.712747][ T6185] total_pgfault 86927 [ 146.717400][ T6185] total_pgmajfault 195 [ 146.719539][ T6272] syzkaller0: entered promiscuous mode [ 146.745476][ T6272] syzkaller0: entered allmulticast mode [ 146.780072][ T6185] total_inactive_anon 0 [ 146.825371][ T6185] total_active_anon 0 [ 146.839333][ T6185] total_inactive_file 0 [ 146.854395][ T6185] total_active_file 16384 [ 146.979583][ T6185] total_unevictable 0 [ 147.047698][ T6185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.611,pid=6185,uid=0 [ 147.159910][ T6275] syzkaller0: entered promiscuous mode [ 147.171800][ T6185] Memory cgroup out of memory: Killed process 6185 (syz.4.611) total-vm:104820kB, anon-rss:1236kB, file-rss:30792kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 147.195616][ T6275] syzkaller0: entered allmulticast mode [ 147.531535][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 147.546394][ T6281] loop1: detected capacity change from 0 to 128 [ 147.721936][ T6281] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 147.731791][ T6290] loop4: detected capacity change from 0 to 512 [ 147.746934][ T6281] FAT-fs (loop1): Filesystem has been set read-only [ 147.779560][ T6290] EXT4-fs: Ignoring removed bh option [ 147.796887][ T6290] EXT4-fs: inline encryption not supported [ 147.831918][ T6290] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.926440][ T6290] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.040488][ T6290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.631: bg 0: block 248: padding at end of block bitmap is not set [ 148.077680][ T6290] loop4: lost filesystem error report for type 5 error -117 [ 148.080613][ T6290] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.631: Failed to acquire dquot type 1 [ 148.088097][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 148.088121][ C1] EXT4-fs (loop4): last error at time 1780394964: ext4_validate_block_bitmap:441 [ 148.115366][ T6290] loop4: lost filesystem error report for type 5 error -28 [ 148.120235][ T6290] EXT4-fs (loop4): 1 truncate cleaned up [ 148.145339][ T6290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 148.169132][ T6304] loop1: detected capacity change from 0 to 1024 [ 148.200976][ T6304] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.228015][ T6304] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.635: Invalid block bitmap block 0 in block_group 0 [ 148.241905][ T6304] loop1: lost filesystem error report for type 5 error -117 [ 148.245095][ T6304] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.635: Failed to acquire dquot type 0 [ 148.252665][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 148.252727][ C0] EXT4-fs (loop1): initial error at time 1780394964: ext4_read_block_bitmap_nowait:483 [ 148.252777][ C0] EXT4-fs (loop1): last error at time 1780394964: ext4_read_block_bitmap_nowait:483 [ 148.295646][ T6289] tap0: tun_chr_ioctl cmd 1074025677 [ 148.302328][ T6304] loop1: lost filesystem error report for type 5 error -117 [ 148.308198][ T6304] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.635: Freeing blocks not in datazone - block = 0, count = 4096 [ 148.379203][ T6304] loop1: lost filesystem error report for type 5 error -117 [ 148.381737][ T6304] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.635: Invalid inode bitmap blk 0 in block_group 0 [ 148.402396][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 148.418767][ T6289] tap0: linktype set to 780 [ 148.426653][ T30] loop1: lost filesystem error report for type 5 error -117 [ 148.441354][ T6304] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 148.464344][ T6304] EXT4-fs (loop1): 1 orphan inode deleted [ 148.483430][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.570569][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.605997][ T6311] loop1: detected capacity change from 0 to 128 [ 148.632629][ T6311] bio_check_eod: 2 callbacks suppressed [ 148.632648][ T6311] syz.1.638: attempt to access beyond end of device [ 148.632648][ T6311] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 148.661689][ T6311] syz.1.638: attempt to access beyond end of device [ 148.661689][ T6311] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 148.694458][ T6311] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 148.711305][ T6311] syz.1.638: attempt to access beyond end of device [ 148.711305][ T6311] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 148.744354][ T6311] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 148.764045][ T6311] syz.1.638: attempt to access beyond end of device [ 148.764045][ T6311] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 148.808514][ T6311] syz.1.638: attempt to access beyond end of device [ 148.808514][ T6311] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 148.839215][ T6311] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 148.851409][ T6309] lo speed is unknown, defaulting to 1000 [ 148.860823][ T6311] syz.1.638: attempt to access beyond end of device [ 148.860823][ T6311] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 148.894677][ T6311] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 148.919444][ T6311] syz.1.638: attempt to access beyond end of device [ 148.919444][ T6311] loop1: rw=2049, sector=170, nr_sectors = 80 limit=128 [ 148.951867][ T6311] syz.1.638: attempt to access beyond end of device [ 148.951867][ T6311] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 149.045565][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 149.253875][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.452075][ T6333] loop4: detected capacity change from 0 to 512 [ 149.489229][ T6333] EXT4-fs: Ignoring removed bh option [ 149.525008][ T6333] EXT4-fs: inline encryption not supported [ 149.545818][ T6333] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.593784][ T6333] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.636681][ T6333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.644: bg 0: block 248: padding at end of block bitmap is not set [ 149.672584][ T6333] fserror_report: 2 callbacks suppressed [ 149.672605][ T6333] loop4: lost filesystem error report for type 5 error -117 [ 149.706163][ T6333] __quota_error: 131 callbacks suppressed [ 149.706195][ T6333] Quota error (device loop4): write_blk: dquota write failed [ 149.726774][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 149.733206][ C1] EXT4-fs (loop4): last error at time 1780394965: ext4_validate_block_bitmap:441 [ 149.742894][ T6333] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 149.762357][ T6333] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.644: Failed to acquire dquot type 1 [ 149.913127][ T6333] loop4: lost filesystem error report for type 5 error -28 [ 149.921139][ T6333] EXT4-fs (loop4): 1 truncate cleaned up [ 149.950851][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 150.247910][ T6345] tap0: tun_chr_ioctl cmd 1074025677 [ 150.253471][ T6345] tap0: linktype set to 780 [ 150.476444][ T28] audit: type=1400 audit(1780394966.739:733): avc: denied { write } for pid=6348 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.781997][ T6293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.894682][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 151.013331][ T28] audit: type=1400 audit(1780394967.269:734): avc: denied { read write } for pid=6353 comm="syz.3.650" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.088883][ T28] audit: type=1400 audit(1780394967.279:735): avc: denied { open } for pid=6353 comm="syz.3.650" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.094562][ T6358] loop2: detected capacity change from 0 to 128 [ 151.266163][ T6358] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.285621][ T6358] FAT-fs (loop2): Filesystem has been set read-only [ 151.599036][ T6352] lo speed is unknown, defaulting to 1000 [ 151.870947][ T28] audit: type=1400 audit(1780394968.139:736): avc: denied { read } for pid=6369 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.904423][ T6374] loop3: detected capacity change from 0 to 128 [ 151.922826][ T6374] ext4: Unknown parameter 'subj_user' [ 152.109800][ T6356] loop0: detected capacity change from 0 to 4096 [ 152.120543][ T5773] IPVS: starting estimator thread 0... [ 152.217610][ T6382] IPVS: using max 2304 ests per chain, 115200 per kthread [ 152.235044][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.337732][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.352176][ T28] audit: type=1400 audit(1780394968.619:737): avc: denied { ioctl } for pid=6391 comm="syz.4.662" path="socket:[13100]" dev="sockfs" ino=13100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.714688][ T28] audit: type=1400 audit(1780394968.979:738): avc: denied { ioctl } for pid=6400 comm="syz.1.665" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.757557][ T6403] loop1: detected capacity change from 0 to 128 [ 152.768508][ T6403] syz.1.666: attempt to access beyond end of device [ 152.768508][ T6403] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 152.782379][ T6403] syz.1.666: attempt to access beyond end of device [ 152.782379][ T6403] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 152.795733][ T6403] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 152.804271][ T6403] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 152.813432][ T6403] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 152.822010][ T6403] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 153.063227][ T28] audit: type=1326 audit(3927878617.337:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.668" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b48ace59 code=0x7ffc0000 [ 153.088689][ T28] audit: type=1326 audit(3927878617.337:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.668" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b48ace59 code=0x7ffc0000 [ 153.183719][ T6422] lo speed is unknown, defaulting to 1000 [ 153.439058][ T6431] lo speed is unknown, defaulting to 1000 [ 153.823007][ T6435] loop4: detected capacity change from 0 to 4096 [ 153.857653][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.886864][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.163634][ T6385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.410964][ T6452] loop2: detected capacity change from 0 to 512 [ 155.437142][ T6449] netlink: 256 bytes leftover after parsing attributes in process `syz.0.677'. [ 155.454140][ T6452] EXT4-fs: dax option not supported [ 155.503516][ T28] kauditd_printk_skb: 544 callbacks suppressed [ 155.503535][ T28] audit: type=1400 audit(3927878619.767:1285): avc: denied { execute } for pid=6446 comm="syz.0.677" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.656455][ T6477] loop4: detected capacity change from 0 to 512 [ 155.759326][ T6477] EXT4-fs: Ignoring removed bh option [ 155.821823][ T28] audit: type=1400 audit(3927878620.087:1286): avc: denied { write } for pid=6442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.846673][ T6477] EXT4-fs: inline encryption not supported [ 155.923495][ T28] audit: type=1400 audit(3927878620.187:1287): avc: denied { write } for pid=6491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.434458][ T6477] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.543170][ T6477] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 156.569668][ T6477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.686: bg 0: block 248: padding at end of block bitmap is not set [ 156.586790][ T6477] loop4: lost filesystem error report for type 5 error -117 [ 156.587051][ T6477] Quota error (device loop4): write_blk: dquota write failed [ 156.593046][ T6509] netlink: 104 bytes leftover after parsing attributes in process `syz.2.691'. [ 156.594484][ T6477] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 156.594542][ T6477] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.686: Failed to acquire dquot type 1 [ 156.601933][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.601952][ C0] EXT4-fs (loop4): last error at time 3927878620: ext4_validate_block_bitmap:441 [ 156.648618][ T6477] loop4: lost filesystem error report for type 5 error -28 [ 156.713010][ T6477] EXT4-fs (loop4): 1 truncate cleaned up [ 156.746328][ T28] audit: type=1400 audit(3927878621.007:1288): avc: denied { write } for pid=6496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.775319][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 156.840010][ T28] audit: type=1400 audit(3927878621.107:1289): avc: denied { write } for pid=6517 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.865847][ T6519] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 156.898918][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.961741][ T6519] veth3: entered allmulticast mode [ 156.995810][ T6461] loop1: detected capacity change from 0 to 4096 [ 157.053252][ T6519] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 157.200749][ T6522] bond1: entered promiscuous mode [ 157.205872][ T6522] bond1: entered allmulticast mode [ 157.299480][ T28] audit: type=1326 audit(3927878621.557:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a038ce59 code=0x7ffc0000 [ 157.393958][ T6535] loop2: detected capacity change from 0 to 512 [ 157.408917][ T28] audit: type=1326 audit(3927878621.557:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a038ce59 code=0x7ffc0000 [ 157.443643][ T6535] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 157.467927][ T6535] EXT4-fs (loop2): group descriptors corrupted! [ 157.522585][ T28] audit: type=1326 audit(3927878621.597:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a038ce59 code=0x7ffc0000 [ 157.628305][ T6461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.631499][ T6519] macvlan2: entered promiscuous mode [ 157.656326][ T6519] macvlan2: entered allmulticast mode [ 157.719524][ T6542] netlink: 104 bytes leftover after parsing attributes in process `syz.2.700'. [ 157.729106][ T6519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.790635][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.872520][ T6528] tap0: tun_chr_ioctl cmd 1074025677 [ 157.878163][ T6528] tap0: linktype set to 780 [ 158.005496][ T6548] loop3: detected capacity change from 0 to 1024 [ 158.013344][ T6542] lo speed is unknown, defaulting to 1000 [ 158.024810][ T6548] EXT4-fs: dax option not supported [ 158.063212][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 158.081840][ T6551] loop0: detected capacity change from 0 to 1764 [ 158.089921][ T6548] vhci_hcd vhci_hcd.3: invalid port number 9 [ 158.112941][ T6548] vhci_hcd vhci_hcd.3: invalid port number 9 [ 158.305053][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 158.320546][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 158.543482][ T6543] loop2: detected capacity change from 0 to 512 [ 158.638439][ T6584] hsr0: entered allmulticast mode [ 158.679623][ T6584] hsr_slave_0: entered allmulticast mode [ 158.686422][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.703897][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 158.722227][ T6584] hsr_slave_1: entered allmulticast mode [ 158.743532][ T6586] hsr_slave_0: left promiscuous mode [ 158.765872][ T6586] hsr_slave_1: left promiscuous mode [ 158.798462][ T6586] hsr0 (unregistering): left allmulticast mode [ 159.028750][ T6599] loop4: detected capacity change from 0 to 128 [ 159.099049][ T6599] vfat filesystem being mounted at /157/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 159.110560][ T6594] loop0: detected capacity change from 0 to 128 [ 159.150822][ T6594] ext4: Unknown parameter 'subj_user' [ 159.211503][ T6599] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.227356][ T6599] FAT-fs (loop4): Filesystem has been set read-only [ 159.310639][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.913387][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.920754][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.047288][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.061342][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.190701][ T54] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.205662][ T54] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.236684][ T54] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.272899][ T54] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.281949][ T54] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.291495][ T54] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.300811][ T54] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.309897][ T54] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.841714][ T6662] FAULT_INJECTION: forcing a failure. [ 160.841714][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.857073][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.0.724 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.857185][ T6662] Tainted: [W]=WARN [ 160.857194][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.857210][ T6662] Call Trace: [ 160.857218][ T6662] [ 160.857228][ T6662] __dump_stack+0x1d/0x30 [ 160.857265][ T6662] dump_stack_lvl+0x95/0xd0 [ 160.857287][ T6662] dump_stack+0x15/0x1b [ 160.857306][ T6662] should_fail_ex+0x263/0x280 [ 160.857328][ T6662] should_fail+0xb/0x20 [ 160.857350][ T6662] should_fail_usercopy+0x1a/0x20 [ 160.857375][ T6662] strncpy_from_user+0x27/0x250 [ 160.857461][ T6662] __se_sys_memfd_create+0x20f/0x3b0 [ 160.857526][ T6662] __x64_sys_memfd_create+0x31/0x40 [ 160.857562][ T6662] x64_sys_call+0x1f22/0x3020 [ 160.857661][ T6662] do_syscall_64+0x12c/0x3b0 [ 160.857698][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.857793][ T6662] RIP: 0033:0x7f3a6d17ce59 [ 160.857814][ T6662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.857838][ T6662] RSP: 002b:00007f3a6bb94e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 160.857858][ T6662] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007f3a6d17ce59 [ 160.857871][ T6662] RDX: 00007f3a6bb94ee0 RSI: 0000000000000000 RDI: 00007f3a6d212f4f [ 160.857932][ T6662] RBP: 0000200000001e00 R08: 00000000ffffffff R09: 0000000000000000 [ 160.857946][ T6662] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000280 [ 160.857961][ T6662] R13: 00007f3a6bb94ee0 R14: 00007f3a6bb94ea0 R15: 0000200000001d40 [ 160.857986][ T6662] [ 161.294957][ T6668] loop2: detected capacity change from 0 to 512 [ 161.424719][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.506370][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 161.506388][ T28] audit: type=1400 audit(3927878625.757:1305): avc: denied { write } for pid=6656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.541721][ T6668] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.600377][ T6678] loop3: detected capacity change from 0 to 128 [ 161.635001][ T6678] vfat filesystem being mounted at /159/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 161.679353][ T28] audit: type=1400 audit(3927878625.937:1306): avc: denied { write } for pid=6679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.705974][ T6678] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.748042][ T6678] FAT-fs (loop3): Filesystem has been set read-only [ 162.105645][ T28] audit: type=1400 audit(3927878626.367:1307): avc: denied { write } for pid=6682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.130577][ T6697] FAULT_INJECTION: forcing a failure. [ 162.130577][ T6697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.183200][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.3.730 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 162.183239][ T6697] Tainted: [W]=WARN [ 162.183246][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.183260][ T6697] Call Trace: [ 162.183268][ T6697] [ 162.183296][ T6697] __dump_stack+0x1d/0x30 [ 162.183329][ T6697] dump_stack_lvl+0x95/0xd0 [ 162.183356][ T6697] dump_stack+0x15/0x1b [ 162.183381][ T6697] should_fail_ex+0x263/0x280 [ 162.183409][ T6697] should_fail+0xb/0x20 [ 162.183487][ T6697] should_fail_usercopy+0x1a/0x20 [ 162.183596][ T6697] _copy_from_iter+0xcf/0xea0 [ 162.183685][ T6697] ? __alloc_skb+0x4f6/0x690 [ 162.183720][ T6697] ? __alloc_skb+0x200/0x690 [ 162.183750][ T6697] netlink_sendmsg+0x4ae/0x6f0 [ 162.183818][ T6697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.183864][ T6697] ____sys_sendmsg+0x563/0x5b0 [ 162.183903][ T6697] ___sys_sendmsg+0x195/0x1e0 [ 162.183988][ T6697] __x64_sys_sendmsg+0xd4/0x160 [ 162.184024][ T6697] x64_sys_call+0x194c/0x3020 [ 162.184099][ T6697] do_syscall_64+0x12c/0x3b0 [ 162.184140][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.184169][ T6697] RIP: 0033:0x7fd3b48ace59 [ 162.184190][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.184215][ T6697] RSP: 002b:00007fd3b32de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.184242][ T6697] RAX: ffffffffffffffda RBX: 00007fd3b4b26090 RCX: 00007fd3b48ace59 [ 162.184269][ T6697] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 162.184286][ T6697] RBP: 00007fd3b32de090 R08: 0000000000000000 R09: 0000000000000000 [ 162.184303][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.184318][ T6697] R13: 00007fd3b4b26128 R14: 00007fd3b4b26090 R15: 00007ffc06db90d8 [ 162.184343][ T6697] [ 162.401592][ T28] audit: type=1400 audit(3927878626.457:1308): avc: denied { write } for pid=6699 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.576325][ T6650] loop4: detected capacity change from 0 to 4096 [ 162.584489][ T6703] loop1: detected capacity change from 0 to 128 [ 162.639422][ T6703] vfat filesystem being mounted at /122/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 162.679090][ T6703] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.723469][ T6703] FAT-fs (loop1): Filesystem has been set read-only [ 162.857549][ T6650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.875365][ T6710] loop0: detected capacity change from 0 to 128 [ 162.887180][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.920608][ T6710] msdos filesystem being mounted at /159/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 162.955032][ T6710] bio_check_eod: 7 callbacks suppressed [ 162.955048][ T6710] syz.0.734: attempt to access beyond end of device [ 162.955048][ T6710] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 162.992779][ T6710] syz.0.734: attempt to access beyond end of device [ 162.992779][ T6710] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 163.027807][ T6710] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 163.041371][ T6710] syz.0.734: attempt to access beyond end of device [ 163.041371][ T6710] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 163.067241][ T6710] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 163.088204][ T6710] syz.0.734: attempt to access beyond end of device [ 163.088204][ T6710] loop0: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 163.117275][ T6710] syz.0.734: attempt to access beyond end of device [ 163.117275][ T6710] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 163.166370][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 163.221855][ T6723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.442555][ T6719] loop1: detected capacity change from 0 to 4096 [ 163.461170][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.494602][ T28] audit: type=1400 audit(3927878627.757:1309): avc: denied { read } for pid=6724 comm="syz.4.741" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.547268][ T28] audit: type=1400 audit(3927878627.807:1310): avc: denied { mount } for pid=6724 comm="syz.4.741" name="/" dev="configfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 163.766433][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.817274][ T28] audit: type=1400 audit(3927878628.067:1311): avc: denied { write } for pid=6731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.858979][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.906066][ T28] audit: type=1400 audit(3927878628.167:1312): avc: denied { write } for pid=6744 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.474476][ T6759] loop2: detected capacity change from 0 to 128 [ 164.538640][ T6759] ext4: Unknown parameter 'subj_user' [ 164.584075][ T6766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.747'. [ 164.601064][ T6768] capability: warning: `syz.3.748' uses 32-bit capabilities (legacy support in use) [ 164.668861][ T28] audit: type=1400 audit(3927878628.917:1313): avc: denied { write } for pid=6750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.709439][ T6778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.749466][ T28] audit: type=1400 audit(3927878629.017:1314): avc: denied { write } for pid=6779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.850990][ T6785] loop4: detected capacity change from 0 to 128 [ 164.870461][ T6785] msdos filesystem being mounted at /165/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 164.898194][ T6785] syz.4.751: attempt to access beyond end of device [ 164.898194][ T6785] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 164.919480][ T6785] syz.4.751: attempt to access beyond end of device [ 164.919480][ T6785] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 164.936352][ T6785] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 164.960666][ T6783] tap0: tun_chr_ioctl cmd 1074025677 [ 164.971231][ T6785] syz.4.751: attempt to access beyond end of device [ 164.971231][ T6785] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 164.996773][ T6785] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 165.012934][ T6783] tap0: linktype set to 780 [ 165.018449][ T6785] syz.4.751: attempt to access beyond end of device [ 165.018449][ T6785] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 165.043065][ T6785] syz.4.751: attempt to access beyond end of device [ 165.043065][ T6785] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 165.066362][ T6785] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 165.076170][ T6785] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 165.085915][ T6785] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 165.094653][ T6785] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 165.103866][ T6785] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 165.112597][ T6785] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 165.161305][ T6777] syz.0.750 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 165.163318][ T6791] loop3: detected capacity change from 0 to 4096 [ 165.175435][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.0.750 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 165.175556][ T6777] Tainted: [W]=WARN [ 165.175573][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.175661][ T6777] Call Trace: [ 165.175670][ T6777] [ 165.175681][ T6777] __dump_stack+0x1d/0x30 [ 165.175712][ T6777] dump_stack_lvl+0x95/0xd0 [ 165.175737][ T6777] dump_stack+0x15/0x1b [ 165.175762][ T6777] dump_header+0x80/0x240 [ 165.175791][ T6777] oom_kill_process+0x295/0x350 [ 165.175907][ T6777] out_of_memory+0x97d/0xb80 [ 165.175950][ T6777] try_charge_memcg+0x62f/0xa10 [ 165.176066][ T6777] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 165.176094][ T6777] __alloc_frozen_pages_noprof+0x18a/0x350 [ 165.176168][ T6777] alloc_pages_mpol+0xb3/0x260 [ 165.176201][ T6777] alloc_pages_noprof+0x8f/0x140 [ 165.176249][ T6777] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 165.176345][ T6777] __kvmalloc_node_noprof+0x3d4/0x640 [ 165.176373][ T6777] ? futex_hash_allocate+0x190/0x9a0 [ 165.176464][ T6777] ? futex_hash_allocate+0x190/0x9a0 [ 165.176502][ T6777] futex_hash_allocate+0x190/0x9a0 [ 165.176545][ T6777] ? cap_task_prctl+0x13f/0x6b0 [ 165.176579][ T6777] futex_hash_prctl+0xd8/0xf0 [ 165.176668][ T6777] __se_sys_prctl+0x4f4/0x1400 [ 165.176705][ T6777] __x64_sys_prctl+0x67/0x80 [ 165.176736][ T6777] x64_sys_call+0x2533/0x3020 [ 165.176764][ T6777] do_syscall_64+0x12c/0x3b0 [ 165.176830][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.176859][ T6777] RIP: 0033:0x7f3a6d17ce59 [ 165.176880][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.176903][ T6777] RSP: 002b:00007f3a6bbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 165.177000][ T6777] RAX: ffffffffffffffda RBX: 00007f3a6d3f5fa0 RCX: 00007f3a6d17ce59 [ 165.177019][ T6777] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 165.177040][ T6777] RBP: 00007f3a6d212d6f R08: 0000000000000000 R09: 0000000000000000 [ 165.177058][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.177074][ T6777] R13: 00007f3a6d3f6038 R14: 00007f3a6d3f5fa0 R15: 00007ffdd1cc1028 [ 165.177099][ T6777] [ 165.177109][ T6777] memory: usage 307200kB, limit 307200kB, failcnt 1032 [ 165.177127][ T6777] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 165.177141][ T6777] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 165.177182][ T6777] Memory cgroup stats for /syz0: [ 165.177730][ T6777] cache 0 [ 165.266669][ T6791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.275221][ T6777] rss 0 [ 165.275233][ T6777] shmem 0 [ 165.275240][ T6777] mapped_file 0 [ 165.275247][ T6777] dirty 0 [ 165.275254][ T6777] writeback 0 [ 165.275298][ T6777] workingset_refault_anon 366 [ 165.275310][ T6777] workingset_refault_file 1902 [ 165.275321][ T6777] swap 389120 [ 165.275331][ T6777] swapcached 3829760 [ 165.275341][ T6777] pgpgin 69042 [ 165.275351][ T6777] pgpgout 69041 [ 165.275360][ T6777] pgfault 86488 [ 165.275411][ T6777] pgmajfault 285 [ 165.275421][ T6777] inactive_anon 4096 [ 165.275441][ T6777] active_anon 0 [ 165.275452][ T6777] inactive_file 0 [ 165.275461][ T6777] active_file 0 [ 165.275534][ T6777] unevictable 0 [ 165.275544][ T6777] hierarchical_memory_limit 314572800 [ 165.275556][ T6777] hierarchical_memsw_limit 9223372036854771712 [ 165.275568][ T6777] total_cache 0 [ 165.275578][ T6777] total_rss 0 [ 165.275625][ T6777] total_shmem 0 [ 165.275634][ T6777] total_mapped_file 0 [ 165.275643][ T6777] total_dirty 0 [ 165.275653][ T6777] total_writeback 0 [ 165.275663][ T6777] total_workingset_refault_anon 366 [ 165.275675][ T6777] total_workingset_refault_file 1902 [ 165.275714][ T6777] total_swap 389120 [ 165.275724][ T6777] total_swapcached 3829760 [ 165.275735][ T6777] total_pgpgin 69042 [ 165.275745][ T6777] total_pgpgout 69041 [ 165.275755][ T6777] total_pgfault 86488 [ 165.275765][ T6777] total_pgmajfault 285 [ 165.275776][ T6777] total_inactive_anon 4096 [ 165.275786][ T6777] total_active_anon 0 [ 165.275797][ T6777] total_inactive_file 0 [ 165.275806][ T6777] total_active_file 0 [ 165.275815][ T6777] total_unevictable 0 [ 165.275826][ T6777] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.750,pid=6776,uid=0 [ 165.621287][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.639025][ T6777] Memory cgroup out of memory: Killed process 6776 (syz.0.750) total-vm:100584kB, anon-rss:1232kB, file-rss:26700kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 165.934833][ T6799] loop4: detected capacity change from 0 to 1024 [ 166.129621][ T6799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 166.142496][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.153605][ T6799] System zones: 0-1, 3-8 [ 166.166768][ T6799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.183533][ T6805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.204574][ T6799] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.227166][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.249204][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.264502][ T6799] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.757: path /166/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 166.284859][ T6805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.293807][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.302843][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.311730][ T6805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.759'. [ 166.334813][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.375352][ T6805] loop0: detected capacity change from 0 to 128 [ 166.398440][ T6805] msdos filesystem being mounted at /165/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 166.737336][ T6812] lo speed is unknown, defaulting to 1000 [ 166.945352][ T6820] loop3: detected capacity change from 0 to 4096 [ 167.030664][ T6825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.050075][ T6820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.276990][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.307163][ T6834] loop0: detected capacity change from 0 to 8192 [ 167.330107][ T6837] loop2: detected capacity change from 0 to 1024 [ 167.337336][ T6837] EXT4-fs: dax option not supported [ 167.369255][ T6837] vhci_hcd vhci_hcd.3: invalid port number 9 [ 167.472901][ T6834] msdos filesystem being mounted at /167/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 167.519998][ T6837] vhci_hcd vhci_hcd.3: invalid port number 9 [ 167.693806][ T6842] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 167.746136][ T6842] FAT-fs (loop0): Filesystem has been set read-only [ 167.780564][ T6846] netlink: 'syz.2.773': attribute type 30 has an invalid length. [ 167.854655][ T54] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.863565][ T54] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.872349][ T54] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.881078][ T54] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.897176][ T6834] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 167.905951][ T6844] netlink: 'syz.2.773': attribute type 30 has an invalid length. [ 167.981798][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 167.981815][ T28] audit: type=1400 audit(3927878632.247:1317): avc: denied { write } for pid=6852 comm="syz.3.776" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.990716][ T6851] loop2: detected capacity change from 0 to 128 [ 168.020135][ T6853] loop3: detected capacity change from 0 to 256 [ 168.032778][ T6851] ext4: Unknown parameter 'subj_user' [ 168.113556][ T28] audit: type=1400 audit(3927878632.377:1318): avc: denied { create } for pid=6855 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 168.134789][ T28] audit: type=1400 audit(3927878632.377:1319): avc: denied { create } for pid=6855 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 168.156047][ T28] audit: type=1400 audit(3927878632.377:1320): avc: denied { write } for pid=6855 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 168.181221][ T28] audit: type=1400 audit(3927878632.377:1321): avc: denied { read } for pid=6855 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 168.202282][ T28] audit: type=1400 audit(3927878632.377:1322): avc: denied { ioctl } for pid=6855 comm="syz.3.778" path="socket:[14046]" dev="sockfs" ino=14046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 168.332730][ T6859] loop3: detected capacity change from 0 to 4096 [ 168.394928][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.550447][ T6877] loop4: detected capacity change from 0 to 512 [ 168.555180][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.565988][ T6877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.589534][ T6877] EXT4-fs (loop4): 1 truncate cleaned up [ 168.595731][ T6877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.610945][ T6875] process 'syz.0.786' launched './file1' with NULL argv: empty string added [ 168.619971][ T28] audit: type=1400 audit(3927878632.887:1323): avc: denied { execute_no_trans } for pid=6874 comm="syz.0.786" path="/170/file1" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.651320][ T6879] loop1: detected capacity change from 0 to 1764 [ 168.658082][ T6879] iso9660: Unknown parameter '' [ 168.825797][ T6884] __nla_validate_parse: 24 callbacks suppressed [ 168.825814][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 168.893679][ T3298] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 168.928781][ T6886] loop0: detected capacity change from 0 to 1024 [ 168.953491][ T3298] EXT4-fs (loop4): Remounting filesystem read-only [ 168.979141][ T6886] EXT4-fs: dax option not supported [ 169.103158][ T6892] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 169.160418][ T6892] msdos filesystem being mounted at /171/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 169.198026][ T6893] ext4: Unknown parameter 'subj_user' [ 169.235274][ T28] audit: type=1400 audit(3927878633.017:1324): avc: denied { write } for pid=6876 comm="syz.4.787" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.256961][ T28] audit: type=1400 audit(3927878633.017:1325): avc: denied { read append } for pid=6876 comm="syz.4.787" path="/173/file2/cpuset.memory_pressure" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.281827][ T28] audit: type=1400 audit(3927878633.017:1326): avc: denied { map } for pid=6876 comm="syz.4.787" path="/173/file2/cpuset.memory_pressure" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.383617][ T6871] syz.2.784 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 169.397701][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz.2.784 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.397788][ T6871] Tainted: [W]=WARN [ 169.397797][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.397815][ T6871] Call Trace: [ 169.397823][ T6871] [ 169.397833][ T6871] __dump_stack+0x1d/0x30 [ 169.397861][ T6871] dump_stack_lvl+0x95/0xd0 [ 169.397901][ T6871] dump_stack+0x15/0x1b [ 169.397926][ T6871] dump_header+0x80/0x240 [ 169.397964][ T6871] oom_kill_process+0x295/0x350 [ 169.398007][ T6871] out_of_memory+0x97d/0xb80 [ 169.398041][ T6871] try_charge_memcg+0x62f/0xa10 [ 169.398092][ T6871] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 169.398144][ T6871] __alloc_frozen_pages_noprof+0x18a/0x350 [ 169.398182][ T6871] alloc_pages_mpol+0xb3/0x260 [ 169.398258][ T6871] alloc_pages_noprof+0x8f/0x140 [ 169.398290][ T6871] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 169.398331][ T6871] __kvmalloc_node_noprof+0x3d4/0x640 [ 169.398432][ T6871] ? futex_hash_allocate+0x190/0x9a0 [ 169.398474][ T6871] ? futex_hash_allocate+0x190/0x9a0 [ 169.398521][ T6871] futex_hash_allocate+0x190/0x9a0 [ 169.398573][ T6871] ? cap_task_prctl+0x13f/0x6b0 [ 169.398641][ T6871] futex_hash_prctl+0xd8/0xf0 [ 169.398682][ T6871] __se_sys_prctl+0x4f4/0x1400 [ 169.398757][ T6871] __x64_sys_prctl+0x67/0x80 [ 169.398847][ T6871] x64_sys_call+0x2533/0x3020 [ 169.398880][ T6871] do_syscall_64+0x12c/0x3b0 [ 169.398920][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.398947][ T6871] RIP: 0033:0x7ff6a038ce59 [ 169.399037][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.399058][ T6871] RSP: 002b:00007ff69ede7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 169.399084][ T6871] RAX: ffffffffffffffda RBX: 00007ff6a0605fa0 RCX: 00007ff6a038ce59 [ 169.399103][ T6871] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 169.399184][ T6871] RBP: 00007ff6a0422d6f R08: 0000000000000000 R09: 0000000000000000 [ 169.399202][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.399217][ T6871] R13: 00007ff6a0606038 R14: 00007ff6a0605fa0 R15: 00007ffe2bc31538 [ 169.399237][ T6871] [ 169.399243][ T6871] memory: usage 307200kB, limit 307200kB, failcnt 224 [ 169.785504][ T6871] memory+swap: usage 138648kB, limit 9007199254740988kB, failcnt 0 [ 169.809424][ T6871] kmem: usage 123344kB, limit 9007199254740988kB, failcnt 0 [ 169.829409][ T6871] Memory cgroup stats for /syz2: [ 169.829745][ T6871] cache 528384 [ 169.849572][ T6871] rss 28672 [ 169.862344][ T6871] shmem 0 [ 169.869116][ T6871] mapped_file 65536 [ 169.877989][ T6871] dirty 0 [ 169.884114][ T6871] writeback 0 [ 169.895818][ T6871] workingset_refault_anon 2398 [ 169.903227][ T6871] workingset_refault_file 2131 [ 169.912916][ T6871] swap 462848 [ 169.924746][ T6871] swapcached 17145856 [ 169.931261][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.958264][ T6891] tap0: tun_chr_ioctl cmd 1074025677 [ 169.969775][ T6871] pgpgin 79396 [ 169.976737][ T6891] tap0: linktype set to 780 [ 169.986726][ T6894] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.008042][ T6871] pgpgout 79259 [ 170.018205][ T6871] pgfault 98007 [ 170.021979][ T6871] pgmajfault 483 [ 170.025856][ T6871] inactive_anon 0 [ 170.032357][ T6871] active_anon 32768 [ 170.036502][ T6871] inactive_file 0 [ 170.040375][ T6871] active_file 528384 [ 170.044469][ T6871] unevictable 0 [ 170.048445][ T6871] hierarchical_memory_limit 314572800 [ 170.053942][ T6871] hierarchical_memsw_limit 9223372036854771712 [ 170.060628][ T6871] total_cache 528384 [ 170.064793][ T6871] total_rss 28672 [ 170.070732][ T6871] total_shmem 0 [ 170.074276][ T6871] total_mapped_file 65536 [ 170.078946][ T6871] total_dirty 0 [ 170.082729][ T6871] total_writeback 0 [ 170.087152][ T6871] total_workingset_refault_anon 2398 [ 170.092753][ T6871] total_workingset_refault_file 2131 [ 170.098458][ T6871] total_swap 462848 [ 170.102464][ T6871] total_swapcached 17145856 [ 170.107452][ T6871] total_pgpgin 79396 [ 170.111505][ T6871] total_pgpgout 79259 [ 170.115732][ T6871] total_pgfault 98007 [ 170.120369][ T6871] total_pgmajfault 483 [ 170.151393][ T6871] total_inactive_anon 0 [ 170.155648][ T6871] total_active_anon 32768 [ 170.160019][ T6871] total_inactive_file 0 [ 170.164185][ T6871] total_active_file 528384 [ 170.168649][ T6871] total_unevictable 0 [ 170.172643][ T6871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.784,pid=6869,uid=0 [ 170.187294][ T6871] Memory cgroup out of memory: Killed process 6869 (syz.2.784) total-vm:104820kB, anon-rss:1324kB, file-rss:30464kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 170.303965][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.429038][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.475603][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.529735][ T6907] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 170.543485][ T6907] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 170.562555][ T6907] EXT4-fs (loop0): 1 truncate cleaned up [ 170.569592][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.606451][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.683299][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.793768][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.805718][ T6931] SET target dimension over the limit! [ 170.822065][ T6931] siw: device registration error -23 [ 170.895939][ T6945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.798'. [ 170.942944][ T36] bridge_slave_1: left allmulticast mode [ 170.957008][ T36] bridge_slave_1: left promiscuous mode [ 170.970072][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.028780][ T36] bridge_slave_0: left allmulticast mode [ 171.034623][ T36] bridge_slave_0: left promiscuous mode [ 171.040748][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.180208][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.249596][ T36] team0: Port device bridge1 removed [ 171.266412][ T6952] EXT4-fs: dax option not supported [ 171.312802][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.324232][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.334548][ T36] bond0 (unregistering): Released all slaves [ 171.344973][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 171.365223][ T36] bond1 (unregistering): (slave dummy0): Releasing active interface [ 171.374727][ T36] bond1 (unregistering): Released all slaves [ 171.412378][ T6945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.429888][ T6945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.449000][ T6931] set_capacity_and_notify: 5 callbacks suppressed [ 171.449026][ T6931] loop2: detected capacity change from 0 to 8192 [ 171.462499][ T6945] bond0 (unregistering): Released all slaves [ 171.524928][ T6926] lo speed is unknown, defaulting to 1000 [ 171.533760][ T6960] loop1: detected capacity change from 0 to 512 [ 171.540850][ T36] tipc: Left network mode [ 171.567500][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.575001][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.583103][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.590753][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.618195][ T36] veth1_macvtap: left promiscuous mode [ 171.632090][ T36] veth0_macvtap: left promiscuous mode [ 171.639681][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 171.646746][ T36] veth1_vlan: left promiscuous mode [ 171.664928][ T6960] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.679397][ T36] veth0_vlan: left promiscuous mode [ 171.753884][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 171.792006][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 171.849106][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 172.017041][ T36] team0 (unregistering): Port device team_slave_1 removed [ 172.027347][ T36] team0 (unregistering): Port device team_slave_0 removed [ 172.194750][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 172.584725][ T6990] loop2: detected capacity change from 0 to 128 [ 172.591882][ T6990] ext4: Unknown parameter 'subj_user' [ 172.903895][ T7020] loop2: detected capacity change from 0 to 512 [ 172.932229][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.939515][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.946838][ T6926] bridge_slave_0: entered allmulticast mode [ 172.953521][ T6926] bridge_slave_0: entered promiscuous mode [ 172.960383][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.983986][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.991546][ T6926] bridge_slave_1: entered allmulticast mode [ 172.999377][ T7020] EXT4-fs: Ignoring removed bh option [ 173.001736][ T7024] loop0: detected capacity change from 0 to 128 [ 173.011317][ T6926] bridge_slave_1: entered promiscuous mode [ 173.062465][ T7020] EXT4-fs: inline encryption not supported [ 173.443557][ T7020] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.479187][ T7020] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 173.508613][ T7020] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.807: bg 0: block 248: padding at end of block bitmap is not set [ 173.523196][ T7020] loop2: lost filesystem error report for type 5 error -117 [ 173.523473][ T7020] __quota_error: 11 callbacks suppressed [ 173.523489][ T7020] Quota error (device loop2): write_blk: dquota write failed [ 173.530936][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 173.530955][ C0] EXT4-fs (loop2): last error at time 3927878637: ext4_validate_block_bitmap:441 [ 173.561985][ T7020] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 173.572448][ T7020] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.807: Failed to acquire dquot type 1 [ 173.583958][ T7020] loop2: lost filesystem error report for type 5 error -28 [ 173.584468][ T7020] EXT4-fs (loop2): 1 truncate cleaned up [ 173.598634][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 173.673732][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 173.694722][ T7024] vfat filesystem being mounted at /177/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 173.708071][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.740251][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.869643][ T7024] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.899964][ T7024] FAT-fs (loop0): Filesystem has been set read-only [ 173.967256][ T7037] tap0: tun_chr_ioctl cmd 1074025677 [ 173.975338][ T7037] tap0: linktype set to 780 [ 173.982696][ T6926] team0: Port device team_slave_0 added [ 173.997130][ T6926] team0: Port device team_slave_1 added [ 174.048003][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.055002][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.103951][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.120602][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.137904][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.165326][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.182744][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 174.190858][ T7050] loop3: detected capacity change from 0 to 128 [ 174.227121][ T6926] hsr_slave_0: entered promiscuous mode [ 174.231016][ T7050] vfat filesystem being mounted at /184/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 174.233389][ T6926] hsr_slave_1: entered promiscuous mode [ 174.282247][ T7048] loop1: detected capacity change from 0 to 128 [ 174.314895][ T7048] ext4: Unknown parameter 'subj_user' [ 174.517506][ T6926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.564269][ T6926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.579388][ T6926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.605413][ T6926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.626762][ T6926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.644334][ T6926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.661433][ T6926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.689215][ T6926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.760963][ T28] audit: type=1400 audit(3927878639.027:1338): avc: denied { write } for pid=7062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.810438][ T7089] loop1: detected capacity change from 0 to 4096 [ 174.821633][ T7094] loop0: detected capacity change from 0 to 1024 [ 174.833401][ T7094] EXT4-fs: dax option not supported [ 174.860785][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.881909][ T28] audit: type=1400 audit(3927878639.147:1339): avc: denied { write } for pid=7095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.954433][ T28] audit: type=1400 audit(3927878639.217:1340): avc: denied { connect } for pid=7088 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.974323][ T7080] loop3: detected capacity change from 0 to 512 [ 174.994997][ T28] audit: type=1400 audit(3927878639.257:1341): avc: denied { write } for pid=7088 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.065409][ T28] audit: type=1326 audit(3927878639.327:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.1.828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d123bce59 code=0x7ffc0000 [ 175.098380][ T28] audit: type=1326 audit(3927878639.327:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.1.828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d123bce59 code=0x7ffc0000 [ 175.129271][ T7107] vhci_hcd vhci_hcd.3: invalid port number 9 [ 175.138690][ T7107] vhci_hcd vhci_hcd.3: invalid port number 9 [ 175.151635][ T28] audit: type=1326 audit(3927878639.327:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.1.828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d123bce59 code=0x7ffc0000 [ 175.178162][ T28] audit: type=1326 audit(3927878639.327:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.1.828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d123bce59 code=0x7ffc0000 [ 175.218463][ T7075] tap0: tun_chr_ioctl cmd 1074025677 [ 175.241347][ T7075] tap0: linktype set to 780 [ 175.261737][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.321883][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.464843][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.527393][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.584368][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.591530][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.635433][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.651780][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.658943][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.703399][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 175.719303][ T7080] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.977963][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.256949][ T6926] veth0_vlan: entered promiscuous mode [ 176.280738][ T7166] netlink: 'syz.0.833': attribute type 3 has an invalid length. [ 176.305275][ T6926] veth1_vlan: entered promiscuous mode [ 176.335950][ T6926] veth0_macvtap: entered promiscuous mode [ 176.350794][ T6926] veth1_macvtap: entered promiscuous mode [ 176.374146][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.408984][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.430316][ T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.451236][ T7171] ext4: Unknown parameter 'subj_user' [ 176.461214][ T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.500589][ T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.550501][ T7073] syz.3.824 (7073) used greatest stack depth: 8040 bytes left [ 176.617787][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.711611][ T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.815374][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 176.859976][ T7181] netlink: 316 bytes leftover after parsing attributes in process `syz.5.797'. [ 176.860128][ T7181] netlink: 316 bytes leftover after parsing attributes in process `syz.5.797'. [ 176.917702][ T7184] netlink: 104 bytes leftover after parsing attributes in process `syz.2.839'. [ 176.929597][ T7185] set_capacity_and_notify: 1 callbacks suppressed [ 176.929614][ T7185] loop3: detected capacity change from 0 to 1024 [ 176.945567][ T7184] lo speed is unknown, defaulting to 1000 [ 176.993496][ T7185] EXT4-fs: dax option not supported [ 177.105175][ T7185] vhci_hcd vhci_hcd.3: invalid port number 9 [ 177.112617][ T7185] vhci_hcd vhci_hcd.3: invalid port number 9 [ 177.336111][ T7191] netlink: 56 bytes leftover after parsing attributes in process `syz.5.842'. [ 177.388143][ T7196] loop3: detected capacity change from 0 to 256 [ 177.425545][ T7199] lo speed is unknown, defaulting to 1000 [ 177.431515][ T7184] loop2: detected capacity change from 0 to 512 [ 177.452080][ T7184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.542201][ T7208] loop3: detected capacity change from 0 to 1024 [ 177.615306][ T7213] loop1: detected capacity change from 0 to 1024 [ 177.631511][ T7208] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 177.646697][ T7208] System zones: 0-1, 3-8 [ 177.651816][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.664187][ T7208] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.679815][ T7213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 177.699965][ T7213] System zones: 0-1, 3-8 [ 177.707938][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.721201][ T7213] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.759681][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.829213][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.861091][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.931539][ T7224] loop3: detected capacity change from 0 to 1024 [ 177.938284][ T7224] EXT4-fs: dax option not supported [ 177.949420][ T7199] loop0: detected capacity change from 0 to 512 [ 177.969103][ T7224] vhci_hcd vhci_hcd.3: invalid port number 9 [ 177.975158][ T7224] vhci_hcd vhci_hcd.3: invalid port number 9 [ 177.994651][ T7199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.088239][ T7241] loop5: detected capacity change from 0 to 1024 [ 179.057023][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 179.057051][ T28] audit: type=1400 audit(3927878642.967:1461): avc: denied { mount } for pid=7240 comm="syz.5.857" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.544138][ T7252] loop5: detected capacity change from 0 to 512 [ 179.648268][ T7252] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.860: missing EA_INODE flag [ 179.671571][ T7252] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 179.671869][ T7252] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.860: error while reading EA inode 12 err=-117 [ 179.681078][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 179.681116][ C0] EXT4-fs (loop5): initial error at time 3927878643: ext4_xattr_inode_iget:441: inode 12 [ 179.681147][ C0] EXT4-fs (loop5): last error at time 3927878643: ext4_xattr_inode_iget:441: inode 12 [ 179.721871][ T7252] loop5: lost filesystem error report for type 5 error -117 [ 179.725638][ T7252] EXT4-fs (loop5): 1 orphan inode deleted [ 179.740818][ T7252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.765172][ T28] audit: type=1400 audit(3927878644.017:1462): avc: denied { write } for pid=7251 comm="syz.5.860" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.787256][ T28] audit: type=1400 audit(3927878644.017:1463): avc: denied { ioctl } for pid=7251 comm="syz.5.860" path="/4/file0/file1" dev="loop5" ino=18 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.887402][ T6926] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.937182][ T28] audit: type=1400 audit(3927878644.207:1464): avc: denied { mounton } for pid=7261 comm="syz.5.862" path="/syzcgroup/net/syz5/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 179.967067][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.994510][ T28] audit: type=1400 audit(3927878644.207:1465): avc: denied { lock } for pid=7261 comm="syz.5.862" path="socket:[16794]" dev="sockfs" ino=16794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 180.009215][ T7265] loop0: detected capacity change from 0 to 1024 [ 180.037794][ T7265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.064295][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.098233][ T7271] EXT4-fs: dax option not supported [ 180.115487][ T7271] vhci_hcd vhci_hcd.3: invalid port number 9 [ 180.121773][ T7271] vhci_hcd vhci_hcd.3: invalid port number 9 [ 180.299881][ T6621] IPVS: starting estimator thread 0... [ 180.307380][ T7277] gtp0: entered promiscuous mode [ 180.313962][ T7277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.867'. [ 180.323791][ T7277] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 180.396812][ T7278] IPVS: using max 2304 ests per chain, 115200 per kthread [ 180.473239][ T7276] syz.0.867 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 180.487394][ T7276] CPU: 1 UID: 0 PID: 7276 Comm: syz.0.867 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 180.487436][ T7276] Tainted: [W]=WARN [ 180.487445][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.487462][ T7276] Call Trace: [ 180.487471][ T7276] [ 180.487479][ T7276] __dump_stack+0x1d/0x30 [ 180.487508][ T7276] dump_stack_lvl+0x95/0xd0 [ 180.487551][ T7276] dump_stack+0x15/0x1b [ 180.487576][ T7276] dump_header+0x80/0x240 [ 180.487669][ T7276] oom_kill_process+0x295/0x350 [ 180.487714][ T7276] out_of_memory+0x97d/0xb80 [ 180.487756][ T7276] try_charge_memcg+0x62f/0xa10 [ 180.487835][ T7276] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 180.487862][ T7276] __alloc_frozen_pages_noprof+0x18a/0x350 [ 180.487934][ T7276] alloc_pages_mpol+0xb3/0x260 [ 180.487961][ T7276] alloc_pages_noprof+0x8f/0x140 [ 180.487990][ T7276] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 180.488028][ T7276] __kvmalloc_node_noprof+0x3d4/0x640 [ 180.488059][ T7276] ? futex_hash_allocate+0x190/0x9a0 [ 180.488098][ T7276] ? futex_hash_allocate+0x190/0x9a0 [ 180.488138][ T7276] futex_hash_allocate+0x190/0x9a0 [ 180.488250][ T7276] futex_hash_prctl+0xd8/0xf0 [ 180.488283][ T7276] __se_sys_prctl+0x4f4/0x1400 [ 180.488371][ T7276] __x64_sys_prctl+0x67/0x80 [ 180.488406][ T7276] x64_sys_call+0x2533/0x3020 [ 180.488437][ T7276] do_syscall_64+0x12c/0x3b0 [ 180.488479][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.488559][ T7276] RIP: 0033:0x7f3a6d17ce59 [ 180.488660][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.488683][ T7276] RSP: 002b:00007f3a6bbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 180.488709][ T7276] RAX: ffffffffffffffda RBX: 00007f3a6d3f5fa0 RCX: 00007f3a6d17ce59 [ 180.488726][ T7276] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 180.488769][ T7276] RBP: 00007f3a6d212d6f R08: 0000000000000000 R09: 0000000000000000 [ 180.488783][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.488798][ T7276] R13: 00007f3a6d3f6038 R14: 00007f3a6d3f5fa0 R15: 00007ffdd1cc1028 [ 180.488822][ T7276] [ 180.488829][ T7276] memory: usage 307200kB, limit 307200kB, failcnt 1170 [ 180.783799][ T7276] memory+swap: usage 287000kB, limit 9007199254740988kB, failcnt 0 [ 180.806231][ T7276] kmem: usage 270552kB, limit 9007199254740988kB, failcnt 0 [ 180.816823][ T7276] Memory cgroup stats for /syz0: [ 180.821265][ T7276] cache 0 [ 180.842573][ T7276] rss 0 [ 180.858330][ T7276] shmem 0 [ 180.887360][ T7276] mapped_file 0 [ 180.913701][ T7276] dirty 0 [ 180.925644][ T7276] writeback 0 [ 180.960440][ T7276] workingset_refault_anon 385 [ 180.978351][ T7276] workingset_refault_file 1902 [ 180.990625][ T7276] swap 348160 [ 180.999619][ T7276] swapcached 4038656 [ 181.008826][ T7276] pgpgin 77898 [ 181.016824][ T7276] pgpgout 77892 [ 181.025289][ T7276] pgfault 96942 [ 181.034973][ T7276] pgmajfault 299 [ 181.045585][ T7276] inactive_anon 0 [ 181.054772][ T7276] active_anon 24576 [ 181.064787][ T7276] inactive_file 0 [ 181.070525][ T7286] tipc: Started in network mode [ 181.079374][ T7286] tipc: Node identity 4, cluster identity 4711 [ 181.079392][ T7286] tipc: Node number set to 4 [ 181.087274][ T7286] ext4: Unknown parameter 'subj_user' [ 181.149221][ T7276] active_file 0 [ 181.165072][ T7276] unevictable 0 [ 181.175467][ T7276] hierarchical_memory_limit 314572800 [ 181.185709][ T7276] hierarchical_memsw_limit 9223372036854771712 [ 181.206100][ T7276] total_cache 0 [ 181.210437][ T7293] bridge0: entered allmulticast mode [ 181.210773][ T7276] total_rss 0 [ 181.224973][ T7276] total_shmem 0 [ 181.230725][ T7276] total_mapped_file 0 [ 181.235649][ T7276] total_dirty 0 [ 181.240138][ T7276] total_writeback 0 [ 181.244340][ T7276] total_workingset_refault_anon 385 [ 181.262183][ T7276] total_workingset_refault_file 1902 [ 181.278173][ T7276] total_swap 348160 [ 181.289198][ T7276] total_swapcached 4038656 [ 181.301287][ T7276] total_pgpgin 77898 [ 181.325468][ T7276] total_pgpgout 77892 [ 181.353546][ T7276] total_pgfault 96942 [ 181.377646][ T7276] total_pgmajfault 299 [ 181.383607][ T7297] vfat filesystem being mounted at /148/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 181.398203][ T7276] total_inactive_anon 0 [ 181.403151][ T7276] total_active_anon 24576 [ 181.418544][ T7297] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 181.425743][ T7276] total_inactive_file 0 [ 181.427239][ T7297] FAT-fs (loop2): Filesystem has been set read-only [ 181.452207][ T7276] total_active_file 0 [ 181.459196][ T7276] total_unevictable 0 [ 181.463218][ T7276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.867,pid=7275,uid=0 [ 181.477831][ T7276] Memory cgroup out of memory: Killed process 7275 (syz.0.867) total-vm:94168kB, anon-rss:1232kB, file-rss:22628kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 181.489279][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 181.592941][ T7309] msdos filesystem being mounted at /151/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 181.619120][ T7309] bio_check_eod: 37 callbacks suppressed [ 181.619219][ T7309] syz.1.881: attempt to access beyond end of device [ 181.619219][ T7309] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 181.656658][ T7309] syz.1.881: attempt to access beyond end of device [ 181.656658][ T7309] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 181.695300][ T28] audit: type=1400 audit(3927878645.957:1466): avc: denied { accept } for pid=7310 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.718510][ T7309] buffer_io_error: 20 callbacks suppressed [ 181.718597][ T7309] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 181.746385][ T7309] syz.1.881: attempt to access beyond end of device [ 181.746385][ T7309] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 181.766644][ T7315] vfat filesystem being mounted at /149/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 181.792630][ T7309] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 181.798398][ T7315] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 181.825724][ T7309] syz.1.881: attempt to access beyond end of device [ 181.825724][ T7309] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 181.830341][ T7315] FAT-fs (loop2): Filesystem has been set read-only [ 181.846765][ T7309] syz.1.881: attempt to access beyond end of device [ 181.846765][ T7309] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 181.846801][ T7309] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 181.846826][ T7309] syz.1.881: attempt to access beyond end of device [ 181.846826][ T7309] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 181.846854][ T7309] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 181.847329][ T7309] syz.1.881: attempt to access beyond end of device [ 181.847329][ T7309] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 181.847536][ T7309] syz.1.881: attempt to access beyond end of device [ 181.847536][ T7309] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 181.847591][ T7309] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 181.847613][ T7309] syz.1.881: attempt to access beyond end of device [ 181.847613][ T7309] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 181.847635][ T7309] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 181.847809][ T7309] syz.1.881: attempt to access beyond end of device [ 181.847809][ T7309] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 181.848035][ T7309] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 181.848077][ T7309] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 181.848609][ T7309] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 181.848638][ T7309] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 181.967253][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.048665][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.057456][ T7322] netlink: 22 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.069676][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.081557][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.096563][ T7322] netlink: 22 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.108713][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.118799][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.128172][ T7322] netlink: 22 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.137699][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 182.220036][ T28] audit: type=1400 audit(3927878646.487:1467): avc: denied { accept } for pid=7334 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.549029][ T28] audit: type=1400 audit(3927878646.817:1468): avc: denied { write } for pid=7362 comm="syz.0.897" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 182.590192][ T7363] pim6reg: entered allmulticast mode [ 182.623821][ T28] audit: type=1400 audit(3927878646.817:1469): avc: denied { open } for pid=7362 comm="syz.0.897" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 182.664639][ T7371] set_capacity_and_notify: 5 callbacks suppressed [ 182.664735][ T7371] loop5: detected capacity change from 0 to 512 [ 182.715425][ T7371] EXT4-fs: Ignoring removed bh option [ 182.738100][ T28] audit: type=1400 audit(3927878646.837:1470): avc: denied { getopt } for pid=7362 comm="syz.0.897" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.789904][ T7371] EXT4-fs: inline encryption not supported [ 182.795987][ T7379] loop3: detected capacity change from 0 to 128 [ 182.805452][ T7371] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.888047][ T7371] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.935112][ T7379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 182.944883][ T7379] System zones: 1-3, 19-19, 35-36 [ 182.952141][ T7371] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.898: bg 0: block 248: padding at end of block bitmap is not set [ 182.975631][ T7379] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 182.989968][ T7371] loop5: lost filesystem error report for type 5 error -117 [ 182.994777][ T7371] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.898: Failed to acquire dquot type 1 [ 182.994808][ T7371] loop5: lost filesystem error report for type 5 error -28 [ 182.996308][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 182.996330][ C1] EXT4-fs (loop5): last error at time 3927878647: ext4_acquire_dquot:7034 [ 182.999857][ T7371] EXT4-fs (loop5): 1 truncate cleaned up [ 183.000425][ T7371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 183.084226][ T7379] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.142001][ T7379] EXT4-fs warning (device loop3): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 183.407259][ T7406] tap0: tun_chr_ioctl cmd 1074025677 [ 183.438997][ T7406] tap0: linktype set to 780 [ 183.469739][ T7426] loop1: detected capacity change from 0 to 1024 [ 183.481251][ T7426] EXT4-fs: dax option not supported [ 183.517766][ T7426] vhci_hcd vhci_hcd.3: invalid port number 9 [ 183.536104][ T7426] vhci_hcd vhci_hcd.3: invalid port number 9 [ 183.595752][ T7429] loop1: detected capacity change from 0 to 128 [ 183.610213][ T6926] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 183.634714][ T7429] msdos filesystem being mounted at /158/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 183.772402][ T7433] lo speed is unknown, defaulting to 1000 [ 183.880141][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.969039][ T7440] loop3: detected capacity change from 0 to 1024 [ 183.991692][ T7440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.040157][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.374478][ T7469] loop0: detected capacity change from 0 to 512 [ 184.388846][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 184.388861][ T28] audit: type=1400 audit(3927878648.657:1476): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 184.426554][ T7469] EXT4-fs: Ignoring removed bh option [ 184.438983][ T7469] EXT4-fs: inline encryption not supported [ 184.462532][ T7469] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.533527][ T7469] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 184.553072][ T7469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.922: bg 0: block 248: padding at end of block bitmap is not set [ 184.567568][ T7469] loop0: lost filesystem error report for type 5 error -117 [ 184.572460][ T7484] loop1: detected capacity change from 0 to 1024 [ 184.579862][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 184.579889][ C0] EXT4-fs (loop0): last error at time 3927878648: ext4_validate_block_bitmap:441 [ 184.628704][ T7484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 184.638516][ T28] audit: type=1400 audit(3927878648.907:1477): avc: denied { ioctl } for pid=7475 comm="syz.2.927" path="socket:[16155]" dev="sockfs" ino=16155 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.658893][ T7484] System zones: 0-1, 3-8 [ 184.685110][ T7469] Quota error (device loop0): write_blk: dquota write failed [ 184.694408][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.754023][ T7469] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 184.765680][ T7484] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.791363][ T7469] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.922: Failed to acquire dquot type 1 [ 184.842500][ T7469] loop0: lost filesystem error report for type 5 error -28 [ 184.843017][ T7469] EXT4-fs (loop0): 1 truncate cleaned up [ 184.861077][ T7469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 185.019669][ T7498] tap0: tun_chr_ioctl cmd 1074025677 [ 185.033912][ T7498] tap0: linktype set to 780 [ 185.053481][ T7465] ================================================================== [ 185.061638][ T7465] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 185.069495][ T7465] [ 185.071848][ T7465] write to 0xffffea00064a9158 of 8 bytes by task 7394 on cpu 1: [ 185.079517][ T7465] __filemap_remove_folio+0x201/0x2e0 [ 185.084935][ T7465] filemap_remove_folio+0x6d/0x1d0 [ 185.090097][ T7465] truncate_inode_folio+0x42/0x50 [ 185.095151][ T7465] shmem_undo_range+0x26d/0xb10 [ 185.100024][ T7465] shmem_evict_inode+0x12e/0x540 [ 185.104996][ T7465] evict+0x2af/0x510 [ 185.108930][ T7465] iput+0x41a/0x580 [ 185.112765][ T7465] dentry_unlink_inode+0x26f/0x290 [ 185.117914][ T7465] __dentry_kill+0x145/0x4d0 [ 185.122543][ T7465] finish_dput+0x2b/0x200 [ 185.126901][ T7465] dput+0x52/0x60 [ 185.130563][ T7465] __fput+0x444/0x630 [ 185.134576][ T7465] ____fput+0x1c/0x30 [ 185.138594][ T7465] task_work_run+0x130/0x1a0 [ 185.143219][ T7465] do_exit+0x4ae/0x1530 [ 185.147405][ T7465] do_group_exit+0xfe/0x140 [ 185.151938][ T7465] get_signal+0xe30/0xf20 [ 185.156293][ T7465] arch_do_signal_or_restart+0x96/0x480 [ 185.161884][ T7465] irqentry_exit+0x145/0x5d0 [ 185.166498][ T7465] exc_general_protection+0x155/0x1e0 [ 185.171905][ T7465] asm_exc_general_protection+0x26/0x30 [ 185.177483][ T7465] [ 185.179831][ T7465] read to 0xffffea00064a9158 of 8 bytes by task 7465 on cpu 0: [ 185.187396][ T7465] folio_mapping+0xa1/0xe0 [ 185.191847][ T7465] evict_folios+0x297c/0x3370 [ 185.196592][ T7465] try_to_shrink_lruvec+0x858/0xc20 [ 185.201826][ T7465] shrink_lruvec+0x256/0x1bc0 [ 185.206528][ T7465] shrink_node+0x697/0x20a0 [ 185.211060][ T7465] do_try_to_free_pages+0x408/0xc90 [ 185.216285][ T7465] try_to_free_mem_cgroup_pages+0x201/0x420 [ 185.222204][ T7465] try_charge_memcg+0x373/0xa10 [ 185.227086][ T7465] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 185.232663][ T7465] __alloc_frozen_pages_noprof+0x18a/0x350 [ 185.238497][ T7465] alloc_pages_mpol+0xb3/0x260 [ 185.243287][ T7465] alloc_pages_noprof+0x8f/0x140 [ 185.248248][ T7465] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 185.254159][ T7465] __kvmalloc_node_noprof+0x3d4/0x640 [ 185.259549][ T7465] futex_hash_allocate+0x190/0x9a0 [ 185.264689][ T7465] futex_hash_prctl+0xd8/0xf0 [ 185.269402][ T7465] __se_sys_prctl+0x4f4/0x1400 [ 185.274194][ T7465] __x64_sys_prctl+0x67/0x80 [ 185.278809][ T7465] x64_sys_call+0x2533/0x3020 [ 185.283517][ T7465] do_syscall_64+0x12c/0x3b0 [ 185.288138][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.294060][ T7465] [ 185.296397][ T7465] value changed: 0xffff88812cd33a50 -> 0x0000000000000000 [ 185.303519][ T7465] [ 185.305851][ T7465] Reported by Kernel Concurrency Sanitizer on: [ 185.312031][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.0.922 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.322822][ T7465] Tainted: [W]=WARN [ 185.326635][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.336705][ T7465] ================================================================== [ 185.373418][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.833178][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 186.245556][ T28] audit: type=1400 audit(3927878650.507:1478): avc: denied { write } for pid=7500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.280213][ T28] audit: type=1400 audit(3927878650.547:1479): avc: denied { write } for pid=7511 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.868125][ T28] audit: type=1400 audit(3927878651.137:1480): avc: denied { write } for pid=7514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.902505][ T28] audit: type=1400 audit(3927878651.167:1481): avc: denied { write } for pid=7525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.001690][ T28] audit: type=1400 audit(3927878651.267:1482): avc: denied { write } for pid=7528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.034477][ T28] audit: type=1400 audit(3927878651.297:1483): avc: denied { write } for pid=7539 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1